last executing test programs: 5.061915094s ago: executing program 0 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.991609396s ago: executing program 1 (id=1261): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x26) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xfffffff8, 0x6, 0xffffff70, 0x2, 0x4d, "0d418107050088b791e15b34f96ff88c6b00", 0xfff, 0x140223}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) 4.912232154s ago: executing program 1 (id=1262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) write(r0, &(0x7f0000000080)='4', 0x1) 4.399165586s ago: executing program 0 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.274121729s ago: executing program 3 (id=1265): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.124242777s ago: executing program 0 (id=1267): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff}, 0x6) socket(0x2, 0x80805, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='myproc\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r1) keyctl$update(0x2, 0x0, 0x0, 0x5f) mkdir(0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0xfa0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) getsockname(r3, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='usb1', 0x4) syz_io_uring_setup(0x374a, &(0x7f0000000180)={0x0, 0x9ff0, 0x0, 0x3, 0x104, 0x0, r0}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='myproc\x00', &(0x7f0000000340), 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="d02c6575d9d22a73dcc57fa8868a69643e46876c4827ecdf07ee3e3777946aa848726964fc7d253102ce296ee332ad54db4881ce000000000000", @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mmap$IORING_OFF_PBUF_RING(0x0, 0xb, 0x2000008, 0x50, 0xffffffffffffffff, 0x87acb627) 3.979212204s ago: executing program 3 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000810) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050004003"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.773128833s ago: executing program 0 (id=1271): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'pim6reg0\x00', {0x1}}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.746784779s ago: executing program 3 (id=1272): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x26) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xfffffff8, 0x6, 0xffffff70, 0x2, 0x4d, "0d418107050088b791e15b34f96ff88c6b00", 0xfff, 0x140223}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) 3.600735559s ago: executing program 3 (id=1273): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3.408731764s ago: executing program 1 (id=1274): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001a80)={0x0, 0x0, 0x5, &(0x7f00000019c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x140a}}, {0x0, 0x0}]}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c0c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xba, 0x0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x611}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xa3, 0xd5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf9, 0x5, 0x9}}]}}}]}}]}}, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r5 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.40765208s ago: executing program 0 (id=1275): r0 = getpid() socket(0xf, 0x3, 0x80000001) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f0000000040)='./config\x00', 0x400040, 0x10) mkdirat(r2, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x271b, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000340), 0x40, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) 3.407292697s ago: executing program 2 (id=1276): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x934, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfd, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0xa}}}}}]}}]}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r1, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 3.270058431s ago: executing program 3 (id=1278): lsm_list_modules(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "1dedadef9e30ce93", "b3690ff2cba5b95ebc143dbe34d689b5", "011b8426", "49b4a72600"}, 0x28) sendto$inet(r1, &(0x7f0000000000)='\x00', 0xfffffffffffffe47, 0x40, 0x0, 0x0) 3.192762278s ago: executing program 0 (id=1279): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000880), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0xfffc, 0x1, 0x3, &(0x7f0000000040)="2f2ceb"}], 0x1}) 1.866840377s ago: executing program 3 (id=1284): pipe(0x0) close(0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 1.621320904s ago: executing program 4 (id=1286): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'pim6reg0\x00', {0x1}}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.610733133s ago: executing program 2 (id=1287): fsmount(0xffffffffffffffff, 0x1, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.608892759s ago: executing program 4 (id=1288): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.495364149s ago: executing program 4 (id=1289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x545c, 0x0) 1.325757854s ago: executing program 4 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1.318449037s ago: executing program 1 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x158) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101003, 0x5) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x200, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c00048008000100"], 0x88}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000700)) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000002800)=""/238, 0xee}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f00000003c0)=""/52, 0x34}], 0xa, 0xdf3, 0x8df9) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000380)={0x8000000}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000003240)) 1.139369765s ago: executing program 2 (id=1292): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff}, 0x6) socket(0x2, 0x80805, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='myproc\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r1) keyctl$update(0x2, 0x0, 0x0, 0x5f) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0xfa0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) getsockname(r3, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='usb1', 0x4) syz_io_uring_setup(0x374a, &(0x7f0000000180)={0x0, 0x9ff0, 0x0, 0x3, 0x104, 0x0, r0}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='myproc\x00', &(0x7f0000000340), 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="d02c6575d9d22a73dcc57fa8868a69643e46876c4827ecdf07ee3e3777946aa848726964fc7d253102ce296ee332ad54db4881ce000000000000", @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mmap$IORING_OFF_PBUF_RING(0x0, 0xb, 0x2000008, 0x50, 0xffffffffffffffff, 0x87acb627) 1.013129733s ago: executing program 2 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000810) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050004003"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 999.561084ms ago: executing program 1 (id=1294): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcecaf306}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) 976.083392ms ago: executing program 4 (id=1295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 877.905449ms ago: executing program 2 (id=1296): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x8, 0x2, 0x8, 0x5}, 0x10) 790.107879ms ago: executing program 4 (id=1297): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 3.292476ms ago: executing program 1 (id=1298): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 2 (id=1299): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) kernel console output (not intermixed with test programs): c0000 [ 268.503166][ T31] audit: type=1326 audit(1787776406.702:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.2.611" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 268.503215][ T31] audit: type=1326 audit(1787776406.702:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.2.611" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 268.503265][ T31] audit: type=1326 audit(1787776406.702:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.2.611" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 268.503314][ T31] audit: type=1326 audit(1787776406.702:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.2.611" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 269.078688][ T7898] loop1: detected capacity change from 0 to 512 [ 269.090620][ T7898] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 270.205862][ T7914] tipc: Enabling of bearer rejected, already enabled [ 270.373585][ T7917] futex_wake_op: syz.4.616 tries to shift op by -1; fix this program [ 270.384496][ T7917] usb usb7: check_ctrlrecip: process 7917 (syz.4.616) requesting ep 01 but needs 81 [ 270.384584][ T7917] usb usb7: usbfs: process 7917 (syz.4.616) did not claim interface 0 before use [ 272.934561][ T7935] loop3: detected capacity change from 0 to 256 [ 272.966634][ T7935] exfat: Deprecated parameter 'namecase' [ 273.011857][ T7936] tipc: Enabled bearer , priority 10 [ 273.212674][ T7935] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 275.007034][ T7942] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd4": -EINTR [ 277.920052][ T7999] tipc: Enabling of bearer rejected, already enabled [ 278.187451][ T8010] loop2: detected capacity change from 0 to 512 [ 278.262505][ T8010] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 281.672738][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 281.673633][ T31] audit: type=1326 audit(1787776420.312:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.673880][ T31] audit: type=1326 audit(1787776420.322:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.674083][ T31] audit: type=1326 audit(1787776420.322:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.674278][ T31] audit: type=1326 audit(1787776420.322:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.674499][ T31] audit: type=1326 audit(1787776420.322:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.681554][ T31] audit: type=1326 audit(1787776420.322:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.746037][ T5754] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 281.886556][ T31] audit: type=1326 audit(1787776420.322:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.886818][ T31] audit: type=1326 audit(1787776420.322:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.887048][ T31] audit: type=1326 audit(1787776420.322:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 281.887267][ T31] audit: type=1326 audit(1787776420.332:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 282.134851][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 282.187714][ T5754] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.204204][ T5754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.204279][ T5754] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.204330][ T5754] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.204392][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.248287][ T5754] usb 3-1: config 0 descriptor?? [ 282.275936][ T5754] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 283.557563][ T8059] loop1: detected capacity change from 0 to 512 [ 283.926557][ T8059] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 284.602857][ T5734] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.728081][ T5719] usb 3-1: USB disconnect, device number 21 [ 285.405291][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 285.431168][ T5734] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.497498][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.497554][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.497618][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.556327][ T5734] usb 5-1: config 0 descriptor?? [ 285.815876][ T8073] loop1: detected capacity change from 0 to 256 [ 285.828161][ T8073] exfat: Deprecated parameter 'utf8' [ 285.828211][ T8073] exfat: Deprecated parameter 'utf8' [ 285.828776][ T8073] exfat: Deprecated parameter 'namecase' [ 285.828923][ T8073] exfat: Deprecated parameter 'namecase' [ 285.911508][ T8073] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 286.001520][ T8075] ALSA: seq fatal error: cannot create timer (-19) [ 286.134767][ T5734] usbhid 5-1:0.0: can't add hid device: -71 [ 286.134896][ T5734] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 286.173022][ T5734] usb 5-1: USB disconnect, device number 21 [ 287.281653][ T8088] syzkaller0: entered promiscuous mode [ 287.294279][ T8088] syzkaller0: entered allmulticast mode [ 288.680912][ T966] libceph: connect (1)[c::]:6789 error -101 [ 288.681099][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 288.845056][ T5754] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 288.963901][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 288.964083][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 289.032677][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 289.038692][ T5754] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 289.065401][ T5754] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 289.065450][ T5754] usb 5-1: config 139 has no interface number 0 [ 289.065498][ T5754] usb 5-1: config 139 interface 49 has no altsetting 0 [ 289.100937][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.101001][ T5754] usb 5-1: Product: syz [ 289.101036][ T5754] usb 5-1: Manufacturer: syz [ 289.101057][ T5754] usb 5-1: SerialNumber: syz [ 289.208063][ T8108] ceph: No mds server is up or the cluster is laggy [ 289.402426][ T8118] loop1: detected capacity change from 0 to 1024 [ 289.418290][ T8118] EXT4-fs: Ignoring removed bh option [ 289.424946][ T8118] EXT4-fs: Ignoring removed bh option [ 289.434931][ T8118] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 289.470352][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.526416][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.622056][ T5754] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244) [ 289.626963][ T8118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.665096][ T5754] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 289.675226][ T8118] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.675: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 289.696021][ T5754] usbhid 5-1:139.49: couldn't find an input interrupt endpoint [ 289.707848][ T5754] usb 5-1: USB disconnect, device number 22 [ 289.718676][ T5718] udevd[5718]: setting mode of /dev/bus/usb/005/022 to 020664 failed: No such file or directory [ 289.722380][ T5718] udevd[5718]: setting owner of /dev/bus/usb/005/022 to uid=0, gid=0 failed: No such file or directory [ 289.765597][ T8118] EXT4-fs (loop1): Remounting filesystem read-only [ 289.765647][ T8118] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 289.938653][ T8136] loop2: detected capacity change from 0 to 256 [ 289.958301][ T8136] exfat: Deprecated parameter 'utf8' [ 289.967054][ T8136] exfat: Deprecated parameter 'utf8' [ 289.974490][ T8136] exfat: Deprecated parameter 'namecase' [ 289.980310][ T8136] exfat: Deprecated parameter 'namecase' [ 290.032921][ T8136] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 290.484130][ T5683] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 290.632730][ T5683] usb 5-1: Using ep0 maxpacket: 16 [ 291.053516][ T5683] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.065392][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.077913][ T5683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 291.090985][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.122949][ T5683] usb 5-1: config 0 descriptor?? [ 291.646087][ T8146] ALSA: seq fatal error: cannot create timer (-19) [ 292.399490][ T5683] usbhid 5-1:0.0: can't add hid device: -71 [ 292.399927][ T5683] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 292.410182][ T5683] usb 5-1: USB disconnect, device number 23 [ 293.832779][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 293.841784][ T31] audit: type=1800 audit(1787776432.562:140): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.685" name="idProduct" dev="configfs" ino=18654 res=0 errno=0 [ 294.832871][ T5683] libceph: connect (1)[c::]:6789 error -101 [ 294.835153][ T5683] libceph: mon0 (1)[c::]:6789 connect error [ 295.148832][ T5683] libceph: connect (1)[c::]:6789 error -101 [ 295.149265][ T5683] libceph: mon0 (1)[c::]:6789 connect error [ 295.423171][ T8170] ceph: No mds server is up or the cluster is laggy [ 295.722490][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.769987][ T8190] binder: 8189:8190 ioctl 4018620d 0 returned -22 [ 298.052663][ T189] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 298.122695][ T5754] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 298.243845][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 298.245718][ T189] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.250460][ T189] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.250543][ T189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.250628][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.272743][ T189] usb 5-1: config 0 descriptor?? [ 298.294898][ T5719] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 298.305589][ T189] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 298.313125][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 298.318978][ T5754] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 298.329932][ T5754] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 298.329965][ T5754] usb 2-1: config 139 has no interface number 0 [ 298.329995][ T5754] usb 2-1: config 139 interface 49 has no altsetting 0 [ 298.454365][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 298.488216][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.488262][ T5754] usb 2-1: Product: syz [ 298.488298][ T5754] usb 2-1: Manufacturer: syz [ 298.488328][ T5754] usb 2-1: SerialNumber: syz [ 298.745957][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.757935][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.767635][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 298.785770][ T5754] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 298.796687][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 298.815392][ T5754] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 298.825805][ T5754] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 298.844125][ T5754] usb 2-1: USB disconnect, device number 33 [ 298.911732][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.911808][ T5719] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 298.915574][ T5719] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 298.915675][ T5719] usb 4-1: can't read configurations, error -71 [ 298.957904][ T5734] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 299.112656][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 299.524973][ T31] audit: type=1800 audit(1787776437.256:141): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.702" name="idProduct" dev="configfs" ino=18819 res=0 errno=0 [ 300.119345][ T8217] loop1: detected capacity change from 0 to 1024 [ 300.134362][ T8217] EXT4-fs: Ignoring removed bh option [ 300.137158][ T8217] EXT4-fs: Ignoring removed bh option [ 300.147146][ T8217] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 300.210619][ T8217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.226136][ T8217] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.703: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 300.249621][ T8217] EXT4-fs (loop1): Remounting filesystem read-only [ 300.249698][ T8217] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 300.299084][ T8225] tipc: Enabled bearer , priority 10 [ 300.455592][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.755214][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.755270][ T5734] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 300.755311][ T5734] usb 3-1: no configurations [ 300.755323][ T5734] usb 3-1: can't read configurations, error -22 [ 300.843887][ T5741] usb 5-1: USB disconnect, device number 24 [ 301.038133][ T5754] hid_parser_main: 4 callbacks suppressed [ 301.038235][ T5754] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 301.326877][ T5754] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.491045][ T8251] fido_id[8251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 301.876390][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 302.553188][ T5754] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 302.862656][ T5754] usb 2-1: Using ep0 maxpacket: 16 [ 302.864242][ T5754] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 302.867353][ T5754] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.867433][ T5754] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.867517][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.887485][ T5754] usb 2-1: config 0 descriptor?? [ 303.597440][ T5754] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 303.632659][ T5734] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 303.784785][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 303.868621][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.868695][ T5734] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 303.888788][ T5734] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 303.888845][ T5734] usb 4-1: can't read configurations, error -71 [ 304.952743][ T5683] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 305.116290][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 305.122965][ T5683] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.135103][ T5683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 305.149894][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.149940][ T5683] usb 5-1: Product: syz [ 305.149974][ T5683] usb 5-1: Manufacturer: syz [ 305.149996][ T5683] usb 5-1: SerialNumber: syz [ 305.180930][ T5683] usb 5-1: config 0 descriptor?? [ 305.192219][ T8295] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 305.203888][ T5683] hub 5-1:0.0: bad descriptor, ignoring hub [ 305.203937][ T5683] hub 5-1:0.0: probe with driver hub failed with error -5 [ 305.258192][ T5683] usb 2-1: USB disconnect, device number 34 [ 305.710708][ T5683] usb 5-1: USB disconnect, device number 25 [ 305.880963][ T8323] loop3: detected capacity change from 0 to 1024 [ 305.890518][ T8323] EXT4-fs: Ignoring removed bh option [ 305.896201][ T8323] EXT4-fs: Ignoring removed bh option [ 305.935305][ T8323] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 306.057856][ T8323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.146345][ T8323] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz.3.733: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 306.168181][ T8323] EXT4-fs (loop3): Remounting filesystem read-only [ 306.168208][ T8323] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 306.224326][ T5683] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 306.383537][ T5683] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.394428][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 306.411116][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.411183][ T5683] usb 5-1: Product: syz [ 306.411207][ T5683] usb 5-1: Manufacturer: syz [ 306.411228][ T5683] usb 5-1: SerialNumber: syz [ 306.440748][ T5683] usb 5-1: config 0 descriptor?? [ 306.448901][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.458595][ T5683] hub 5-1:0.0: bad descriptor, ignoring hub [ 306.458652][ T5683] hub 5-1:0.0: probe with driver hub failed with error -5 [ 306.596752][ T8322] loop1: detected capacity change from 0 to 32768 [ 306.623300][ T8322] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 306.690419][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.704288][ T8322] XFS (loop1): Ending clean mount [ 306.774666][ T5683] usb 5-1: USB disconnect, device number 26 [ 306.801253][ T8322] XFS (loop1): User initiated shutdown received. [ 306.801319][ T8322] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 306.801394][ T8322] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 306.877364][ T8346] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 306.984952][ T5620] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.973627][ T8376] loop4: detected capacity change from 0 to 512 [ 309.989946][ T8376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 310.096023][ T8376] EXT4-fs (loop4): 1 orphan inode deleted [ 310.099592][ T8376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.103333][ T8376] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.118224][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 310.118714][ T56] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 310.164067][ T8376] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #12: block 13: comm syz.4.746: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 310.184700][ T8383] loop3: detected capacity change from 0 to 1024 [ 310.193025][ T8383] EXT4-fs: Ignoring removed bh option [ 310.193132][ T8383] EXT4-fs: Ignoring removed bh option [ 310.209065][ T8383] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 310.241801][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.282244][ T8383] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz.3.747: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 310.284690][ T8383] EXT4-fs (loop3): Remounting filesystem read-only [ 310.284745][ T8383] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 310.325432][ T5741] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 310.328006][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 310.328109][ T56] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 310.328367][ T56] loop4: lost filesystem error report for type 5 error -117 [ 310.355810][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.482899][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 310.502704][ T5683] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 310.652592][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 310.662714][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.670688][ T5683] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 310.682405][ T5683] usb 2-1: config 14 has an invalid interface number: 57 but max is 0 [ 310.682453][ T5683] usb 2-1: config 14 has no interface number 0 [ 310.682545][ T5683] usb 2-1: config 14 interface 57 has no altsetting 0 [ 310.706927][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.715189][ T5683] usb 2-1: Product: syz [ 310.715210][ T5683] usb 2-1: Manufacturer: syz [ 310.715227][ T5683] usb 2-1: SerialNumber: syz [ 310.896273][ T8387] loop4: detected capacity change from 0 to 32768 [ 310.938100][ T8387] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 310.995802][ T8387] XFS (loop4): Ending clean mount [ 311.027396][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.085665][ T8387] XFS (loop4): User initiated shutdown received. [ 311.093094][ T8387] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 311.107398][ T8387] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 311.171434][ T5683] legousbtower 2-1:14.57: interrupt endpoints not found [ 311.178983][ T5626] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 311.689753][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.689831][ T5741] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 311.689973][ T5741] usb 3-1: no configurations [ 311.690067][ T5741] usb 3-1: can't read configurations, error -22 [ 312.732665][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 312.883413][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 312.885690][ T44] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.889651][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 313.622596][ T44] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 313.622648][ T44] usb 5-1: Product: syz [ 313.622684][ T44] usb 5-1: Manufacturer: syz [ 313.622705][ T44] usb 5-1: SerialNumber: syz [ 313.751338][ T44] usb 5-1: config 0 descriptor?? [ 313.757103][ T8410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.767701][ T44] hub 5-1:0.0: bad descriptor, ignoring hub [ 313.767750][ T44] hub 5-1:0.0: probe with driver hub failed with error -5 [ 313.917980][ T44] usb 2-1: USB disconnect, device number 35 [ 314.353024][ T31] audit: type=1800 audit(1787776449.075:142): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.759" name="idProduct" dev="configfs" ino=19240 res=0 errno=0 [ 314.427593][ T5734] usb 5-1: USB disconnect, device number 27 [ 314.719362][ T5719] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 314.903981][ T8445] loop1: detected capacity change from 0 to 1024 [ 314.915281][ T8445] EXT4-fs: Ignoring removed bh option [ 314.915473][ T8445] EXT4-fs: Ignoring removed bh option [ 314.928031][ T8445] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 314.992903][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 314.995462][ T5719] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 314.998454][ T5719] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.998538][ T5719] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.998607][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.998734][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.005836][ T8445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.067788][ T8449] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.760: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 315.080755][ T5719] usb 4-1: config 0 descriptor?? [ 315.103516][ T8449] EXT4-fs (loop1): Remounting filesystem read-only [ 315.103567][ T8449] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 315.147072][ T8445] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 315.203267][ T5734] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 315.265193][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.369808][ T5734] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 315.377925][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 315.382271][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 315.382298][ T5734] usb 5-1: Product: syz [ 315.382341][ T5734] usb 5-1: Manufacturer: syz [ 315.382358][ T5734] usb 5-1: SerialNumber: syz [ 315.420463][ T5734] usb 5-1: config 0 descriptor?? [ 315.430065][ T8410] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 315.441358][ T5734] hub 5-1:0.0: bad descriptor, ignoring hub [ 315.441424][ T5734] hub 5-1:0.0: probe with driver hub failed with error -5 [ 315.456753][ T44] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 315.544606][ T5719] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 315.612630][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 315.618330][ T44] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 315.628867][ T44] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 315.637304][ T44] usb 3-1: config 139 has no interface number 0 [ 315.637342][ T44] usb 3-1: config 139 interface 49 has no altsetting 0 [ 315.663845][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.663885][ T44] usb 3-1: Product: syz [ 315.663920][ T44] usb 3-1: Manufacturer: syz [ 315.663938][ T44] usb 3-1: SerialNumber: syz [ 315.744728][ T5719] usb 4-1: USB disconnect, device number 29 [ 315.772953][ T5741] usb 5-1: USB disconnect, device number 28 [ 315.847813][ T5754] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 315.906332][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.915391][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.926603][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 315.965536][ T44] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 315.983311][ T44] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 315.995581][ T44] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 316.005639][ T5754] usb 2-1: Using ep0 maxpacket: 16 [ 316.017170][ T44] usb 3-1: USB disconnect, device number 26 [ 316.329875][ T31] audit: type=1800 audit(1787776451.055:143): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.767" name="idProduct" dev="configfs" ino=19275 res=0 errno=0 [ 317.817235][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.817321][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.884429][ T8474] : renamed from bond_slave_0 (while UP) [ 318.013798][ T8479] 9p: Bad value for 'rfdno' [ 318.899530][ T8486] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 319.076746][ T8492] loop2: detected capacity change from 0 to 1024 [ 319.086732][ T8492] EXT4-fs: Ignoring removed bh option [ 319.086948][ T8492] EXT4-fs: Ignoring removed bh option [ 319.129274][ T8492] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 319.193335][ T8492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.235887][ T8492] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 7: comm syz.2.774: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 319.256686][ T8492] EXT4-fs (loop2): Remounting filesystem read-only [ 319.256712][ T8492] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 319.332322][ T8496] Too few erase blocks (0) [ 319.555451][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.555546][ T5754] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 319.556262][ T5754] usb 2-1: no configurations [ 319.556286][ T5754] usb 2-1: can't read configurations, error -22 [ 319.722757][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 319.776152][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.872770][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 319.878821][ T5815] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 319.890561][ T5815] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.901911][ T5815] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.911844][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.911921][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.929275][ T5815] usb 4-1: config 0 descriptor?? [ 320.082689][ T5719] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 320.233621][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 320.235803][ T5719] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 320.237039][ T5719] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 320.237072][ T5719] usb 3-1: config 139 has no interface number 0 [ 320.237108][ T5719] usb 3-1: config 139 interface 49 has no altsetting 0 [ 320.241407][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.241441][ T5719] usb 3-1: Product: syz [ 320.241475][ T5719] usb 3-1: Manufacturer: syz [ 320.241495][ T5719] usb 3-1: SerialNumber: syz [ 320.355634][ T5815] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 320.494957][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.503443][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.508174][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 320.580911][ T5719] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 320.587969][ T5734] usb 4-1: USB disconnect, device number 30 [ 320.651462][ T5719] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 320.652484][ T5719] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 320.686704][ T5719] usb 3-1: USB disconnect, device number 27 [ 321.125245][ T31] audit: type=1800 audit(1787776455.845:144): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.781" name="idProduct" dev="configfs" ino=19335 res=0 errno=0 [ 321.670825][ T8520] syzkaller0: entered promiscuous mode [ 321.670874][ T8520] syzkaller0: entered allmulticast mode [ 321.817124][ T8528] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 322.097225][ T8537] loop1: detected capacity change from 0 to 2048 [ 322.125485][ T8537] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 322.142201][ T8537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.157249][ T31] audit: type=1800 audit(1787776455.891:145): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 322.284933][ T5734] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 322.443296][ T5734] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.454939][ T5734] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 322.455008][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.455041][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.455073][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.455107][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.455155][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.532918][ T5734] usb 3-1: config 0 descriptor?? [ 322.541439][ T8535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.852990][ T5754] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 323.002748][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 323.004947][ T5754] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 323.015349][ T5754] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.015898][ T5754] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.017476][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.017859][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.166061][ T5754] usb 4-1: config 0 descriptor?? [ 323.676184][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.676254][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.676312][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.676406][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.676527][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.676635][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.677170][ T5719] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 323.677730][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.677897][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.677972][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.678102][ T5734] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 323.803537][ T5754] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 323.854609][ T5734] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 323.872222][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.872298][ T5719] usb 2-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 323.879918][ T5719] usb 2-1: config 4 has an invalid interface number: 118 but max is 1 [ 323.879974][ T5719] usb 2-1: config 4 has an invalid interface number: 104 but max is 1 [ 323.879995][ T5719] usb 2-1: config 4 has no interface number 0 [ 323.880012][ T5719] usb 2-1: config 4 has no interface number 1 [ 323.880051][ T5719] usb 2-1: config 4 interface 118 has no altsetting 0 [ 323.905361][ T5719] usb 2-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 323.905394][ T5719] usb 2-1: Manufacturer: syz [ 323.905412][ T5719] usb 2-1: SerialNumber: syz [ 324.017689][ T5754] usb 4-1: USB disconnect, device number 31 [ 324.213182][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.226842][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.250578][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 324.437898][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.448856][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.692459][ T5719] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 324.898936][ T5719] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 324.899024][ T5719] dib0700: firmware download failed at 7 with -22 [ 324.944583][ T5719] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 324.957404][ T5719] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 324.967619][ T5719] dib0700: firmware download failed at 7 with -22 [ 324.984305][ T5719] usb 2-1: USB disconnect, device number 38 [ 325.520473][ T44] usb 3-1: USB disconnect, device number 28 [ 326.909988][ T31] audit: type=1800 audit(1787776459.642:146): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.814" name="idProduct" dev="configfs" ino=20420 res=0 errno=0 [ 327.279658][ T8602] tipc: Enabling of bearer rejected, already enabled [ 328.101542][ T8643] futex_wake_op: syz.1.817 tries to shift op by -1; fix this program [ 328.103550][ T8643] usb usb7: check_ctrlrecip: process 8643 (syz.1.817) requesting ep 01 but needs 81 [ 328.103633][ T8643] usb usb7: usbfs: process 8643 (syz.1.817) did not claim interface 0 before use [ 328.139146][ T8640] loop3: detected capacity change from 0 to 1024 [ 328.157084][ T8640] EXT4-fs: Ignoring removed bh option [ 328.157197][ T8640] EXT4-fs: Ignoring removed bh option [ 328.163856][ T8640] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 328.862208][ T8640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.881084][ T8639] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz.3.821: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 328.885592][ T8639] EXT4-fs (loop3): Remounting filesystem read-only [ 328.885622][ T8639] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 329.269902][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.344032][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 329.435934][ T31] audit: type=1800 audit(1787776461.171:147): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.827" name="idProduct" dev="configfs" ino=21585 res=0 errno=0 [ 329.518377][ T8666] tipc: Enabling of bearer rejected, already enabled [ 329.533363][ T5734] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 331.159996][ T8689] jffs2: notice: (8689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.474918][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.474999][ T5734] usb 3-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 331.512519][ T8693] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.585146][ T5734] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 331.585203][ T5734] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 331.585226][ T5734] usb 3-1: config 4 has no interface number 0 [ 331.585283][ T5734] usb 3-1: config 4 has no interface number 1 [ 331.585410][ T5734] usb 3-1: config 4 interface 118 has no altsetting 0 [ 331.803354][ T5734] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 331.803410][ T5734] usb 3-1: Manufacturer: syz [ 331.803445][ T5734] usb 3-1: SerialNumber: syz [ 332.522340][ T5734] usb 3-1: can't set config #4, error -71 [ 332.598528][ T5734] usb 3-1: USB disconnect, device number 29 [ 333.085534][ T8707] futex_wake_op: syz.0.836 tries to shift op by -1; fix this program [ 333.095254][ T8707] usb usb7: check_ctrlrecip: process 8707 (syz.0.836) requesting ep 01 but needs 81 [ 333.095288][ T8707] usb usb7: usbfs: process 8707 (syz.0.836) did not claim interface 0 before use [ 333.122107][ T31] audit: type=1800 audit(1787776464.851:148): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.840" name="idProduct" dev="configfs" ino=21650 res=0 errno=0 [ 333.242773][ T5734] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 333.392660][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 333.398691][ T5734] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.413976][ T5734] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.426480][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 333.434375][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.453191][ T5734] usb 2-1: config 0 descriptor?? [ 334.189914][ T5719] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 334.208487][ T5734] usbhid 2-1:0.0: can't add hid device: -71 [ 334.215076][ T5734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 334.232415][ T5734] usb 2-1: USB disconnect, device number 39 [ 335.033318][ T8725] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 335.056289][ T5719] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.062005][ T5719] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 335.062173][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.062260][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.062336][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 335.062453][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.062715][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.077466][ T5719] usb 4-1: config 0 descriptor?? [ 335.080801][ T8716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 335.464549][ T8729] Too few erase blocks (0) [ 335.497491][ T8732] tipc: Enabling of bearer rejected, already enabled [ 335.529708][ T5719] hid_parser_main: 5 callbacks suppressed [ 335.536233][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536295][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536392][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536482][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536557][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536636][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536701][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536780][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536852][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 335.536919][ T5719] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 336.378624][ T5719] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 336.528717][ T5815] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 336.775529][ T8761] futex_wake_op: syz.4.856 tries to shift op by -1; fix this program [ 336.787464][ T8761] usb usb7: check_ctrlrecip: process 8761 (syz.4.856) requesting ep 01 but needs 81 [ 336.787498][ T8761] usb usb7: usbfs: process 8761 (syz.4.856) did not claim interface 0 before use [ 336.799086][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 337.123307][ T5719] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 337.193955][ T44] usb 4-1: USB disconnect, device number 32 [ 337.273530][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 337.350549][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.350629][ T5719] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 337.355174][ T5719] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 337.355284][ T5719] usb 2-1: can't read configurations, error -71 [ 338.107391][ T5741] kernel write not supported for file /bus/input/handlers (pid: 5741 comm: kworker/1:3) [ 338.622568][ T5734] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 338.742926][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.743001][ T5815] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 338.743058][ T5815] usb 3-1: no configurations [ 338.743076][ T5815] usb 3-1: can't read configurations, error -22 [ 338.793525][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 338.809559][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.809629][ T5734] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 338.830343][ T5734] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 338.830389][ T5734] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 338.830460][ T5734] usb 4-1: config 14 has no interface number 0 [ 338.830484][ T5734] usb 4-1: config 14 has no interface number 1 [ 338.830542][ T5734] usb 4-1: config 14 interface 57 has no altsetting 0 [ 338.830566][ T5734] usb 4-1: config 14 interface 228 has no altsetting 0 [ 338.879770][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.888126][ T5734] usb 4-1: Product: syz [ 338.892409][ T5734] usb 4-1: Manufacturer: syz [ 338.892440][ T5734] usb 4-1: SerialNumber: syz [ 339.006489][ T31] audit: type=1800 audit(1787776470.741:149): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.862" name="idProduct" dev="configfs" ino=21855 res=0 errno=0 [ 339.431527][ T5734] legousbtower 4-1:14.57: interrupt endpoints not found [ 339.706710][ T5734] legousbtower 4-1:14.228: interrupt endpoints not found [ 339.864084][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 340.177287][ T31] audit: type=1326 audit(1787776471.911:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.182320][ T31] audit: type=1326 audit(1787776471.911:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.195808][ T31] audit: type=1326 audit(1787776471.911:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.195943][ T31] audit: type=1326 audit(1787776471.911:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.196066][ T31] audit: type=1326 audit(1787776471.911:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.196188][ T31] audit: type=1326 audit(1787776471.911:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.196307][ T31] audit: type=1326 audit(1787776471.911:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.198785][ T31] audit: type=1326 audit(1787776471.911:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 340.198926][ T31] audit: type=1326 audit(1787776471.911:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.868" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d019e0d9 code=0x7ffc0000 [ 341.088024][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 341.615751][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 341.774020][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 341.812929][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.813002][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 341.831855][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 341.841515][ T9] usb 2-1: can't read configurations, error -71 [ 341.881342][ T8840] tipc: Enabling of bearer rejected, already enabled [ 341.935623][ T5815] usb 4-1: USB disconnect, device number 33 [ 343.117226][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 343.117424][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 343.375226][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 343.375657][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 343.743399][ T5734] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 343.856894][ T8851] ceph: No mds server is up or the cluster is laggy [ 343.904418][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 343.913708][ T5734] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 343.926208][ T5734] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.926264][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 343.926306][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.955919][ T5734] usb 2-1: config 0 descriptor?? [ 344.012841][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 344.169114][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.169198][ T44] usb 3-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 344.178925][ T44] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 344.179005][ T44] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 344.179058][ T44] usb 3-1: config 4 has no interface number 0 [ 344.179108][ T44] usb 3-1: config 4 has no interface number 1 [ 344.179209][ T44] usb 3-1: config 4 interface 118 has no altsetting 0 [ 344.204784][ T44] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 344.204871][ T44] usb 3-1: Manufacturer: syz [ 344.204914][ T44] usb 3-1: SerialNumber: syz [ 344.259526][ T8880] syz_tun: entered allmulticast mode [ 344.381464][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 344.383468][ T31] audit: type=1800 audit(1787776476.111:175): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.898" name="idProduct" dev="configfs" ino=21002 res=0 errno=0 [ 344.393875][ T5741] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 344.510485][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.516894][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.544330][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 344.559835][ T5741] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.560304][ T5741] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 344.568234][ T5741] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 344.568360][ T5741] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 344.568382][ T5741] usb 4-1: config 14 has no interface number 0 [ 344.568398][ T5741] usb 4-1: config 14 has no interface number 1 [ 344.568565][ T5741] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 344.568691][ T5741] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 344.569047][ T5741] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 344.569123][ T5741] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 344.569244][ T5741] usb 4-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.569319][ T5741] usb 4-1: config 14 interface 57 has no altsetting 0 [ 344.569432][ T5741] usb 4-1: config 14 interface 228 has no altsetting 0 [ 344.594895][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.594970][ T5741] usb 4-1: Product: syz [ 344.605290][ T5741] usb 4-1: Manufacturer: syz [ 344.605351][ T5741] usb 4-1: SerialNumber: syz [ 344.698678][ T5734] usbhid 2-1:0.0: can't add hid device: -71 [ 344.701553][ T5734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 344.782958][ T5734] usb 2-1: USB disconnect, device number 44 [ 344.819004][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.881830][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.980363][ T8878] syz_tun: left allmulticast mode [ 345.199224][ T44] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 345.225551][ T5741] legousbtower 4-1:14.57: interrupt endpoints not found [ 345.330779][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 345.332041][ T44] dib0700: firmware download failed at 7 with -22 [ 345.390974][ T44] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 345.395868][ T5741] legousbtower 4-1:14.228: interrupt endpoints not found [ 345.408559][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 345.408701][ T44] dib0700: firmware download failed at 7 with -22 [ 345.491507][ T44] usb 3-1: USB disconnect, device number 32 [ 347.513081][ T5734] usb 4-1: USB disconnect, device number 34 [ 348.105809][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025ca9400: rx timeout, send abort [ 348.605890][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025ca9400: abort rx timeout. Force session deactivation [ 348.606107][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ee6000: rx timeout, send abort [ 348.872836][ T8921] tipc: Enabling of bearer rejected, already enabled [ 348.918318][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 348.918763][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 348.934420][ T8913] ceph: No mds server is up or the cluster is laggy [ 349.046590][ T8927] jffs2: notice: (8927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 349.106169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ee6000: abort rx timeout. Force session deactivation [ 349.644008][ T31] audit: type=1800 audit(1787776481.331:176): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.910" name="idProduct" dev="configfs" ino=21103 res=0 errno=0 [ 350.296265][ T31] audit: type=1800 audit(1787776482.031:177): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.909" name="test2" dev="jffs2" ino=4 res=0 errno=0 [ 351.683210][ T5741] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 352.509913][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 352.557709][ T5741] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 352.586295][ T5741] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 352.586645][ T5741] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 352.586689][ T5741] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.586859][ T5741] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 352.683451][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.683500][ T5741] usb 2-1: Product: syz [ 352.683556][ T5741] usb 2-1: Manufacturer: syz [ 352.683616][ T5741] usb 2-1: SerialNumber: syz [ 352.804489][ T44] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 352.974108][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 353.011713][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 353.027927][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.027999][ T44] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 353.048393][ T44] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 353.048415][ T44] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 353.048431][ T44] usb 4-1: config 14 has no interface number 0 [ 353.048443][ T44] usb 4-1: config 14 has no interface number 1 [ 353.048562][ T44] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 353.048591][ T44] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 353.048622][ T44] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 353.048652][ T44] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 353.048682][ T44] usb 4-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.048711][ T44] usb 4-1: config 14 interface 57 has no altsetting 0 [ 353.048733][ T44] usb 4-1: config 14 interface 228 has no altsetting 0 [ 353.119509][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.119541][ T44] usb 4-1: Product: syz [ 353.119559][ T44] usb 4-1: Manufacturer: syz [ 353.119575][ T44] usb 4-1: SerialNumber: syz [ 353.195531][ T5741] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input17 [ 353.242913][ T5741] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 353.242942][ T5741] (id 0x00) [ 353.385596][ T8966] loop2: detected capacity change from 0 to 1024 [ 353.392600][ T5741] rc_core: IR keymap rc-imon-pad not found [ 353.392632][ T5741] Registered IR keymap rc-empty [ 353.392846][ T5741] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 353.392902][ T5741] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 353.429148][ T8966] EXT4-fs: Ignoring removed bh option [ 353.441159][ T8966] EXT4-fs: Ignoring removed bh option [ 353.446555][ T8966] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 353.471352][ T5741] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 353.487753][ T5741] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input18 [ 353.520681][ T5741] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:45> initialized [ 353.525862][ T8966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.594371][ T8966] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 7: comm syz.2.921: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 353.607565][ T8966] EXT4-fs (loop2): Remounting filesystem read-only [ 353.607627][ T8966] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 353.643152][ T44] legousbtower 4-1:14.57: interrupt endpoints not found [ 353.654400][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.664071][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.686282][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.697894][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.712330][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.713755][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.734384][ T189] usb 2-1: USB disconnect, device number 45 [ 353.764088][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.876351][ T44] legousbtower 4-1:14.228: interrupt endpoints not found [ 354.797676][ T8982] jffs2: notice: (8982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 354.971907][ T8987] binder: 8985:8987 ioctl c0306201 200000000080 returned -14 [ 354.993125][ T8987] binder: 8985:8987 ioctl c0306201 2000000003c0 returned -14 [ 355.332625][ T189] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 356.133668][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 356.139762][ T189] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.155135][ T189] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.155182][ T189] usb 5-1: config 0 has no interface number 0 [ 356.155243][ T189] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.155272][ T189] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.163984][ T5734] usb 4-1: USB disconnect, device number 35 [ 356.212543][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.220770][ T189] usb 5-1: Product: syz [ 356.220794][ T189] usb 5-1: Manufacturer: syz [ 356.220812][ T189] usb 5-1: SerialNumber: syz [ 356.264161][ T189] usb 5-1: config 0 descriptor?? [ 356.285582][ T189] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 356.285832][ T189] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 356.670555][ T9017] tipc: Enabling of bearer rejected, already enabled [ 356.718393][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 357.210550][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 357.421457][ T9024] jffs2: notice: (9024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 358.881910][ T5734] usb 5-1: USB disconnect, device number 29 [ 359.949500][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 360.032208][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 360.066256][ T9064] netlink: 92 bytes leftover after parsing attributes in process `syz.3.949'. [ 360.090031][ T9066] block2mtd: error: cannot open device /dev/loop0 [ 360.100812][ T9066] Too few erase blocks (0) [ 360.642543][ T31] audit: type=1800 audit(1787776492.371:178): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.954" name="idProduct" dev="configfs" ino=21330 res=0 errno=0 [ 361.022784][ T5815] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 361.182659][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 361.184938][ T5815] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.195228][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.195312][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.195432][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.216736][ T5815] usb 4-1: config 0 descriptor?? [ 361.622219][ T31] audit: type=1326 audit(1787776493.351:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.652163][ T31] audit: type=1326 audit(1787776493.381:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.681513][ T31] audit: type=1326 audit(1787776493.411:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.709699][ T31] audit: type=1326 audit(1787776493.441:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.727475][ T31] audit: type=1326 audit(1787776493.441:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.753084][ T31] audit: type=1326 audit(1787776493.471:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.754122][ T31] audit: type=1326 audit(1787776493.471:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.757859][ T31] audit: type=1326 audit(1787776493.471:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 361.759361][ T31] audit: type=1326 audit(1787776493.471:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe457b9e0d9 code=0x7ffc0000 [ 362.330361][ T5815] usbhid 4-1:0.0: can't add hid device: -71 [ 362.330493][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 362.360697][ T5815] usb 4-1: USB disconnect, device number 36 [ 363.587783][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 363.694875][ T9108] block2mtd: error: cannot open device /dev/loop0 [ 363.702333][ T9108] Too few erase blocks (0) [ 363.754295][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 363.764238][ T9112] netlink: 92 bytes leftover after parsing attributes in process `syz.1.965'. [ 364.179031][ T9131] tipc: Enabling of bearer rejected, already enabled [ 364.497136][ T5734] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 364.652572][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 364.658598][ T5734] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 364.669565][ T5734] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.681115][ T5734] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.688451][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.710443][ T5734] usb 5-1: config 0 descriptor?? [ 364.972505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 364.982507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 365.052513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 365.948225][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 366.054851][ T9143] block2mtd: error: cannot open device /dev/loop0 [ 366.063261][ T9143] Too few erase blocks (0) [ 366.200564][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 366.212070][ T9148] netlink: 92 bytes leftover after parsing attributes in process `syz.3.979'. [ 366.315092][ T5734] usbhid 5-1:0.0: can't add hid device: -71 [ 366.315220][ T5734] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.349796][ T5734] usb 5-1: USB disconnect, device number 30 [ 366.649750][ T9159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 366.698285][ T9159] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 366.756239][ T9161] loop1: detected capacity change from 0 to 1024 [ 366.766882][ T9161] EXT4-fs: Ignoring removed bh option [ 366.779323][ T9161] EXT4-fs: Ignoring removed bh option [ 366.790750][ T9161] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 366.824466][ T9161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.847328][ T9161] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.981: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 366.877659][ T9161] EXT4-fs (loop1): Remounting filesystem read-only [ 366.877690][ T9161] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 367.384625][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.670748][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 367.783343][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 367.904256][ T9183] block2mtd: error: cannot open device /dev/loop0 [ 367.913559][ T9183] Too few erase blocks (0) [ 367.943774][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 367.954864][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 367.965495][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.973931][ T9] usb 4-1: Product: syz [ 367.979569][ T9] usb 4-1: Manufacturer: syz [ 367.979592][ T9] usb 4-1: SerialNumber: syz [ 368.217673][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 368.236847][ T9] usb 4-1: USB disconnect, device number 37 [ 368.256111][ T9] usblp0: removed [ 368.712747][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 368.913253][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 368.915967][ T9] usb 4-1: config 1 interface 0 altsetting 37 bulk endpoint 0x1 has invalid maxpacket 32 [ 368.916091][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 368.943290][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.943346][ T9] usb 4-1: Product: syz [ 368.943381][ T9] usb 4-1: Manufacturer: syz [ 368.943401][ T9] usb 4-1: SerialNumber: syz [ 368.970673][ T9175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.232750][ T5815] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 369.241758][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 369.261380][ T9] usb 4-1: USB disconnect, device number 38 [ 369.278179][ T9] usblp0: removed [ 369.382564][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 369.388516][ T5815] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 369.399950][ T5815] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.411677][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.411724][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.444269][ T5815] usb 3-1: config 0 descriptor?? [ 369.809268][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 369.978982][ T9211] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 370.730416][ T5815] usbhid 3-1:0.0: can't add hid device: -71 [ 370.736759][ T5815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 370.750627][ T5815] usb 3-1: USB disconnect, device number 33 [ 370.773697][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 370.773765][ T31] audit: type=1326 audit(1787776500.509:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.780351][ T9220] lo: entered allmulticast mode [ 370.815116][ T31] audit: type=1326 audit(1787776500.509:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.822040][ T31] audit: type=1326 audit(1787776500.549:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.837698][ T31] audit: type=1326 audit(1787776500.569:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.889668][ T31] audit: type=1326 audit(1787776500.619:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.897535][ T31] audit: type=1326 audit(1787776500.629:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.897593][ T31] audit: type=1326 audit(1787776500.629:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.897640][ T31] audit: type=1326 audit(1787776500.629:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.908429][ T31] audit: type=1326 audit(1787776500.639:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.915597][ T31] audit: type=1326 audit(1787776500.639:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.0.1003" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 370.918302][ T9218] block2mtd: error: cannot open device /dev/loop0 [ 371.045098][ T9224] Too few erase blocks (0) [ 371.456584][ T9236] syzkaller0: entered promiscuous mode [ 371.463160][ T9236] syzkaller0: entered allmulticast mode [ 371.551395][ T9214] lo: left allmulticast mode [ 372.086874][ T9254] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 373.002842][ T5754] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 373.155619][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 373.165711][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.165784][ T5754] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 373.191021][ T5754] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 373.191070][ T5754] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 373.191110][ T5754] usb 2-1: config 14 has no interface number 0 [ 373.191134][ T5754] usb 2-1: config 14 has no interface number 1 [ 373.191241][ T5754] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 373.191272][ T5754] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 373.191306][ T5754] usb 2-1: config 14 interface 57 has no altsetting 0 [ 373.191330][ T5754] usb 2-1: config 14 interface 228 has no altsetting 0 [ 373.270417][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.270465][ T5754] usb 2-1: Product: syz [ 373.270502][ T5754] usb 2-1: Manufacturer: syz [ 373.270523][ T5754] usb 2-1: SerialNumber: syz [ 373.717083][ T5754] legousbtower 2-1:14.57: interrupt endpoints not found [ 373.930189][ T5754] legousbtower 2-1:14.228: interrupt endpoints not found [ 373.943926][ T966] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 374.102592][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 374.108888][ T966] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 374.123966][ T966] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.135896][ T966] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.143146][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.161687][ T966] usb 3-1: config 0 descriptor?? [ 374.787503][ T966] usbhid 3-1:0.0: can't add hid device: -71 [ 374.787632][ T966] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 374.812082][ T966] usb 3-1: USB disconnect, device number 34 [ 376.125319][ T5734] usb 2-1: USB disconnect, device number 46 [ 376.988282][ T966] kernel write not supported for file /bus/input/handlers (pid: 966 comm: kworker/1:2) [ 378.170185][ T9304] loop2: detected capacity change from 0 to 32768 [ 378.239424][ T9304] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 378.410501][ T9304] XFS (loop2): Ending clean mount [ 378.734662][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734760][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.029179][ T5628] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 379.506065][ T9353] : renamed from bond_slave_0 (while UP) [ 380.222580][ T966] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 380.335236][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 380.335315][ T31] audit: type=1800 audit(1787776510.059:258): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1045" name="idProduct" dev="configfs" ino=23229 res=0 errno=0 [ 380.382638][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 380.390807][ T966] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 380.405761][ T966] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 380.405845][ T966] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 380.406054][ T966] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.406128][ T966] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 380.453250][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.453340][ T966] usb 3-1: Product: syz [ 380.453382][ T966] usb 3-1: Manufacturer: syz [ 380.453417][ T966] usb 3-1: SerialNumber: syz [ 380.505157][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 380.520178][ T966] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 380.535965][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 380.549174][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 380.723427][ T966] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 380.723485][ T966] (id 0x00) [ 380.912411][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.927459][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.941225][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.953176][ T966] rc_core: IR keymap rc-imon-pad not found [ 380.953197][ T966] Registered IR keymap rc-empty [ 380.953276][ T966] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 380.953296][ T966] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 380.988776][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.017235][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.030454][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.048725][ T966] imon:send_packet: packet tx failed (-71) [ 381.063788][ T9382] loop4: detected capacity change from 0 to 2048 [ 381.064423][ T966] imon 3-1:155.0: remote input dev register failed [ 381.064856][ T966] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 381.125064][ T9382] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 381.162661][ T9382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.191664][ T966] imon 3-1:155.0: unable to initialize intf0, err 0 [ 381.191745][ T966] imon:imon_probe: failed to initialize context! [ 381.191788][ T966] imon 3-1:155.0: unable to register, err -19 [ 381.259406][ T966] usb 3-1: USB disconnect, device number 35 [ 381.684643][ T31] audit: type=1800 audit(1787776511.419:259): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1053" name="idProduct" dev="configfs" ino=23804 res=0 errno=0 [ 385.361278][ T9416] tipc: Enabled bearer , priority 10 [ 387.112064][ T31] audit: type=1326 audit(1787776516.839:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.140714][ T31] audit: type=1326 audit(1787776516.839:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.144539][ T31] audit: type=1326 audit(1787776516.869:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.145969][ T31] audit: type=1326 audit(1787776516.869:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.146623][ T31] audit: type=1326 audit(1787776516.869:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.147702][ T31] audit: type=1326 audit(1787776516.869:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.148533][ T31] audit: type=1326 audit(1787776516.869:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.149236][ T31] audit: type=1326 audit(1787776516.869:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.150508][ T31] audit: type=1326 audit(1787776516.869:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.151082][ T31] audit: type=1326 audit(1787776516.869:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1066" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb319e0d9 code=0x7ffc0000 [ 387.494289][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 387.833137][ T5719] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 387.912883][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 388.056502][ T5719] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.075659][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.089402][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.118382][ T9] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 388.142062][ T9] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.156621][ T9] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 388.209274][ T9] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.222200][ T9] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 388.295821][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.304906][ T9] usb 3-1: Product: syz [ 388.305010][ T9] usb 3-1: Manufacturer: syz [ 388.305063][ T9] usb 3-1: SerialNumber: syz [ 388.338645][ T5719] usb 5-1: config 0 descriptor?? [ 388.619603][ T9] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 388.671556][ T9] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 388.693976][ T5719] usbhid 5-1:0.0: can't add hid device: -71 [ 388.694071][ T5719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 388.713011][ T5719] usb 5-1: USB disconnect, device number 31 [ 388.742693][ T9] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 388.840575][ T9442] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 389.102817][ T9457] tipc: Enabling of bearer rejected, already enabled [ 389.221681][ T9465] jffs2: notice: (9465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 389.243488][ T5719] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 389.426204][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 389.476534][ T5719] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 389.551533][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.551758][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.887393][ T5719] usb 5-1: config 0 descriptor?? [ 390.066909][ T5719] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 390.080318][ T5719] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 390.186201][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 390.531963][ T5719] usb 5-1: USB disconnect, device number 32 [ 391.121517][ T5719] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 391.458315][ T44] usb 3-1: USB disconnect, device number 36 [ 391.507506][ T44] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 391.542294][ T44] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 391.556227][ T44] ti_usb_3410_5052 3-1:2.0: device disconnected [ 391.715052][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 391.806798][ T9504] jffs2: notice: (9504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 392.820190][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 393.365375][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 393.365469][ T31] audit: type=1800 audit(1787776523.089:285): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1092" name="test2" dev="jffs2" ino=4 res=0 errno=0 [ 396.004257][ T9508] Set syz1 is full, maxelem 65536 reached [ 397.181310][ T9538] syzkaller0: entered promiscuous mode [ 397.181363][ T9538] syzkaller0: entered allmulticast mode [ 397.283021][ T5719] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 397.442566][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 397.448633][ T5719] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 397.459860][ T5719] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 397.459906][ T5719] usb 3-1: config 139 has no interface number 0 [ 397.459957][ T5719] usb 3-1: config 139 interface 49 has no altsetting 0 [ 397.487045][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.487095][ T5719] usb 3-1: Product: syz [ 397.487129][ T5719] usb 3-1: Manufacturer: syz [ 397.487150][ T5719] usb 3-1: SerialNumber: syz [ 397.943972][ T44] kernel write not supported for file /bus/input/handlers (pid: 44 comm: kworker/1:1) [ 398.227631][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.239959][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.455160][ T5719] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 398.465348][ T5719] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 398.465901][ T5719] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 398.470698][ T5719] usb 3-1: USB disconnect, device number 37 [ 399.622005][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1109'. [ 400.643165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 401.053110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 402.349576][ T9591] fuse: Bad value for 'fd' [ 402.998470][ T9593] vivid-000: kernel_thread() failed [ 403.036809][ T5815] kernel write not supported for file /bus/input/handlers (pid: 5815 comm: kworker/1:6) [ 403.702626][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 403.853455][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 403.855321][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 403.861961][ T9] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 403.862043][ T9] usb 2-1: config 139 has no interface number 0 [ 403.862123][ T9] usb 2-1: config 139 interface 49 has no altsetting 0 [ 403.885788][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.885871][ T9] usb 2-1: Product: syz [ 403.885914][ T9] usb 2-1: Manufacturer: syz [ 403.885957][ T9] usb 2-1: SerialNumber: syz [ 404.147866][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.158402][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.189662][ T9] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 404.224780][ T9] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 404.242972][ T9] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 404.254739][ T9] usb 2-1: USB disconnect, device number 47 [ 405.494925][ T5815] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 405.742678][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 405.839534][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.839607][ T5815] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 405.866220][ T5815] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 405.866269][ T5815] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 405.866310][ T5815] usb 5-1: config 14 has no interface number 0 [ 405.866333][ T5815] usb 5-1: config 14 has no interface number 1 [ 405.866401][ T5815] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 405.866433][ T5815] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 405.866462][ T5815] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 405.866495][ T5815] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.866528][ T5815] usb 5-1: config 14 interface 57 has no altsetting 0 [ 405.866552][ T5815] usb 5-1: config 14 interface 228 has no altsetting 0 [ 405.974836][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.983187][ T5815] usb 5-1: Product: syz [ 405.987818][ T5815] usb 5-1: Manufacturer: syz [ 405.987864][ T5815] usb 5-1: SerialNumber: syz [ 406.549297][ T31] audit: type=1800 audit(1787776536.279:286): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1131" name="idProduct" dev="configfs" ino=24697 res=0 errno=0 [ 406.715004][ T5815] legousbtower 5-1:14.57: interrupt endpoints not found [ 406.940108][ T5815] legousbtower 5-1:14.228: interrupt endpoints not found [ 407.539452][ T9646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1136'. [ 407.556562][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.557055][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.607758][ T9650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1136'. [ 407.646124][ T9649] tipc: Enabling of bearer rejected, already enabled [ 409.393201][ T966] usb 5-1: USB disconnect, device number 33 [ 412.572000][ T9693] syz.2.1147 uses obsolete (PF_INET,SOCK_PACKET) [ 412.754191][ T31] audit: type=1800 audit(1787776541.486:287): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1146" name="idProduct" dev="configfs" ino=24281 res=0 errno=0 [ 413.352611][ T966] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 413.513380][ T966] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 413.515657][ T9707] loop1: detected capacity change from 0 to 2048 [ 413.547845][ T9707] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 413.568657][ T966] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 413.568704][ T966] usb 3-1: config 0 has no interface number 0 [ 413.568760][ T966] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 413.568793][ T966] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 35380, setting to 64 [ 413.609640][ T9707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.620841][ T966] usb 3-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 413.620888][ T966] usb 3-1: Product: syz [ 413.620921][ T966] usb 3-1: SerialNumber: syz [ 413.657514][ T966] usb 3-1: config 0 descriptor?? [ 413.666629][ T9688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.681905][ T966] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 413.698823][ T966] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input21 [ 413.710099][ T9708] gre0: MTU too low for tipc bearer [ 413.732612][ T9708] tipc: Disabling bearer [ 414.353326][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.356039][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.363257][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.364067][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.371282][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.378507][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.385690][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.392878][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.393147][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.393375][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 414.453201][ T5741] usb 3-1: USB disconnect, device number 38 [ 414.453311][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 415.302949][ T5741] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 415.933208][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 415.949658][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 415.949744][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.023408][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.023479][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.023699][ T9739] tipc: Resetting bearer [ 416.091111][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.155862][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.224472][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.224552][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.270084][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 416.425508][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.426454][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.945337][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.960972][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.083882][ T5726] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 417.249292][ T9734] geneve2: entered promiscuous mode [ 417.255603][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 417.261818][ T5726] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 417.274520][ T5726] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 417.274555][ T5726] usb 3-1: config 139 has no interface number 0 [ 417.274589][ T5726] usb 3-1: config 139 interface 49 has no altsetting 0 [ 417.302022][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.302055][ T5726] usb 3-1: Product: syz [ 417.302077][ T5726] usb 3-1: Manufacturer: syz [ 417.302091][ T5726] usb 3-1: SerialNumber: syz [ 417.326581][ T9742] tipc: Bearer : already 2 bearers with priority 10 [ 417.326614][ T9742] tipc: Bearer : trying with adjusted priority [ 417.327520][ T9742] tipc: New replicast peer: 172.20.20.187 [ 417.327844][ T9742] tipc: Enabled bearer , priority 9 [ 417.589441][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.596250][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.623339][ T5726] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 417.656200][ T5726] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 417.656612][ T5726] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 417.683863][ T5726] usb 3-1: USB disconnect, device number 39 [ 419.350337][ T9773] loop2: detected capacity change from 0 to 1024 [ 419.361206][ T9773] EXT4-fs: Ignoring removed bh option [ 419.367380][ T9773] EXT4-fs: Ignoring removed bh option [ 419.375159][ T9773] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 419.480609][ T9773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.516129][ T9773] EXT4-fs error (device loop2): empty_inline_dir:1796: inode #12: block 7: comm syz.2.1173: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 419.537336][ T9773] EXT4-fs (loop2): Remounting filesystem read-only [ 419.547045][ T9773] EXT4-fs warning (device loop2): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 420.167046][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.690763][ T9800] jffs2: notice: (9800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 420.860585][ T9805] tipc: Enabling of bearer rejected, already enabled [ 421.981840][ T9807] nvme nvme0: rdma connection establishment failed (-104) [ 423.708629][ T9829] bridge0: port 3(batadv0) entered blocking state [ 423.771372][ T9829] bridge0: port 3(batadv0) entered disabled state [ 424.093588][ T9829] batadv0: entered allmulticast mode [ 424.849974][ T9829] batadv0: entered promiscuous mode [ 424.992106][ T9829] bridge0: port 3(batadv0) entered blocking state [ 424.992284][ T9829] bridge0: port 3(batadv0) entered forwarding state [ 425.251420][ T1364] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 425.251461][ T1364] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 427.132677][ T5815] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 427.182480][ T31] audit: type=1326 audit(1787776555.906:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.208913][ T31] audit: type=1326 audit(1787776555.946:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.236483][ T31] audit: type=1326 audit(1787776555.966:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.252260][ T31] audit: type=1326 audit(1787776555.966:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.253080][ T31] audit: type=1326 audit(1787776555.966:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.258001][ T31] audit: type=1326 audit(1787776555.966:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.263058][ T31] audit: type=1326 audit(1787776555.966:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.278883][ T31] audit: type=1326 audit(1787776555.996:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.288958][ T31] audit: type=1326 audit(1787776556.026:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.289010][ T31] audit: type=1326 audit(1787776556.026:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.2.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bfd9e0d9 code=0x7ffc0000 [ 427.368259][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 427.395453][ T5815] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.464664][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.464719][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.464797][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.500468][ T5815] usb 4-1: config 0 descriptor?? [ 427.885021][ T5683] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 427.947889][ T5815] usbhid 4-1:0.0: can't add hid device: -71 [ 427.948026][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.979108][ T5815] usb 4-1: USB disconnect, device number 39 [ 428.042546][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 428.047030][ T5683] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 428.073384][ T5683] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 428.073444][ T5683] usb 2-1: config 179 has no interface number 0 [ 428.074656][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 428.074739][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 428.074812][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 428.074884][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 428.074967][ T5683] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 428.075102][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.162576][ T9857] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 428.216459][ T9869] loop9: detected capacity change from 0 to 2640 [ 428.230208][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.248336][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.256399][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.264397][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.272966][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273028][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273078][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273110][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273127][ T9869] ldm_validate_partition_table(): Disk read failed. [ 428.273156][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273187][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.273236][ T9869] Dev loop9: unable to read RDB block 0 [ 428.273449][ T9869] loop9: unable to read partition table [ 428.273683][ T9869] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 428.398540][ T5815] usb 2-1: USB disconnect, device number 48 [ 428.398627][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 428.398681][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 428.808554][ T9878] misc userio: Invalid payload size [ 428.818031][ T9878] misc userio: Invalid payload size [ 428.831784][ T9878] rnbd_client L610: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 428.856269][ T9878] rnbd_client L1256: Session s. not found, and path parameter not given [ 428.997722][ T9882] __nla_validate_parse: 141 callbacks suppressed [ 428.997782][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 430.053022][ T9895] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 430.053195][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.1.1213 Not tainted syzkaller #0 PREEMPT(full) [ 430.053226][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.053251][ T9895] Call Trace: [ 430.053265][ T9895] [ 430.053276][ T9895] dump_stack_lvl+0xe8/0x150 [ 430.053361][ T9895] sysfs_create_dir_ns+0x271/0x2a0 [ 430.053417][ T9895] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 430.053457][ T9895] ? do_raw_spin_unlock+0xf5/0x200 [ 430.053518][ T9895] kobject_add_internal+0x622/0xcd0 [ 430.053658][ T9895] kobject_add+0x163/0x240 [ 430.053684][ T9895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 430.053754][ T9895] ? __pfx_kobject_add+0x10/0x10 [ 430.053786][ T9895] ? get_device_parent+0x366/0x3a0 [ 430.053894][ T9895] device_add+0x3fa/0xb80 [ 430.053933][ T9895] tty_register_device_attr+0x425/0x990 [ 430.053980][ T9895] ? __pfx_tty_register_device_attr+0x10/0x10 [ 430.054026][ T9895] ? tty_port_init+0x136/0x1a0 [ 430.054092][ T9895] ? gsm_dlci_alloc+0x330/0x640 [ 430.054158][ T9895] gsm_activate_mux+0x110/0x2a0 [ 430.054186][ T9895] gsmld_ioctl+0x12d3/0x1930 [ 430.054232][ T9895] ? __pfx_gsmld_ioctl+0x10/0x10 [ 430.054285][ T9895] ? lockdep_hardirqs_on+0x7b/0x110 [ 430.054351][ T9895] ? irqentry_exit+0x218/0x910 [ 430.054388][ T9895] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 430.054424][ T9895] ? ldsem_down_read+0x12/0x40 [ 430.054459][ T9895] ? __pfx_gsmld_ioctl+0x10/0x10 [ 430.054491][ T9895] tty_ioctl+0x9bd/0xdd0 [ 430.054542][ T9895] ? __pfx_tty_ioctl+0x10/0x10 [ 430.054589][ T9895] __se_sys_ioctl+0xfc/0x170 [ 430.054646][ T9895] do_syscall_64+0x166/0x520 [ 430.054707][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.054755][ T9895] ? clear_bhb_loop+0x70/0xc0 [ 430.054784][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.054809][ T9895] RIP: 0033:0x7f60d019e0d9 [ 430.054837][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.054859][ T9895] RSP: 002b:00007f60ce3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.054891][ T9895] RAX: ffffffffffffffda RBX: 00007f60d0426180 RCX: 00007f60d019e0d9 [ 430.054909][ T9895] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 430.054926][ T9895] RBP: 00007f60d0235024 R08: 0000000000000000 R09: 0000000000000000 [ 430.054941][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.054955][ T9895] R13: 00007f60d0426218 R14: 00007f60d0426180 R15: 00007ffe1ca3ae48 [ 430.054993][ T9895] [ 430.055169][ T9895] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 432.363839][ T44] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 432.515280][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 432.518404][ T44] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 432.531420][ T44] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 432.531473][ T44] usb 4-1: config 139 has no interface number 0 [ 432.531532][ T44] usb 4-1: config 139 interface 49 has no altsetting 0 [ 432.560367][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.560423][ T44] usb 4-1: Product: syz [ 432.560460][ T44] usb 4-1: Manufacturer: syz [ 432.560532][ T44] usb 4-1: SerialNumber: syz [ 432.742497][ T5726] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 432.844771][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.854606][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.877506][ T44] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 432.892518][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 432.928751][ T44] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 432.929735][ T44] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 432.961090][ T44] usb 4-1: USB disconnect, device number 40 [ 433.017298][ T5815] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 433.174975][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 433.176057][ T5815] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 433.189489][ T5815] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 433.189569][ T5815] usb 2-1: config 0 has no interface number 0 [ 433.212137][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.212198][ T5815] usb 2-1: Product: syz [ 433.212234][ T5815] usb 2-1: Manufacturer: syz [ 433.212295][ T5815] usb 2-1: SerialNumber: syz [ 433.247105][ T5815] usb 2-1: config 0 descriptor?? [ 433.491557][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.491631][ T5726] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 433.491690][ T5726] usb 5-1: no configurations [ 433.491709][ T5726] usb 5-1: can't read configurations, error -22 [ 434.731384][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 434.731443][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 434.871326][ T9975] tipc: Enabling of bearer rejected, already enabled [ 434.932017][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 434.946942][ T5815] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 434.972122][ T5815] usb 2-1: USB disconnect, device number 49 [ 436.237165][T10000] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 436.241473][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.3.1251 Not tainted syzkaller #0 PREEMPT(full) [ 436.241505][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.241521][T10000] Call Trace: [ 436.241532][T10000] [ 436.241543][T10000] dump_stack_lvl+0xe8/0x150 [ 436.241586][T10000] sysfs_create_dir_ns+0x271/0x2a0 [ 436.241628][T10000] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 436.241669][T10000] ? do_raw_spin_unlock+0xf5/0x200 [ 436.241709][T10000] kobject_add_internal+0x622/0xcd0 [ 436.241746][T10000] kobject_add+0x163/0x240 [ 436.241772][T10000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.241816][T10000] ? __pfx_kobject_add+0x10/0x10 [ 436.241849][T10000] ? get_device_parent+0x366/0x3a0 [ 436.241890][T10000] device_add+0x3fa/0xb80 [ 436.241928][T10000] tty_register_device_attr+0x425/0x990 [ 436.241973][T10000] ? __pfx_tty_register_device_attr+0x10/0x10 [ 436.242018][T10000] ? tty_port_init+0x136/0x1a0 [ 436.242054][T10000] ? gsm_dlci_alloc+0x330/0x640 [ 436.242095][T10000] gsm_activate_mux+0x110/0x2a0 [ 436.242123][T10000] gsmld_ioctl+0x12d3/0x1930 [ 436.242168][T10000] ? __pfx_gsmld_ioctl+0x10/0x10 [ 436.242223][T10000] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 436.242261][T10000] ? ldsem_down_read+0x12/0x40 [ 436.242309][T10000] ? __pfx_gsmld_ioctl+0x10/0x10 [ 436.242343][T10000] tty_ioctl+0x9bd/0xdd0 [ 436.242376][T10000] ? __pfx_tty_ioctl+0x10/0x10 [ 436.242412][T10000] __se_sys_ioctl+0xfc/0x170 [ 436.242439][T10000] do_syscall_64+0x166/0x520 [ 436.242474][T10000] ? trace_irq_disable+0x3b/0x140 [ 436.242500][T10000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.242525][T10000] ? clear_bhb_loop+0x70/0xc0 [ 436.242554][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.242579][T10000] RIP: 0033:0x7fded759e0d9 [ 436.242602][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.242623][T10000] RSP: 002b:00007fded57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.242649][T10000] RAX: ffffffffffffffda RBX: 00007fded7826180 RCX: 00007fded759e0d9 [ 436.242667][T10000] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 436.242684][T10000] RBP: 00007fded7635024 R08: 0000000000000000 R09: 0000000000000000 [ 436.242699][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.242719][T10000] R13: 00007fded7826218 R14: 00007fded7826180 R15: 00007fff30d731d8 [ 436.242757][T10000] [ 436.243726][T10000] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.649037][ T5815] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.825657][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 437.900819][T10018] can0: slcan on ptm1. [ 438.228828][T10017] can0 (unregistered): slcan off ptm1. [ 438.487522][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 438.487600][ T5815] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 438.487649][ T5815] usb 5-1: no configurations [ 438.487665][ T5815] usb 5-1: can't read configurations, error -22 [ 439.024978][T10049] jffs2: notice: (10049) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.438627][T10063] syzkaller0: entered promiscuous mode [ 439.444538][T10063] syzkaller0: entered allmulticast mode [ 439.662637][ T44] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 439.672776][ T5815] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 439.812513][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 439.814352][ T44] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 439.817124][ T44] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 439.817194][ T44] usb 2-1: config 139 has no interface number 0 [ 439.817277][ T44] usb 2-1: config 139 interface 49 has no altsetting 0 [ 439.828586][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 439.831016][ T5815] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 439.840938][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.841071][ T44] usb 2-1: Product: syz [ 439.841114][ T44] usb 2-1: Manufacturer: syz [ 439.841154][ T44] usb 2-1: SerialNumber: syz [ 439.851755][ T5815] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 439.851875][ T5815] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 439.851954][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 439.852047][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.893610][ T5815] usb 3-1: config 0 descriptor?? [ 440.177001][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177096][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.730446][ T5815] usbhid 3-1:0.0: can't add hid device: -71 [ 440.730601][ T5815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 440.743329][ T5815] usb 3-1: USB disconnect, device number 40 [ 440.781361][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.788027][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.809764][ T44] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 440.842159][ T44] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 440.843745][ T44] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 440.880857][ T44] usb 2-1: USB disconnect, device number 50 [ 441.155741][T10101] dummy_hcd dummy_hcd.0: remove, state 4 [ 441.172622][T10101] usb usb1: USB disconnect, device number 1 [ 441.235147][ T5815] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 441.298039][T10101] dummy_hcd dummy_hcd.0: stopped [ 441.304025][T10101] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 441.386858][ T5815] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 441.407881][ T5815] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.407939][ T5815] usb 4-1: config 0 has no interface number 0 [ 441.408002][ T5815] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.408098][ T5815] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.408179][ T5815] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.408252][ T5815] usb 4-1: config 0 interface 1 has no altsetting 0 [ 441.446001][ T5815] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 441.446076][ T5815] usb 4-1: Manufacturer: syz [ 441.484457][ T5815] usb 4-1: config 0 descriptor?? [ 441.537320][T10106] syzkaller0: entered promiscuous mode [ 441.543010][T10106] syzkaller0: entered allmulticast mode [ 442.339441][ T5815] uclogic 0003:145F:0212.0009: failed retrieving string descriptor #100: -71 [ 442.341884][ T5815] uclogic 0003:145F:0212.0009: failed retrieving pen parameters: -71 [ 442.345226][ T5815] uclogic 0003:145F:0212.0009: pen probing failed: -71 [ 442.345304][ T5815] uclogic 0003:145F:0212.0009: failed probing parameters: -71 [ 442.349427][ T5815] uclogic 0003:145F:0212.0009: probe with driver uclogic failed with error -71 [ 442.594279][ T5815] usb 4-1: USB disconnect, device number 41 [ 442.730461][T10070] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 442.742421][T10070] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 442.750877][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.0.1279 Not tainted syzkaller #0 PREEMPT(full) [ 442.760278][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.770399][T10070] RIP: 0010:set_link_state+0x27/0x1000 [ 442.776025][T10070] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 d0 9f 04 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b 95 74 fa 49 8b 16 4d 8d a6 a3 00 [ 442.795698][T10070] RSP: 0018:ffffc90005117780 EFLAGS: 00010046 [ 442.801812][T10070] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802810ddc0 [ 442.809823][T10070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.817823][T10070] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 442.825836][T10070] R10: dffffc0000000000 R11: fffff52000a22eec R12: 0000000000000246 [ 442.833839][T10070] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.841845][T10070] FS: 0000000000000000(0000) GS:ffff888124dd5000(0000) knlGS:0000000000000000 [ 442.850801][T10070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.857448][T10070] CR2: 00007f12c0b556c8 CR3: 000000005d472000 CR4: 00000000003526f0 [ 442.865452][T10070] Call Trace: [ 442.868755][T10070] [ 442.871727][T10070] ? rcu_is_watching+0x16/0xb0 [ 442.876581][T10070] ? __pfx_dummy_pullup+0x10/0x10 [ 442.881650][T10070] dummy_pullup+0xc4/0x120 [ 442.886090][T10070] ? __pfx_dummy_pullup+0x10/0x10 [ 442.891155][T10070] usb_gadget_disconnect_locked+0x126/0x480 [ 442.897159][T10070] gadget_unbind_driver+0xc2/0x410 [ 442.902292][T10070] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 442.908028][T10070] device_release_driver_internal+0x48b/0x880 [ 442.914164][T10070] driver_detach+0x1f3/0x2d0 [ 442.918765][T10070] bus_remove_driver+0x226/0x320 [ 442.923727][T10070] usb_gadget_unregister_driver+0x4e/0x70 [ 442.929467][T10070] raw_release+0xd7/0x260 [ 442.933868][T10070] ? __pfx_raw_release+0x10/0x10 [ 442.938841][T10070] __fput+0x418/0xa50 [ 442.942855][T10070] task_work_run+0x1d9/0x270 [ 442.947494][T10070] ? __pfx_task_work_run+0x10/0x10 [ 442.952636][T10070] ? do_raw_spin_unlock+0xf5/0x200 [ 442.957793][T10070] do_exit+0x73a/0x2360 [ 442.961978][T10070] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 442.968451][T10070] ? __pfx_do_exit+0x10/0x10 [ 442.973066][T10070] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.978124][T10070] do_group_exit+0x22d/0x2f0 [ 442.982732][T10070] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.987963][T10070] get_signal+0x121b/0x12c0 [ 442.992498][T10070] arch_do_signal_or_restart+0xbb/0x860 [ 442.998071][T10070] ? __pfx___schedule+0x10/0x10 [ 443.002942][T10070] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 443.009123][T10070] ? schedule+0x16e/0x2b0 [ 443.013499][T10070] exit_to_user_mode_loop+0x10e/0x770 [ 443.018890][T10070] ? rcu_is_watching+0x16/0xb0 [ 443.023689][T10070] do_syscall_64+0x328/0x520 [ 443.028332][T10070] ? trace_irq_disable+0x3b/0x140 [ 443.033406][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.039529][T10070] ? clear_bhb_loop+0x70/0xc0 [ 443.044246][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.050175][T10070] RIP: 0033:0x7f2cb319dd6b [ 443.054623][T10070] Code: Unable to access opcode bytes at 0x7f2cb319dd41. [ 443.061659][T10070] RSP: 002b:00007f2cb3fbdf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.070105][T10070] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f2cb319dd6b [ 443.078107][T10070] RDX: 00007f2cb3fbefd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 443.086102][T10070] RBP: 00007f2cb3fbefd0 R08: 0000000000000001 R09: 00000000ffffffff [ 443.094100][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 443.102094][T10070] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f2cb32538e2 [ 443.110104][T10070] [ 443.113164][T10070] Modules linked in: [ 443.117097][T10070] ---[ end trace 0000000000000000 ]--- [ 443.122576][T10070] RIP: 0010:set_link_state+0x27/0x1000 [ 443.122614][T10070] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 d0 9f 04 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b 95 74 fa 49 8b 16 4d 8d a6 a3 00 [ 443.122632][T10070] RSP: 0018:ffffc90005117780 EFLAGS: 00010046 [ 443.122649][T10070] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802810ddc0 [ 443.122664][T10070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.122676][T10070] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 443.122687][T10070] R10: dffffc0000000000 R11: fffff52000a22eec R12: 0000000000000246 [ 443.122702][T10070] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.122722][T10070] FS: 0000000000000000(0000) GS:ffff888124dd5000(0000) knlGS:0000000000000000 [ 443.122740][T10070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.122754][T10070] CR2: 00007f12c0b556c8 CR3: 000000005d472000 CR4: 00000000003526f0 [ 443.122778][T10070] Kernel panic - not syncing: Fatal exception [ 443.223612][T10070] Kernel Offset: disabled [ 443.227964][T10070] Rebooting in 86400 seconds..