last executing test programs: 3m23.126964029s ago: executing program 2 (id=3678): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) 3m22.039551027s ago: executing program 2 (id=3681): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000002240)={0x1c, &(0x7f0000002140)={0x20, 0x8}, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0e, &(0x7f0000000040)) 3m21.358672976s ago: executing program 2 (id=3686): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) 3m20.303453975s ago: executing program 2 (id=3692): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m19.799841057s ago: executing program 2 (id=3694): syz_open_dev$dvb_demux(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/test2\x00', 0x42, 0x1ff) 3m19.717772919s ago: executing program 2 (id=3695): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0x42, 0x48, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', 0x0, &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/fillfile\x00', 0x1058c0, 0x20) write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 3m4.631943303s ago: executing program 32 (id=3695): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0x42, 0x48, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', 0x0, &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/fillfile\x00', 0x1058c0, 0x20) write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 3.939062858s ago: executing program 3 (id=4746): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x4f, 0x40002021, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) 3.133638471s ago: executing program 4 (id=4749): socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) 2.73734566s ago: executing program 3 (id=4750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x100000000000027e}, 0x40) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040cb06f5730000000000010902240001000080010904a8fe01030003000956a800fdc3f31e04b680b1218100870122280009058103", @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x5fd8a426428707f3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.423349364s ago: executing program 0 (id=4753): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) 2.294590369s ago: executing program 0 (id=4755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 1.997344817s ago: executing program 0 (id=4757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r2) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='file0', 0x5) close(r4) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r5) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0) close(r6) write(r1, &(0x7f0000000300), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) 1.975788581s ago: executing program 1 (id=4758): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x10001, 0x7}) 1.834824479s ago: executing program 1 (id=4759): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_init(0x200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl(r3, 0x40946400, &(0x7f0000000100)="7063323132650000000000000000000000000000000200"/149) ioctl$COMEDI_INSN(r3, 0x8028650c, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000300)=[0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) syz_open_dev$ublk_chdev(0x0, 0x0, 0x2) write$sequencer(r1, &(0x7f0000000180), 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getenv(0x4201, r4, 0x1, &(0x7f0000004080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 1.832381187s ago: executing program 4 (id=4760): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r1, &(0x7f00000000c0)='F', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') 934.421237ms ago: executing program 3 (id=4761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 925.907425ms ago: executing program 0 (id=4762): openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x3c}}, 0x4880) 910.414562ms ago: executing program 1 (id=4763): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) 827.629361ms ago: executing program 0 (id=4764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x8000) 769.355445ms ago: executing program 4 (id=4765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 659.117134ms ago: executing program 3 (id=4766): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 657.070506ms ago: executing program 1 (id=4767): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='ve', 0x2) 615.45728ms ago: executing program 0 (id=4768): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 535.523536ms ago: executing program 1 (id=4769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeec, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x5b55, 0x4) 328.478012ms ago: executing program 4 (id=4770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/test2\x00', 0x42, 0x1ff) 307.591162ms ago: executing program 3 (id=4771): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 222.855771ms ago: executing program 4 (id=4772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf2501000000040008801400020077673100000000000000000025a70000"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write$qrtrtun(r2, &(0x7f0000000180)="ce444082475a52c3428b9ffe01bcb1bf05198f1115a82d36d7d2bd9d41fbc8b0288309318dfa47cae5ddcbac3a5ca49025a1b885e0cf315c12e9734bebf312ccd347ed79bac2c333c139ed3b33d181fa732458fecffe1ae614c513d98aa440d5b0a9ec292db3c275a83b7a544755979f788d29d8bf41d05662eb8c35427643e468531e4f", 0x84) 130.534677ms ago: executing program 3 (id=4773): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 66.741621ms ago: executing program 4 (id=4774): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a20603000000010200010902120001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x145, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x2, 0x1, 0x8, 0x10, 0xce, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ca67ae"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@mdlm_detail={0xd4, 0x24, 0x13, 0x3, "d4c9cff9f4f175d7789326847f5404a5544e468d87ee06792fd8ee6647a3efa96519bc83e245875236f7d93f9adde4478f2b9f0e3ffb6b8c593e6c6081aa4e175962ba0227c33dada32298fdc048609cefa55f097b6874efbeec0f6f429aae5999858762815edb33daf587d95c522ae1652a4cdf864af09fc978ac15c3643b7ccd91da328b9fafe62779752c871966025683fb05216bec5e0ede7d406158eb295fc12922f843e2496ae237ffdd2480efd882ff237d40c49bb9d6296ecf99a10d9c1b708bb32c0c3bb388a8e52914d361"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x39, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x90, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x77, 0x7, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x81, 0xdb, 0x7, 0x78}, 0x6b, &(0x7f0000000200)={0x5, 0xf, 0x6b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "cbeaf438e847e58326c0abd02c8a3f7c"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "fd56c276a38b91e2d4628c9bd79722d9"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "d8292c7b39d2ee36497b2879fb0d876f"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "759ce92700993e7ca4bb9f1036c85071"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0xeb, &(0x7f00000002c0)=@string={0xeb, 0x3, "889b63e7a22816b3a7a998864ea8e60c2b824a07160d63b6fc898d52319fa2f8b3a42d32781c9a516c00d161e1810ac8abde745198d681f620829e27de86c18c7bf36d4843be076f98f140b61b354a4e0d0330235a79943b92589816a50407665d1119798f713e437e75ced38a9ff084bf92d2e36bb0d563d37635944c508cb950e3266ec61bf1b73be5d61d458030b9f289c088a2835a3ae32fa2fd109bd96c142539436d245f575e3b6abbb4e16cd18f1356f1bb738fc83c7f908af479af3f93fe15a1f427314ebf3f085813851bfc69a28e5b5142432dc45a8b39ed63cb34153dbee1b6730b3be3"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000400)={0x3, 0x0, 0x14}) write(r2, &(0x7f0000000280)='dummy_udc.0', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='\n', 0x1) 0s ago: executing program 1 (id=4775): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x9) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xa9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0x4c09, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x62200, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a02000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a3000000000090002007379"], 0xa4}}, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2e842, 0xaa) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): .149417][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 841.217810][ T5724] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 841.290165][ T5724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.290224][ T5724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 841.290302][ T5724] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.290357][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.436708][ T5724] hub 2-1:1.0: bad descriptor, ignoring hub [ 841.436768][ T5724] hub 2-1:1.0: probe with driver hub failed with error -5 [ 841.438908][ T5724] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 841.647086][T18273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.647643][T18273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.788201][ T5724] usb 2-1: USB disconnect, device number 80 [ 841.897024][T18290] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 841.905147][T18290] kAFS: unparsable volume name [ 843.162710][T18299] jffs2: notice: (18299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 845.487913][T18327] jffs2: notice: (18327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 845.711210][ T5723] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 845.732871][ T5723] dvb_usb_dibusb_mb 4-1:3.211: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 845.815160][ T5723] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware [ 845.863971][ T5723] usb 4-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 845.878340][ T5723] usb 4-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 848.917850][T18355] MTD: Couldn't look up './dev/mtdblock0': -2 [ 849.725344][T18349] Process accounting resumed [ 850.981623][T18388] MTD: Couldn't look up './dev/mtdblock0': -2 [ 851.170141][ T31] audit: type=1800 audit(1787247301.801:472): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3943" name="idProduct" dev="configfs" ino=164326 res=0 errno=0 [ 852.276915][T18366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.501918][T18402] input: syz1 as /devices/virtual/input/input78 [ 852.766797][T18411] MTD: Couldn't look up './dev/mtdblock0': -2 [ 853.852605][T18398] Process accounting resumed [ 853.963116][ T31] audit: type=1800 audit(1787247304.601:473): pid=18417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3952" name="idProduct" dev="configfs" ino=164372 res=0 errno=0 [ 855.157011][ T5696] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 855.859724][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 855.865891][ T5696] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 855.878058][ T5696] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.878157][ T5696] usb 5-1: config 0 has no interface number 0 [ 855.901331][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.901413][ T5696] usb 5-1: Product: syz [ 855.901453][ T5696] usb 5-1: Manufacturer: syz [ 855.901473][ T5696] usb 5-1: SerialNumber: syz [ 855.917445][ T5696] usb 5-1: config 0 descriptor?? [ 855.937262][ T5696] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 855.937431][ T5696] usb 5-1: selecting invalid altsetting 1 [ 855.937481][ T5696] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 855.957587][ T5696] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 855.962202][ T5696] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 855.962291][ T5696] usb 5-1: media controller created [ 856.052298][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.092732][T18436] MTD: Couldn't look up './dev/mtdblock0': -2 [ 856.171323][ T5696] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 856.171473][ T5696] zl10353_read_register: readreg error (reg=127, ret==-71) [ 856.176960][ T5696] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 856.348945][ T5696] usb 5-1: USB disconnect, device number 3 [ 857.790471][T18438] Process accounting resumed [ 858.054358][ T31] audit: type=1800 audit(1787247308.691:474): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3969" name="cdrom" dev="configfs" ino=164471 res=0 errno=0 [ 858.081926][ T31] audit: type=1800 audit(1787247308.721:475): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3969" name="file" dev="configfs" ino=164472 res=0 errno=0 [ 858.978735][T18469] MTD: Couldn't look up './dev/mtdblock0': -2 [ 859.048828][T18472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.050205][T18472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.677831][T10248] IPVS: starting estimator thread 0... [ 859.910741][T18484] IPVS: using max 26 ests per chain, 62400 per kthread [ 861.411049][T18506] MTD: Couldn't look up './dev/mtdblock0': -2 [ 861.930423][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 862.579463][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 862.590905][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.604584][ T10] usb 2-1: config 16 has an invalid descriptor of length 113, skipping remainder of the config [ 862.604668][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.604712][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.656034][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 863.886008][T18540] MTD: Couldn't look up './dev/mtdblock0': -2 [ 864.942530][T15036] usb 2-1: USB disconnect, device number 81 [ 868.236410][T18558] Process accounting resumed [ 868.548403][T18574] MTD: Couldn't look up './dev/mtdblock0': -2 [ 869.406550][T18578] jffs2: notice: (18578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 869.537371][ T31] audit: type=1800 audit(1787247320.171:476): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4008" name="cdrom" dev="configfs" ino=164667 res=0 errno=0 [ 869.604524][ T31] audit: type=1800 audit(1787247320.241:477): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4008" name="file" dev="configfs" ino=165273 res=0 errno=0 [ 869.604620][ T31] audit: type=1800 audit(1787247320.241:478): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4008" name="UDC" dev="configfs" ino=165274 res=0 errno=0 [ 870.256471][T18576] Process accounting resumed [ 871.182376][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.182483][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.609734][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 871.706824][ T31] audit: type=1800 audit(1787247322.341:479): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4018" name="cdrom" dev="configfs" ino=164718 res=0 errno=0 [ 871.731921][ T31] audit: type=1800 audit(1787247322.371:480): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4018" name="file" dev="configfs" ino=164719 res=0 errno=0 [ 871.760238][ T31] audit: type=1800 audit(1787247322.401:481): pid=18610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4018" name="UDC" dev="configfs" ino=164720 res=0 errno=0 [ 871.781990][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 871.782963][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 871.784357][ T10] usb 2-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 871.784409][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 3201, setting to 1024 [ 871.784436][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 871.784459][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 871.784510][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.794878][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 872.282321][T18605] Process accounting resumed [ 872.644362][T18612] Process accounting resumed [ 873.379915][ T31] audit: type=1800 audit(1787247324.011:482): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4029" name="cdrom" dev="configfs" ino=165357 res=0 errno=0 [ 873.417550][ T31] audit: type=1800 audit(1787247324.051:483): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4029" name="file" dev="configfs" ino=165358 res=0 errno=0 [ 873.446410][ T31] audit: type=1800 audit(1787247324.081:484): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4029" name="UDC" dev="configfs" ino=165359 res=0 errno=0 [ 873.688136][T18634] Process accounting resumed [ 874.430678][ T5724] usb 2-1: USB disconnect, device number 82 [ 874.593322][T18650] Process accounting resumed [ 875.361863][ T5696] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 875.447703][T18694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.451886][T18694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.521307][ T5696] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 875.532894][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 875.544753][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 875.544816][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.687582][T18677] Process accounting resumed [ 876.588648][ T5696] pegasus 2-1:1.0: probe with driver pegasus failed with error -121 [ 876.738946][T18696] Process accounting resumed [ 878.028907][ T5724] usb 2-1: USB disconnect, device number 83 [ 879.005841][T18721] Process accounting resumed [ 879.345258][T18729] Process accounting resumed [ 879.679209][T18754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.691818][T18754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.758512][T18778] jffs2: notice: (18778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 881.135679][T18766] Process accounting resumed [ 881.814666][T18802] jffs2: notice: (18802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 881.909667][T12809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 882.092306][T12809] usb 5-1: Using ep0 maxpacket: 8 [ 882.105825][T12809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.130301][T12809] usb 5-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 882.130389][T12809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.130412][T12809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.130434][T12809] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 882.130477][T12809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.161710][T12809] usbtmc 5-1:16.0: bulk endpoints not found [ 882.817469][T18808] Process accounting resumed [ 883.437592][T18768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.815611][T18827] jffs2: notice: (18827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 884.280494][T18840] No source specified [ 884.401012][ T31] audit: type=1800 audit(1787247335.041:485): pid=18842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4101" name="idProduct" dev="configfs" ino=165667 res=0 errno=0 [ 884.727002][ T5696] usb 5-1: USB disconnect, device number 4 [ 884.893795][T18834] Process accounting resumed [ 885.557795][T18851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4104'. [ 885.557926][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 887.544524][ T31] audit: type=1800 audit(1787247338.161:486): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4110" name="idProduct" dev="configfs" ino=166250 res=0 errno=0 [ 888.317590][T18876] jffs2: notice: (18876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 888.389448][T12809] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 888.539898][T12809] usb 5-1: Using ep0 maxpacket: 8 [ 888.548524][T12809] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 888.551704][T12809] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 888.551767][T12809] usb 5-1: config 0 has no interface number 0 [ 888.551807][T12809] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.551831][T12809] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 888.551857][T12809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 888.551882][T12809] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.551925][T12809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.561581][T12809] usb 5-1: config 0 descriptor?? [ 888.581547][T18867] Process accounting resumed [ 888.586732][T12809] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 888.803961][T12809] usb 5-1: USB disconnect, device number 5 [ 888.814659][T12809] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 889.110016][ T31] audit: type=1800 audit(1787247339.751:487): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4120" name="idProduct" dev="configfs" ino=165762 res=0 errno=0 [ 889.134798][ T5633] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 889.259257][T18900] jffs2: notice: (18900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 889.312726][ T5724] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 889.463155][ T5724] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 889.464570][ T5724] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 889.464597][ T5724] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 889.464616][ T5724] usb 2-1: config 0 has no interface number 0 [ 889.464656][ T5724] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.464683][ T5724] usb 2-1: config 0 interface 168 has no altsetting 0 [ 889.464718][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.473472][ T5724] usb 2-1: config 0 descriptor?? [ 889.486913][ T5724] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 889.763620][ T41] IPVS: starting estimator thread 0... [ 889.773712][T18892] IPVS: nq: FWM 3 0x00000003 - no destination available [ 889.776337][ T5724] usb 2-1: USB disconnect, device number 84 [ 889.859488][T18916] IPVS: using max 26 ests per chain, 62400 per kthread [ 890.097055][ T5633] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 890.219008][ T31] audit: type=1800 audit(1787247340.851:488): pid=18927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4133" name="idProduct" dev="configfs" ino=165793 res=0 errno=0 [ 890.246700][T18903] Process accounting resumed [ 890.371780][T18929] tipc: Started in network mode [ 890.371860][T18929] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 890.401763][T18929] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 890.416219][T18929] tipc: Enabled bearer , priority 10 [ 890.428623][T18931] jffs2: notice: (18931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 891.526544][ T5724] tipc: Node number set to 1 [ 891.537659][ T31] audit: type=1800 audit(1787247342.171:489): pid=18952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4143" name="idProduct" dev="configfs" ino=166554 res=0 errno=0 [ 891.999599][ T7667] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 892.160697][ T7667] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 892.172073][ T7667] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 892.172172][ T7667] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 892.172198][ T7667] usb 2-1: config 0 has no interface number 0 [ 892.172241][ T7667] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.172269][ T7667] usb 2-1: config 0 interface 168 has no altsetting 0 [ 892.172341][ T7667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.194504][ T7667] usb 2-1: config 0 descriptor?? [ 892.200255][ T7667] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 892.475695][T18964] IPVS: nq: FWM 3 0x00000003 - no destination available [ 892.498139][T12809] usb 2-1: USB disconnect, device number 85 [ 892.759494][ T5696] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 892.910254][ T5696] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 892.912519][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.912546][ T5696] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.916000][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.916054][ T5696] usb 5-1: Product: syz [ 892.916070][ T5696] usb 5-1: Manufacturer: syz [ 892.916084][ T5696] usb 5-1: SerialNumber: syz [ 892.921398][ T5696] usb 5-1: config 0 descriptor?? [ 893.102625][T18967] jffs2: notice: (18967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 893.141618][ T7667] usb 5-1: USB disconnect, device number 6 [ 893.599440][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 893.752585][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 893.759209][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 893.773219][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.785167][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 893.797933][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.806626][ T10] usb 5-1: Product: syz [ 893.806655][ T10] usb 5-1: Manufacturer: syz [ 893.806671][ T10] usb 5-1: SerialNumber: syz [ 893.823374][T15603] Bluetooth: hci5: command 0xfc11 tx timeout [ 893.828812][ T5633] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 893.855545][ T10] usb 5-1: config 0 descriptor?? [ 894.155877][ T5633] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 894.310741][ T31] audit: type=1800 audit(1787247344.951:490): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4153" name="idProduct" dev="configfs" ino=166599 res=0 errno=0 [ 894.665423][T18986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.675611][T18986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.314515][T18989] jffs2: notice: (18989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 895.334878][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.335439][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.404261][ T31] audit: type=1800 audit(1787247346.041:491): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4158" name="idVendor" dev="configfs" ino=166933 res=0 errno=0 [ 895.477174][ T10] usb 5-1: USB disconnect, device number 7 [ 895.940977][ T31] audit: type=1800 audit(1787247346.581:492): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4162" name="idProduct" dev="configfs" ino=166951 res=0 errno=0 [ 896.051369][ T31] audit: type=1800 audit(1787247346.691:493): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4164" name="addr_traddr" dev="configfs" ino=166648 res=0 errno=0 [ 896.188469][T19012] jffs2: notice: (19012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 896.269597][ T31] audit: type=1800 audit(1787247346.901:494): pid=19015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4167" name="idVendor" dev="configfs" ino=166661 res=0 errno=0 [ 896.379549][ T7667] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 896.534037][ T7667] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 896.535505][ T7667] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 896.535532][ T7667] usb 5-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 896.535553][ T7667] usb 5-1: config 0 has no interface number 0 [ 896.535627][ T7667] usb 5-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.535654][ T7667] usb 5-1: config 0 interface 168 has no altsetting 0 [ 896.535689][ T7667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.559805][ T7667] usb 5-1: config 0 descriptor?? [ 896.590016][ T7667] usbhid 5-1:0.168: couldn't find an input interrupt endpoint [ 896.760104][ T5696] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 896.821130][T16156] IPVS: starting estimator thread 0... [ 896.836601][ T5724] usb 5-1: USB disconnect, device number 8 [ 896.909961][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 896.910226][T19021] IPVS: using max 31 ests per chain, 74400 per kthread [ 896.910947][ T5696] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 896.915358][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.915387][ T5696] usb 2-1: Product: syz [ 896.915403][ T5696] usb 2-1: Manufacturer: syz [ 896.915417][ T5696] usb 2-1: SerialNumber: syz [ 896.924619][ T5696] usb 2-1: config 0 descriptor?? [ 896.930546][ T5696] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 897.354879][ T31] audit: type=1800 audit(1787247347.991:495): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4172" name="idProduct" dev="configfs" ino=166681 res=0 errno=0 [ 897.484737][ T31] audit: type=1800 audit(1787247348.121:496): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4174" name="addr_traddr" dev="configfs" ino=167006 res=0 errno=0 [ 897.556040][T19033] jffs2: notice: (19033) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 897.622653][ T31] audit: type=1800 audit(1787247348.261:497): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4176" name="idVendor" dev="configfs" ino=167016 res=0 errno=0 [ 897.930326][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.931021][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.464288][ T5696] gspca_sonixj: reg_w1 err -110 [ 898.483618][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.505051][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.609661][ T5696] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 900.700806][ T5696] usb 2-1: USB disconnect, device number 86 [ 901.128388][ T31] audit: type=1800 audit(1787247351.761:498): pid=19059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4184" name="addr_traddr" dev="configfs" ino=166732 res=0 errno=0 [ 901.167892][T19061] jffs2: notice: (19061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 901.256247][ T31] audit: type=1800 audit(1787247351.891:499): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4186" name="idVendor" dev="configfs" ino=166740 res=0 errno=0 [ 901.625332][T19076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.633538][T19076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.111074][ T5633] Bluetooth: hci0: link tx timeout [ 902.111284][ T5633] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.670102][T15603] Bluetooth: hci0: link tx timeout [ 902.680959][T15603] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.713474][T19084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input79 [ 902.948481][ T31] audit: type=1800 audit(1787247353.581:500): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4194" name="addr_traddr" dev="configfs" ino=166778 res=0 errno=0 [ 904.660111][T15603] Bluetooth: hci0: command 0x0406 tx timeout [ 904.885941][T19097] jffs2: notice: (19097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 905.226045][T19087] Process accounting resumed [ 905.511378][ T31] audit: type=1800 audit(1787247356.151:501): pid=19113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4205" name="addr_traddr" dev="configfs" ino=166825 res=0 errno=0 [ 905.813392][T19120] jffs2: notice: (19120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 906.140134][T19126] netlink: NAT attribute has 8 unknown bytes [ 906.146823][T19126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.639167][ T31] audit: type=1800 audit(1787247357.271:502): pid=19142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4215" name="addr_traddr" dev="configfs" ino=166874 res=0 errno=0 [ 906.886406][T19148] jffs2: notice: (19148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 907.027891][ T5723] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 907.028071][ T5723] dvb_usb_dibusb_mb 4-1:3.30: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 907.058834][ T5723] usb 4-1: USB disconnect, device number 55 [ 907.100303][T17654] hwrng_fill thread creation failed [ 907.231470][T19128] Process accounting resumed [ 907.469870][ T5723] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 907.647653][ T5723] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 907.667862][ T5723] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 907.667950][ T5723] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 907.667973][ T5723] usb 4-1: config 0 has no interface number 0 [ 907.668035][ T5723] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 907.668062][ T5723] usb 4-1: config 0 interface 168 has no altsetting 0 [ 907.668136][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.680181][ T5723] usb 4-1: config 0 descriptor?? [ 907.726073][ T5723] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 908.036892][T19174] jffs2: notice: (19174) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 908.095317][T10234] IPVS: starting estimator thread 0... [ 908.138563][T12809] usb 4-1: USB disconnect, device number 56 [ 908.180699][T19177] IPVS: using max 31 ests per chain, 74400 per kthread [ 909.157238][T19184] Process accounting resumed [ 910.951596][T19203] jffs2: notice: (19203) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 911.018736][T19205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.020171][T19205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.409709][T12809] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 911.585720][T12809] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 911.603856][T12809] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 911.603989][T12809] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 911.604018][T12809] usb 2-1: config 0 has no interface number 0 [ 911.604081][T12809] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.604117][T12809] usb 2-1: config 0 interface 168 has no altsetting 0 [ 911.604160][T12809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.673249][T12809] usb 2-1: config 0 descriptor?? [ 911.694498][T12809] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 911.967684][ T10] usb 2-1: USB disconnect, device number 87 [ 913.379208][T19217] Process accounting resumed [ 914.196713][T19254] jffs2: notice: (19254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 914.399412][T12809] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 914.563684][T12809] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 914.580744][T12809] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 914.580816][T12809] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 914.580857][T12809] usb 2-1: config 0 has no interface number 0 [ 914.580909][T12809] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.580943][T12809] usb 2-1: config 0 interface 168 has no altsetting 0 [ 914.580987][T12809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.326005][T12809] usb 2-1: config 0 descriptor?? [ 915.331685][T19265] jffs2: notice: (19265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 915.528941][T12809] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 915.806336][ T5723] usb 2-1: USB disconnect, device number 88 [ 916.771742][T19287] jffs2: notice: (19287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 918.199501][T12809] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 918.270045][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 918.339505][ T5724] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 918.349618][T12809] usb 2-1: Using ep0 maxpacket: 16 [ 918.356192][T12809] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 918.361729][T12809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.361761][T12809] usb 2-1: Product: syz [ 918.361777][T12809] usb 2-1: Manufacturer: syz [ 918.361791][T12809] usb 2-1: SerialNumber: syz [ 918.367845][T12809] usb 2-1: config 0 descriptor?? [ 918.371219][T12809] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 918.430493][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 918.431710][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.431761][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 918.431813][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 918.431845][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 918.431868][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 918.431890][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 918.431914][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 918.431961][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 918.431984][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 918.432007][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 918.432029][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 918.432052][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 918.432077][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.432117][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 918.432139][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 918.434497][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.434519][ T10] usb 5-1: Product: syz [ 918.434532][ T10] usb 5-1: Manufacturer: syz [ 918.434546][ T10] usb 5-1: SerialNumber: syz [ 918.443208][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.443365][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.443516][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.443662][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.443809][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.443944][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.444089][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.444220][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.444766][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.445081][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.445216][T19306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 918.448149][ T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 918.451988][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 918.501411][ T5724] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 918.502744][ T5724] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 918.502770][ T5724] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 918.502791][ T5724] usb 4-1: config 0 has no interface number 0 [ 918.503030][ T5724] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.503059][ T5724] usb 4-1: config 0 interface 168 has no altsetting 0 [ 918.503093][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.553942][ T5724] usb 4-1: config 0 descriptor?? [ 918.555122][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 918.563537][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 918.566209][ T5724] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 918.570576][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 918.813223][T12809] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 918.813466][T12809] visor 2-1:0.0: probe with driver visor failed with error -71 [ 918.843921][T12809] usb 2-1: USB disconnect, device number 89 [ 918.927458][ T10] usb 4-1: USB disconnect, device number 57 [ 919.125982][ T10] usb 5-1: USB disconnect, device number 9 [ 919.158596][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 919.171753][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 919.179003][ T10] keyspan 5-1:1.0: device disconnected [ 919.305144][T19317] jffs2: notice: (19317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 919.780743][T19333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.781294][T19333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.851319][T19337] jffs2: notice: (19337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 920.059807][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 920.210267][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 920.211131][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.212351][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.212377][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.212401][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 920.212425][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 920.212458][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 920.212481][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.212523][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.410275][T12809] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 920.440697][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 920.440791][ T10] usbtmc 2-1:16.0: can't read capabilities [ 920.563110][T12809] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 920.564157][T12809] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 920.564184][T12809] usb 5-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 920.564202][T12809] usb 5-1: config 0 has no interface number 0 [ 920.564241][T12809] usb 5-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 920.564268][T12809] usb 5-1: config 0 interface 168 has no altsetting 0 [ 920.564303][T12809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.567361][T12809] usb 5-1: config 0 descriptor?? [ 920.597930][T12809] usbhid 5-1:0.168: couldn't find an input interrupt endpoint [ 920.653725][T19357] jffs2: notice: (19357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 920.664161][T12809] usb 2-1: USB disconnect, device number 90 [ 920.892729][ T5723] usb 5-1: USB disconnect, device number 10 [ 921.825351][T19375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.838086][T19375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.951790][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 922.047868][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 922.182774][T19386] jffs2: notice: (19386) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 922.481069][T19394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.494676][T19394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.559546][T15036] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 922.709584][T15036] usb 4-1: Using ep0 maxpacket: 8 [ 922.710422][T15036] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 922.711810][T15036] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.711850][T15036] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.711873][T15036] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 922.711898][T15036] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 922.711925][T15036] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 922.711948][T15036] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.711993][T15036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.944585][T15036] usb 4-1: GET_CAPABILITIES returned 0 [ 922.944676][T15036] usbtmc 4-1:16.0: can't read capabilities [ 923.175864][ T10] usb 4-1: USB disconnect, device number 58 [ 923.367412][T19413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.368124][T19413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.517361][T19417] netlink: NAT attribute has 8 unknown bytes [ 923.517414][T19417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.061424][ T5768] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 924.222701][ T5768] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 924.242190][ T5768] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 924.250939][ T5768] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 924.263939][ T5768] usb 4-1: config 0 has no interface number 0 [ 924.264076][ T5768] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.264113][ T5768] usb 4-1: config 0 interface 168 has no altsetting 0 [ 924.264159][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.306407][ T5768] usb 4-1: config 0 descriptor?? [ 924.344094][ T5768] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 924.627300][ T5768] usb 4-1: USB disconnect, device number 59 [ 924.976302][T19440] netlink: zone id is out of range [ 924.976339][T19440] netlink: zone id is out of range [ 924.976363][T19440] netlink: zone id is out of range [ 924.976376][T19440] netlink: zone id is out of range [ 924.976388][T19440] netlink: zone id is out of range [ 924.976402][T19440] netlink: zone id is out of range [ 924.976413][T19440] netlink: zone id is out of range [ 924.976425][T19440] netlink: zone id is out of range [ 925.310824][T19447] jffs2: notice: (19447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 925.529531][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 925.546279][T19458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.546790][T19458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.679543][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 925.686870][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 925.689858][ T10] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 925.689890][ T10] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 925.689949][ T10] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 925.693827][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.693855][ T10] usb 4-1: Product: syz [ 925.693870][ T10] usb 4-1: Manufacturer: syz [ 925.693884][ T10] usb 4-1: SerialNumber: syz [ 925.726126][ T10] usb 4-1: Fast Track Pro config OK [ 925.767692][T19458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.768353][T19458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.908603][ T10] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 925.908669][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 925.908709][ T10] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 925.923208][ T10] usb 4-1: 0:2 : does not exist [ 925.923309][ T10] usb 4-1: unit 5 not found! [ 925.923329][ T10] usb 4-1: unit 6 not found! [ 926.012817][ T10] usb 4-1: USB disconnect, device number 60 [ 926.084597][T16061] udevd[16061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 926.129506][T15036] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 926.280884][T15036] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 926.293473][T15036] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 926.293532][T15036] usb 5-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 926.293556][T15036] usb 5-1: config 0 has no interface number 0 [ 926.293595][T15036] usb 5-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 926.293624][T15036] usb 5-1: config 0 interface 168 has no altsetting 0 [ 926.293659][T15036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.303383][T15036] usb 5-1: config 0 descriptor?? [ 926.344044][T15036] usbhid 5-1:0.168: couldn't find an input interrupt endpoint [ 926.474202][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.487282][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.604519][T15036] usb 5-1: USB disconnect, device number 11 [ 927.159501][ T5696] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 927.636697][ T5696] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 928.298542][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.309843][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.309943][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.338703][ T5696] usb 2-1: config 0 descriptor?? [ 928.385420][ T5633] Bluetooth: hci1: unexpected event for opcode 0x6f02 [ 928.575701][ T5696] usbhid 2-1:0.0: can't add hid device: -71 [ 928.576066][ T5696] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 928.604049][ T5696] usb 2-1: USB disconnect, device number 91 [ 928.606703][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.611005][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.989522][ T5696] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 930.021126][ T5633] Bluetooth: hci1: unexpected event for opcode 0x6f02 [ 930.200676][ T31] audit: type=1800 audit(1787247380.831:503): pid=19536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4367" name="cdrom" dev="configfs" ino=169999 res=0 errno=0 [ 930.201485][ T31] audit: type=1800 audit(1787247380.841:504): pid=19536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4367" name="file" dev="configfs" ino=170000 res=0 errno=0 [ 930.224127][T19536] mass_storage.0/lun.0: file too small: file0 [ 930.574090][T19545] o2cb: This node has not been configured. [ 930.574122][T19545] o2cb: Cluster check failed. Fix errors before retrying. [ 930.574205][T19545] (syz.3.4371,19545,0):user_dlm_register:674 ERROR: status = -22 [ 930.574258][T19545] (syz.3.4371,19545,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 931.531302][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.531849][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.556157][ T5633] Bluetooth: hci1: unexpected event for opcode 0x6f02 [ 931.650378][ T31] audit: type=1800 audit(1787247382.291:505): pid=19565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4378" name="cdrom" dev="configfs" ino=170197 res=0 errno=0 [ 931.651595][ T31] audit: type=1800 audit(1787247382.291:506): pid=19565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4378" name="file" dev="configfs" ino=170198 res=0 errno=0 [ 931.656807][T19565] mass_storage.0/lun.0: file too small: file0 [ 931.750528][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.751026][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.199499][ T5696] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 932.352643][ T5696] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 932.354136][ T5696] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 932.354164][ T5696] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 932.354183][ T5696] usb 4-1: config 0 has no interface number 0 [ 932.354223][ T5696] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 932.354276][ T5696] usb 4-1: config 0 interface 168 has no altsetting 0 [ 932.354312][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.596825][ T5696] usb 4-1: config 0 descriptor?? [ 932.614769][ T5696] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 932.633543][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.633613][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.372368][T12809] usb 4-1: USB disconnect, device number 61 [ 934.044352][ T31] audit: type=1800 audit(1787247384.671:507): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4388" name="cdrom" dev="configfs" ino=169147 res=0 errno=0 [ 934.233489][ T31] audit: type=1800 audit(1787247384.871:508): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4388" name="file" dev="configfs" ino=169148 res=0 errno=0 [ 934.266557][T19590] mass_storage.0/lun.0: file too small: file0 [ 934.559572][ T5768] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 934.609579][ T5696] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 934.731869][ T5768] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 934.748076][ T5768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.762332][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 934.762775][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 934.789442][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 934.800103][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 934.800207][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 934.800241][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 934.800273][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 934.800350][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 934.800380][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 934.800409][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 934.800437][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 934.800503][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 934.800532][ T5768] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.800558][ T5768] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.800585][ T5768] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 934.954817][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.954922][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.954968][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.991013][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.000124][ T5768] usb 5-1: Product: syz [ 935.000229][ T5768] usb 5-1: Manufacturer: syz [ 935.000293][ T5768] usb 5-1: SerialNumber: syz [ 935.147011][ T5696] usb 4-1: config 0 descriptor?? [ 935.222922][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.238875][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.248246][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.249128][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.268765][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.295939][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.317008][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.334004][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.353656][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.373006][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.398970][T19594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.428265][ T5768] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 935.437177][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 935.461948][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 935.462150][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 935.472872][ T5696] usb 4-1: USB disconnect, device number 62 [ 935.487689][ T5768] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 935.505044][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 935.530812][ T5768] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 935.676032][ T5768] usb 5-1: USB disconnect, device number 12 [ 935.738282][ T5768] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 935.759031][ T5768] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 935.764349][ T5768] keyspan 5-1:1.0: device disconnected [ 935.964732][ T5696] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 936.858270][ T5696] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 936.877156][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.877236][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.877281][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.881232][ T5696] usb 4-1: config 0 descriptor?? [ 937.039221][ T31] audit: type=1800 audit(1787247387.671:509): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4400" name="cdrom" dev="configfs" ino=169245 res=0 errno=0 [ 937.061585][T19623] mass_storage.0/lun.0: file too small: file0 [ 937.063191][ T31] audit: type=1800 audit(1787247387.701:510): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4400" name="file" dev="configfs" ino=169246 res=0 errno=0 [ 937.700563][ T5696] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 937.705989][ T5696] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 937.730156][ T5768] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 937.742955][ T5696] input: failed to attach handler kbd to device input80, error: -5 [ 937.802133][ T5696] usb 4-1: USB disconnect, device number 63 [ 937.819835][ T7667] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 937.880251][ T5768] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 937.893373][ T5768] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.893449][ T5768] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 937.893506][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.901917][ T5768] usb 2-1: config 0 descriptor?? [ 937.917913][ T5768] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 937.918127][ T5768] dvb-usb: bulk message failed: -22 (3/0) [ 937.930088][ T5768] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 937.935078][ T5768] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 937.935140][ T5768] usb 2-1: media controller created [ 937.955241][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.983779][ T5768] dvb-usb: bulk message failed: -22 (6/0) [ 937.989136][ T7667] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 938.002206][ T7667] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.002333][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 938.002361][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 938.002384][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 938.002436][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 938.002459][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 938.002482][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 938.002504][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 938.002526][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 938.002570][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 938.002592][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 938.002613][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 938.002635][ T7667] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 938.002654][ T7667] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 938.002726][ T7667] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 938.005540][ T5768] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 938.006886][ T7667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.006911][ T7667] usb 5-1: Product: syz [ 938.006926][ T7667] usb 5-1: Manufacturer: syz [ 938.006964][ T7667] usb 5-1: SerialNumber: syz [ 938.039777][ T5768] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input81 [ 938.048886][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.049062][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.049195][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.059942][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.060101][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.060238][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.060372][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.066296][ T5768] dvb-usb: schedule remote query interval to 150 msecs. [ 938.066347][ T5768] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 938.085707][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.085897][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.086047][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.086187][T19640] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 938.110029][ T7667] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 938.123273][ T7667] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 938.151958][ T7667] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 938.174436][ T7667] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 938.182878][ T7667] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 938.218093][T19638] dvb-usb: bulk message failed: -22 (2/0) [ 938.243927][ T5768] dvb-usb: bulk message failed: -22 (1/0) [ 938.243981][ T5768] dvb-usb: error while querying for an remote control event. [ 938.249456][ T5768] usb 2-1: USB disconnect, device number 93 [ 938.396793][ T7667] usb 5-1: USB disconnect, device number 13 [ 938.541321][ T7667] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 938.555461][ T5768] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 938.590749][ T31] audit: type=1800 audit(1787247389.231:511): pid=19645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4411" name="cdrom" dev="configfs" ino=170498 res=0 errno=0 [ 938.612335][ T31] audit: type=1326 audit(1787247389.251:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19643 comm="syz.0.4410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd30319e0d9 code=0x0 [ 938.616116][ T7667] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 938.627924][ T7667] keyspan 5-1:1.0: device disconnected [ 938.666800][ T31] audit: type=1800 audit(1787247389.301:513): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4411" name="file" dev="configfs" ino=169415 res=0 errno=0 [ 938.677141][T19645] mass_storage.0/lun.0: file too small: file0 [ 939.449537][ T7667] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 939.513307][ T31] audit: type=1800 audit(1787247390.151:514): pid=19670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4420" name="cdrom" dev="configfs" ino=170546 res=0 errno=0 [ 939.537734][ T31] audit: type=1800 audit(1787247390.171:515): pid=19670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4420" name="file" dev="configfs" ino=170547 res=0 errno=0 [ 939.601408][ T7667] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 939.604518][ T7667] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.604620][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 939.604646][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 939.604671][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 939.604695][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 939.604752][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 939.604774][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 939.604796][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 939.604818][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 939.604839][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 939.604861][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 939.604915][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 939.604938][ T7667] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 939.604957][ T7667] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 939.604978][ T7667] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 939.610857][ T7667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.610886][ T7667] usb 2-1: Product: syz [ 939.610903][ T7667] usb 2-1: Manufacturer: syz [ 939.610918][ T7667] usb 2-1: SerialNumber: syz [ 939.622343][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.622505][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.622653][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.622803][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.622951][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.623090][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.623227][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.623365][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.623505][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.630502][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.630667][T19663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.643847][ T7667] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 939.649039][ T7667] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 939.662052][ T7667] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 939.672991][ T7667] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 939.677048][ T7667] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 939.947277][ T7667] usb 2-1: USB disconnect, device number 94 [ 940.017975][ T7667] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 940.037257][ T7667] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 940.048249][ T7667] keyspan 2-1:1.0: device disconnected [ 940.658602][ T7667] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 940.853297][ T7667] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 940.952455][ T7667] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.970622][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 940.986554][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 940.986592][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 940.986681][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 940.986732][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 941.001619][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 941.001890][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 941.001966][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 941.002048][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 941.019065][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 941.019108][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 941.019142][ T7667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.019188][ T7667] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.019212][ T7667] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 941.305928][ T7667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.305966][ T7667] usb 4-1: Product: syz [ 941.305982][ T7667] usb 4-1: Manufacturer: syz [ 941.306028][ T7667] usb 4-1: SerialNumber: syz [ 941.362394][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.370639][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.378391][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.386466][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.394329][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.401978][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.409933][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.417803][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.425481][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.429866][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.429991][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 941.453294][ T7667] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 941.463779][ T7667] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 941.478120][ T7667] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 941.492947][ T7667] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 941.504959][ T7667] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 941.647039][ T31] audit: type=1800 audit(1787247392.281:516): pid=19693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4429" name="cdrom" dev="configfs" ino=170651 res=0 errno=0 [ 941.648148][ T31] audit: type=1800 audit(1787247392.281:517): pid=19693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4429" name="file" dev="configfs" ino=170652 res=0 errno=0 [ 941.658505][T15036] usb 4-1: USB disconnect, device number 64 [ 941.713079][T15036] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 941.751425][T15036] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 941.761006][T15036] keyspan 4-1:1.0: device disconnected [ 941.917147][T19697] fuse: Unknown parameter 'grou00000000000000000000' [ 942.120484][T19703] tmpfs: Bad value for 'mpol' [ 942.990648][T15036] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 943.140197][T15036] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 943.141601][T15036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.164874][T15036] usb 5-1: config 0 descriptor?? [ 943.277461][ T31] audit: type=1800 audit(1787247393.911:518): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4439" name="cdrom" dev="configfs" ino=169589 res=0 errno=0 [ 943.304704][ T31] audit: type=1800 audit(1787247393.941:519): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4439" name="file" dev="configfs" ino=170767 res=0 errno=0 [ 943.541498][T19724] fuse: Unknown parameter 'group_i00000000000000000000' [ 943.898631][T15036] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 943.899150][T15036] [drm:udl_init] *ERROR* Selecting channel failed [ 943.941432][T17549] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 944.100591][T17549] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 944.115116][T17549] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.115224][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 944.115259][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 944.115289][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 944.115350][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 944.115381][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 944.115412][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 944.115441][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 944.115510][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 944.115540][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 944.115568][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 944.115596][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 944.115656][T17549] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 944.115683][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 944.115712][T17549] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 944.175660][T15036] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 944.175689][T15036] [drm] Initialized udl on minor 1 [ 944.220917][T15036] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 944.252338][T17549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.252373][T17549] usb 4-1: Product: syz [ 944.252420][T17549] usb 4-1: Manufacturer: syz [ 944.252437][T17549] usb 4-1: SerialNumber: syz [ 944.257425][T15036] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 944.353206][T15036] usb 5-1: USB disconnect, device number 14 [ 944.367782][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.367964][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368068][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368191][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368294][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368394][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368501][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368638][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368738][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.368838][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.376953][T19730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 944.468002][T17549] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 944.480368][T17549] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 944.504762][T17549] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 944.519622][T17549] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 944.538203][T17549] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 944.795530][ T31] audit: type=1800 audit(1787247395.431:520): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4448" name="cdrom" dev="configfs" ino=170832 res=0 errno=0 [ 944.800078][ T31] audit: type=1800 audit(1787247395.431:521): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4448" name="file" dev="configfs" ino=170833 res=0 errno=0 [ 944.862772][T17549] usb 4-1: USB disconnect, device number 65 [ 944.884275][T15036] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 944.932580][T17549] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 944.938871][T19744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4450'. [ 944.938900][T19744] net_ratelimit: 345 callbacks suppressed [ 944.938988][T19744] openvswitch: netlink: Flow actions attr not present in new flow. [ 944.980592][T17549] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 944.995954][T17549] keyspan 4-1:1.0: device disconnected [ 945.033745][T15036] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 945.038740][T15036] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.038795][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 945.038821][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 945.038844][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 945.038867][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 945.038889][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 945.038911][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 945.038933][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 945.038957][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 945.038979][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 945.039001][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 945.039024][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 945.039046][T15036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.039065][T15036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 945.039085][T15036] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 945.041191][T15036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.041228][T15036] usb 5-1: Product: syz [ 945.041243][T15036] usb 5-1: Manufacturer: syz [ 945.041258][T15036] usb 5-1: SerialNumber: syz [ 945.047518][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.047666][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.047819][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.047945][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.048074][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.048201][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.048335][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.048436][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.048597][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.049481][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.049653][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.054396][T15036] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 945.060937][T15036] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 945.075283][T15036] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 945.086986][T15036] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 945.092020][T15036] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 945.175957][T19748] fuse: Unknown parameter 'group_i00000000000000000000' [ 945.352901][T15036] usb 5-1: USB disconnect, device number 15 [ 945.414873][T15036] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 945.468283][T15036] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 945.474049][T15036] keyspan 5-1:1.0: device disconnected [ 945.749143][ T31] audit: type=1800 audit(1787247396.381:522): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4458" name="cdrom" dev="configfs" ino=170892 res=0 errno=0 [ 945.773180][ T31] audit: type=1800 audit(1787247396.411:523): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4458" name="file" dev="configfs" ino=170893 res=0 errno=0 [ 945.894357][T19764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.963877][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4460'. [ 946.040993][T19770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.051500][T19770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.092491][T19772] fuse: Unknown parameter 'group_i00000000000000000000' [ 946.409472][T12809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 946.581989][T12809] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 946.583523][T12809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.583602][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 946.583633][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 946.583666][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 946.583700][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 946.583743][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 946.583766][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 946.583813][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 946.583835][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 946.583857][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 946.583888][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 946.583919][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 946.583956][T12809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.583991][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.584023][T12809] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 946.588636][T12809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.588670][T12809] usb 5-1: Product: syz [ 946.588684][T12809] usb 5-1: Manufacturer: syz [ 946.588699][T12809] usb 5-1: SerialNumber: syz [ 946.599188][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.601587][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.601735][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.601867][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.602002][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.602113][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.606018][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.606166][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.606300][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.606437][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.606563][T19774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.616691][T12809] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 946.620573][T12809] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 946.648448][T12809] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 946.659223][T12809] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 946.680849][T12809] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 946.881729][T12809] usb 5-1: USB disconnect, device number 16 [ 946.920184][ T31] audit: type=1800 audit(1787247397.561:524): pid=19780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4465" name="zoned" dev="configfs" ino=169707 res=0 errno=0 [ 946.947530][ T31] audit: type=1800 audit(1787247397.581:525): pid=19780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4465" name="zone_nr_conv" dev="configfs" ino=170949 res=0 errno=0 [ 946.965915][T12809] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 946.994765][T12809] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 947.002832][T12809] keyspan 5-1:1.0: device disconnected [ 947.047743][ T31] audit: type=1800 audit(1787247397.681:526): pid=19780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4465" name="power" dev="configfs" ino=170952 res=0 errno=0 [ 947.104426][ T31] audit: type=1800 audit(1787247397.731:527): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4467" name="cdrom" dev="configfs" ino=169779 res=0 errno=0 [ 947.198201][T19780] null_blk: nullb1: using native zone append [ 947.296368][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 947.325171][T19793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.412209][T19795] fuse: Unknown parameter 'group_id00000000000000000000' [ 947.827831][T19780] null_blk: disk nullb1 created [ 947.932551][ T5633] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 948.729629][T12809] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 948.915516][T12809] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 948.954759][T12809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.955095][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 948.955219][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 948.955291][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 948.955427][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 948.955474][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 948.955606][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 948.955675][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 948.955784][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 948.955816][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 948.955960][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 948.955999][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 948.956044][T12809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 948.956085][T12809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 948.956169][T12809] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 949.108640][T12809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.108676][T12809] usb 5-1: Product: syz [ 949.108693][T12809] usb 5-1: Manufacturer: syz [ 949.108709][T12809] usb 5-1: SerialNumber: syz [ 949.118532][T19818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.194223][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.194412][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.194588][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.194726][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.194855][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.194983][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.195139][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.195264][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.195385][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.197168][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.197333][T19815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 949.281292][T12809] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 949.291790][T12809] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 949.313227][T12809] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 949.325980][T12809] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 949.340402][T12809] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 949.465707][T17549] usb 5-1: USB disconnect, device number 17 [ 949.621040][T17549] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 949.641016][T17549] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 949.647937][T17549] keyspan 5-1:1.0: device disconnected [ 950.136489][T19834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4488'. [ 950.301161][T19838] netlink: Conntrack attr has 12 unknown bytes [ 950.301228][T19838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.638724][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 951.638796][ T31] audit: type=1800 audit(1787247402.271:531): pid=19858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4498" name="zoned" dev="configfs" ino=169901 res=0 errno=0 [ 951.642328][ T31] audit: type=1800 audit(1787247402.281:532): pid=19858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4498" name="zone_nr_conv" dev="configfs" ino=169902 res=0 errno=0 [ 951.781849][ T31] audit: type=1800 audit(1787247402.421:533): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4499" name="zoned" dev="configfs" ino=169909 res=0 errno=0 [ 951.803867][ T31] audit: type=1800 audit(1787247402.421:534): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4499" name="zone_nr_conv" dev="configfs" ino=169910 res=0 errno=0 [ 951.880327][T15036] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 952.014913][T19868] netlink: Conntrack attr has 12 unknown bytes [ 952.015028][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.061618][T15036] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 952.073460][T15036] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.073540][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 952.073625][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 952.073656][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 952.073685][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 952.073715][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 952.073743][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 952.073770][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 952.073796][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 952.073825][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 952.073855][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 952.073881][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 952.073909][T15036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.073934][T15036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.073959][T15036] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 952.207704][T15036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.207742][T15036] usb 2-1: Product: syz [ 952.207760][T15036] usb 2-1: Manufacturer: syz [ 952.207775][T15036] usb 2-1: SerialNumber: syz [ 952.274062][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.282151][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.290788][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.311227][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.311484][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.311637][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.311792][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.311944][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.312102][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.312249][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.312407][T19857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 952.383410][T15036] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 952.397797][T15036] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 952.440509][T15036] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 952.457422][T15036] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 952.505785][T15036] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 952.631918][T17549] usb 2-1: USB disconnect, device number 95 [ 952.735726][T17549] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 952.759370][T17549] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 952.792599][T17549] keyspan 2-1:1.0: device disconnected [ 953.279886][T19892] netlink: Conntrack attr has 12 unknown bytes [ 953.279937][T19892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.387506][T19901] fuse: Bad value for 'user_id' [ 954.387567][T19901] fuse: Bad value for 'user_id' [ 955.184251][T19918] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 955.184333][T19918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.277704][T19930] fuse: Bad value for 'fd' [ 956.451722][T19937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 956.464851][T19937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 956.472352][T19937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 956.479037][T19937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 956.487445][T19937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 956.962885][T19952] kvm: pic: single mode not supported [ 956.962994][T19956] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 956.964158][T19952] kvm: pic: level sensitive irq not supported [ 956.964365][T19952] kvm: pic: single mode not supported [ 956.964421][T19952] kvm: pic: level sensitive irq not supported [ 956.965975][T19952] kvm: pic: single mode not supported [ 956.966148][T19952] kvm: pic: level sensitive irq not supported [ 956.966355][T19952] kvm: pic: single mode not supported [ 956.966365][T19952] kvm: pic: level sensitive irq not supported [ 956.967748][T19952] kvm: pic: single mode not supported [ 956.967954][T19952] kvm: pic: level sensitive irq not supported [ 956.968162][T19952] kvm: pic: single mode not supported [ 956.968172][T19952] kvm: pic: level sensitive irq not supported [ 956.971365][T19952] kvm: pic: single mode not supported [ 956.971579][T19952] kvm: pic: level sensitive irq not supported [ 956.971784][T19952] kvm: pic: single mode not supported [ 956.971795][T19952] kvm: pic: level sensitive irq not supported [ 956.972960][T19952] kvm: pic: single mode not supported [ 956.973240][T19952] kvm: pic: level sensitive irq not supported [ 956.973433][T19952] kvm: pic: single mode not supported [ 956.973451][T19952] kvm: pic: level sensitive irq not supported [ 957.015699][T19956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.463911][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 958.517333][T19969] fuse: Bad value for 'fd' [ 958.535826][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4537'. [ 958.624000][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 958.624033][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 958.624075][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 958.885281][T19982] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 958.885394][T19982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.277132][T19997] fuse: Bad value for 'fd' [ 959.833754][ T31] audit: type=1800 audit(1787247410.471:535): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4548" name="zoned" dev="configfs" ino=171549 res=0 errno=0 [ 959.836786][ T31] audit: type=1800 audit(1787247410.471:536): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4548" name="zone_nr_conv" dev="configfs" ino=171550 res=0 errno=0 [ 960.699478][T15603] Bluetooth: hci0: command 0x0406 tx timeout [ 961.124141][T20019] fuse: Bad value for 'fd' [ 961.374869][ T31] audit: type=1326 audit(1787247412.011:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.4.4559" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325ad9e0d9 code=0x0 [ 962.878920][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.890096][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.977205][T20048] fuse: Bad value for 'fd' [ 964.445975][ T31] audit: type=1326 audit(1787247415.081:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20059 comm="syz.4.4571" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325ad9e0d9 code=0x0 [ 964.526531][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.527198][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.683138][T20070] fuse: Bad value for 'fd' [ 966.359116][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4580'. [ 966.521188][T20087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 966.547112][T20087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 966.563563][T20087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 966.581479][T20087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 967.476618][T20101] fuse: Bad value for 'fd' [ 967.551053][T20104] fuse: Bad value for 'fd' [ 967.781559][ T31] audit: type=1326 audit(1787247418.421:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.4.4587" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325ad9e0d9 code=0x0 [ 968.213725][T20097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 968.214050][T20097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 968.214247][T20097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 968.214461][T20097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 968.844868][T20133] fuse: Invalid rootmode [ 969.397970][ T31] audit: type=1326 audit(1787247420.031:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20147 comm="syz.0.4602" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd30319e0d9 code=0x0 [ 969.499471][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 969.709067][T20157] fuse: Invalid rootmode [ 969.760384][T20161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4607'. [ 970.301783][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 970.301839][T15603] Bluetooth: hci2: command 0x0c1a tx timeout [ 970.301886][T15603] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.707941][ T5696] usb 1-1: USB disconnect, device number 2 [ 970.783024][T20186] fuse: Unknown parameter '00000000000000000000' [ 971.246652][ T31] audit: type=1326 audit(1787247421.881:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20194 comm="syz.3.4622" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585f59e0d9 code=0x0 [ 971.419704][T17549] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 971.570619][T17549] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 971.572543][T17549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.572600][T17549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.583540][T17549] usb 2-1: config 0 descriptor?? [ 971.798574][T17549] usbhid 2-1:0.0: can't add hid device: -71 [ 971.798735][T17549] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 971.808858][T17549] usb 2-1: USB disconnect, device number 96 [ 972.087963][T20211] fuse: Unknown parameter '00000000000000000000' [ 972.260128][T17549] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 972.420199][T17549] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 972.422609][T17549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.422661][T17549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.441267][T17549] usb 2-1: config 0 descriptor?? [ 972.955803][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 973.120440][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 973.134155][ T10] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 973.144011][ T10] usb 1-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 973.144046][ T10] usb 1-1: config 0 has no interface number 0 [ 973.144100][ T10] usb 1-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 973.144130][ T10] usb 1-1: config 0 interface 168 has no altsetting 0 [ 973.144170][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.193524][ T31] audit: type=1800 audit(1787247423.821:542): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4632" name="zoned" dev="configfs" ino=172630 res=0 errno=0 [ 973.219367][ T10] usb 1-1: config 0 descriptor?? [ 973.234436][ T10] usbhid 1-1:0.168: couldn't find an input interrupt endpoint [ 973.332414][ T31] audit: type=1326 audit(1787247423.971:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20229 comm="syz.3.4634" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585f59e0d9 code=0x0 [ 973.469025][ T10] usb 1-1: USB disconnect, device number 3 [ 973.937025][T20234] fuse: Unknown parameter '00000000000000000000' [ 974.237923][T17549] usbhid 2-1:0.0: can't add hid device: -71 [ 974.246265][T17549] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 974.273127][T17549] usb 2-1: USB disconnect, device number 97 [ 974.464907][ T31] audit: type=1800 audit(1787247425.101:544): pid=20249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4641" name="zoned" dev="configfs" ino=173263 res=0 errno=0 [ 974.635174][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 974.688181][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 975.070765][T20256] fuse: Unknown parameter 'user00000000000000000000' [ 975.220467][ T31] audit: type=1326 audit(1787247425.861:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20261 comm="syz.4.4647" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325ad9e0d9 code=0x0 [ 975.399703][T12809] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 975.551500][T12809] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 975.552853][T12809] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 975.552881][T12809] usb 1-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 975.552901][T12809] usb 1-1: config 0 has no interface number 0 [ 975.552941][T12809] usb 1-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.552967][T12809] usb 1-1: config 0 interface 168 has no altsetting 0 [ 975.553001][T12809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.558696][T12809] usb 1-1: config 0 descriptor?? [ 975.567994][T12809] usbhid 1-1:0.168: couldn't find an input interrupt endpoint [ 975.739945][T20276] jffs2: notice: (20276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 975.824305][ T5768] usb 1-1: USB disconnect, device number 4 [ 975.908022][T20283] fuse: Unknown parameter 'user00000000000000000000' [ 976.005191][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4657'. [ 976.069832][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4657'. [ 976.244412][ T31] audit: type=1800 audit(1787247426.881:546): pid=20292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4659" name="zoned" dev="configfs" ino=172804 res=0 errno=0 [ 976.266740][ T31] audit: type=1800 audit(1787247426.881:547): pid=20292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4659" name="zone_nr_conv" dev="configfs" ino=172805 res=0 errno=0 [ 976.360789][T20296] netlink: set zone limit has 4 unknown bytes [ 976.424464][T20298] MTD: Couldn't look up './dev/mtdblock0': -2 [ 976.517339][T20302] fuse: Unknown parameter 'user00000000000000000000' [ 976.662537][ T31] audit: type=1800 audit(1787247427.301:548): pid=20310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4668" name="zoned" dev="configfs" ino=172846 res=0 errno=0 [ 976.792904][ T31] audit: type=1800 audit(1787247427.431:549): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4671" name="zoned" dev="configfs" ino=173414 res=0 errno=0 [ 976.810902][ T31] audit: type=1800 audit(1787247427.451:550): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4671" name="zone_nr_conv" dev="configfs" ino=172862 res=0 errno=0 [ 976.891344][T20319] MTD: Couldn't look up './dev/mtdblock0': -2 [ 976.966614][T20321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.966879][T20321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.967133][T20321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 976.967305][T20321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 976.971645][T20323] fuse: Unknown parameter 'user_i00000000000000000000' [ 977.009477][T12809] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 977.079220][ T31] audit: type=1326 audit(1787247427.711:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20327 comm="syz.3.4676" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585f59e0d9 code=0x0 [ 977.190227][T12809] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 977.201748][T12809] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 977.211321][T12809] usb 5-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 977.211357][T12809] usb 5-1: config 0 has no interface number 0 [ 977.211407][T12809] usb 5-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 977.211437][T12809] usb 5-1: config 0 interface 168 has no altsetting 0 [ 977.211478][T12809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.267397][T12809] usb 5-1: config 0 descriptor?? [ 977.287619][T12809] usbhid 5-1:0.168: couldn't find an input interrupt endpoint [ 977.596065][T17549] usb 5-1: USB disconnect, device number 18 [ 977.664707][T20345] MTD: Couldn't look up './dev/mtdblock0': -2 [ 977.757194][T20349] fuse: Unknown parameter 'user_i00000000000000000000' [ 977.969541][ T5768] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 977.984799][T20357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 977.985084][T20357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 977.985259][T20357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 977.985438][T20357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 978.120225][ T5768] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 978.122471][ T5768] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 978.122498][ T5768] usb 2-1: config 0 has no interface number 0 [ 978.125406][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.125432][ T5768] usb 2-1: Product: syz [ 978.125447][ T5768] usb 2-1: Manufacturer: syz [ 978.125463][ T5768] usb 2-1: SerialNumber: syz [ 978.133023][ T5768] usb 2-1: config 0 descriptor?? [ 978.543968][ T5768] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 978.544032][ T5768] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 978.544318][ T5768] asix 2-1:0.251: probe with driver asix failed with error -5 [ 978.553317][ T5768] usb 2-1: USB disconnect, device number 98 [ 978.703044][T17549] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 978.852154][T17549] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 978.853623][T17549] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 978.853653][T17549] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 978.853676][T17549] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.856131][T17549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 978.856158][T17549] usb 4-1: Product: syz [ 978.856173][T17549] usb 4-1: Manufacturer: syz [ 978.856188][T17549] usb 4-1: SerialNumber: syz [ 979.026256][T20371] MTD: Couldn't look up './dev/mtdblock0': -2 [ 979.110765][T17549] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 979.244160][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 979.244216][ T31] audit: type=1800 audit(1787247429.881:554): pid=20377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4697" name="zoned" dev="configfs" ino=173516 res=0 errno=0 [ 979.244272][ T31] audit: type=1800 audit(1787247429.881:555): pid=20377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4697" name="zone_nr_conv" dev="configfs" ino=173517 res=0 errno=0 [ 979.332683][T17549] usb 4-1: USB disconnect, device number 66 [ 979.382228][ T31] audit: type=1326 audit(1787247430.011:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20383 comm="syz.0.4699" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd30319e0d9 code=0x0 [ 979.440572][T20367] usblp0: removed [ 979.454871][ T31] audit: type=1800 audit(1787247430.091:557): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4700" name="cdrom" dev="configfs" ino=173528 res=0 errno=0 [ 979.480119][ T31] audit: type=1800 audit(1787247430.091:558): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4700" name="file" dev="configfs" ino=173529 res=0 errno=0 [ 979.571924][T20391] MTD: Couldn't look up './dev/mtdblock0': -2 [ 979.589481][T12809] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 979.898702][T12809] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 979.952973][T12809] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 979.960684][T12809] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 979.960795][T12809] usb 2-1: config 0 has no interface number 0 [ 979.961144][T12809] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 979.961334][T12809] usb 2-1: config 0 interface 168 has no altsetting 0 [ 979.961599][T12809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.989606][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 980.066149][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 980.066324][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 980.066523][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 980.177164][T12809] usb 2-1: config 0 descriptor?? [ 980.267413][T12809] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 980.385008][T20399] fuse: Unknown parameter 'user_id00000000000000000000' [ 980.496763][T17549] usb 2-1: USB disconnect, device number 99 [ 981.039018][ T31] audit: type=1800 audit(1787247431.671:559): pid=20410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4709" name="cdrom" dev="configfs" ino=173635 res=0 errno=0 [ 981.067367][ T31] audit: type=1800 audit(1787247431.701:560): pid=20410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4709" name="file" dev="configfs" ino=173636 res=0 errno=0 [ 981.242779][T20421] fuse: Unknown parameter 'user_id00000000000000000000' [ 981.444344][ T31] audit: type=1326 audit(1787247432.081:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20424 comm="syz.4.4715" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325ad9e0d9 code=0x0 [ 982.657992][ T31] audit: type=1800 audit(1787247433.291:562): pid=20440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4720" name="cdrom" dev="configfs" ino=173745 res=0 errno=0 [ 982.694218][ T31] audit: type=1800 audit(1787247433.331:563): pid=20440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4720" name="file" dev="configfs" ino=173746 res=0 errno=0 [ 982.860374][ T10] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 983.047104][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 983.061830][ T10] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 983.061882][ T10] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 983.061931][ T10] usb 2-1: config 0 has no interface number 0 [ 983.061976][ T10] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.062008][ T10] usb 2-1: config 0 interface 168 has no altsetting 0 [ 983.062048][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.127173][ T10] usb 2-1: config 0 descriptor?? [ 983.157045][ T10] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 984.037708][ T5723] usb 2-1: USB disconnect, device number 100 [ 985.193653][ T31] audit: type=1800 audit(1787247435.831:564): pid=20470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4729" name="cdrom" dev="configfs" ino=173801 res=0 errno=0 [ 985.220282][ T31] audit: type=1800 audit(1787247435.861:565): pid=20470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4729" name="file" dev="configfs" ino=173804 res=0 errno=0 [ 985.244361][T20470] mass_storage.0/lun.0: file too small: file0 [ 985.619951][ T5768] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 985.772848][ T5768] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 985.773861][ T5768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.773928][ T5768] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 985.773954][ T5768] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 985.773976][ T5768] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 985.773999][ T5768] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 985.774019][ T5768] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 985.776640][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.776671][ T5768] usb 4-1: Product: syz [ 985.776687][ T5768] usb 4-1: Manufacturer: syz [ 985.776702][ T5768] usb 4-1: SerialNumber: syz [ 985.802391][T20475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 985.802559][T20475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 985.802717][T20475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 985.821428][ T5768] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 985.822008][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 985.822083][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 985.823789][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 985.823876][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 985.823955][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 985.824493][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 985.840341][ T5768] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 985.845736][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 985.845837][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 985.845918][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 985.846015][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 985.848090][ T5768] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 985.855563][ T5768] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 985.935171][T12809] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 986.110686][T12809] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 986.122789][T12809] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 986.122830][T12809] usb 2-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 986.122863][T12809] usb 2-1: config 0 has no interface number 0 [ 986.122930][T12809] usb 2-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.122953][T12809] usb 2-1: config 0 interface 168 has no altsetting 0 [ 986.122979][T12809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.182117][T12809] usb 2-1: config 0 descriptor?? [ 986.197089][T12809] usbhid 2-1:0.168: couldn't find an input interrupt endpoint [ 986.240103][T12809] usb 4-1: USB disconnect, device number 67 [ 986.258211][T12809] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 986.276453][T12809] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 986.291340][T12809] keyspan 4-1:1.0: device disconnected [ 986.435008][ T5723] usb 2-1: USB disconnect, device number 101 [ 987.554654][ T31] audit: type=1800 audit(1787247438.191:566): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4740" name="cdrom" dev="configfs" ino=173925 res=0 errno=0 [ 987.580570][ T31] audit: type=1800 audit(1787247438.221:567): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4740" name="file" dev="configfs" ino=174344 res=0 errno=0 [ 987.582159][T20499] mass_storage.0/lun.0: file too small: file0 [ 987.655686][ T31] audit: type=1800 audit(1787247438.291:568): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4743" name="cdrom" dev="configfs" ino=173933 res=0 errno=0 [ 987.655788][ T31] audit: type=1800 audit(1787247438.291:569): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4743" name="file" dev="configfs" ino=173934 res=0 errno=0 [ 987.702577][ T31] audit: type=1800 audit(1787247438.341:570): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4743" name="UDC" dev="configfs" ino=173935 res=0 errno=0 [ 989.249997][ T5768] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 989.301872][ T31] audit: type=1800 audit(1787247439.941:571): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4753" name="cdrom" dev="configfs" ino=173956 res=0 errno=0 [ 989.325843][T20532] mass_storage.0/lun.0: file too small: file0 [ 989.326053][ T31] audit: type=1800 audit(1787247439.961:572): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4753" name="file" dev="configfs" ino=173957 res=0 errno=0 [ 989.400850][ T5768] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 989.401955][ T5768] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 989.401981][ T5768] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 989.402000][ T5768] usb 4-1: config 0 has no interface number 0 [ 989.402039][ T5768] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.402076][ T5768] usb 4-1: config 0 interface 168 has no altsetting 0 [ 989.402110][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.405154][ T5768] usb 4-1: config 0 descriptor?? [ 989.417818][ T5768] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 989.638863][ T5768] usb 4-1: USB disconnect, device number 68 [ 989.722749][ T31] audit: type=1800 audit(1787247440.361:573): pid=20540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4757" name="cdrom" dev="configfs" ino=175128 res=0 errno=0 [ 989.750825][T20540] mass_storage.0/lun.0: file too small: file0 [ 990.908800][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 990.908890][ T31] audit: type=1800 audit(1787247441.541:577): pid=20555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4763" name="cdrom" dev="configfs" ino=174481 res=0 errno=0 [ 990.918456][ T31] audit: type=1800 audit(1787247441.551:578): pid=20555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4763" name="file" dev="configfs" ino=174482 res=0 errno=0 [ 991.279764][T20569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 991.279985][T20569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.280176][T20569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 991.280361][T20569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 991.405435][T20574] MTD: Couldn't look up './dev/mtdblock0': -2 [ 991.419443][ T5724] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 991.461540][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4771'. [ 991.511556][ T31] audit: type=1800 audit(1787247442.151:579): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4772" name="zone_nr_conv" dev="configfs" ino=175192 res=0 errno=0 [ 991.572761][ T5724] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 991.585574][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.596437][ T5724] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 991.607350][ T5724] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.624332][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 991.632897][ T5724] usb 1-1: Product: syz [ 991.637212][ T5724] usb 1-1: Manufacturer: syz [ 991.666604][ T5724] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 991.678243][ C0] ================================================================== [ 991.678281][ C0] BUG: KASAN: slab-use-after-free in dummy_timer+0xcdb/0x4cf0 [ 991.678424][ C0] Read of size 1 at addr ffff88802af024e8 by task kworker/0:6/5724 [ 991.678445][ C0] [ 991.678461][ C0] CPU: 0 UID: 0 PID: 5724 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.678494][ C0] Tainted: [L]=SOFTLOCKUP [ 991.678504][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.678521][ C0] Workqueue: usb_hub_wq hub_event [ 991.678603][ C0] Call Trace: [ 991.678614][ C0] [ 991.678625][ C0] dump_stack_lvl+0xe8/0x150 [ 991.678661][ C0] print_address_description+0x55/0x1e0 [ 991.678703][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 991.678733][ C0] print_report+0x58/0x70 [ 991.678762][ C0] kasan_report+0x117/0x150 [ 991.678790][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 991.678824][ C0] dummy_timer+0xcdb/0x4cf0 [ 991.678860][ C0] ? __lock_acquire+0x6df/0x2e50 [ 991.678910][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 991.678948][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 991.678977][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 991.679014][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 991.679040][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 991.679086][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 991.679116][ C0] handle_softirqs+0x226/0x860 [ 991.679143][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 991.679169][ C0] __irq_exit_rcu+0xcb/0x220 [ 991.679193][ C0] irq_exit_rcu+0x9/0x30 [ 991.679217][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 991.679247][ C0] [ 991.679254][ C0] [ 991.679263][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.679286][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 991.679313][ C0] Code: f7 e8 5d 6a b3 f5 f7 c3 00 02 00 00 74 05 e8 c0 a2 df f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 14 86 a4 f5 65 48 8b 05 bc ce c8 07 48 85 c0 74 18 5b 41 5e e9 [ 991.679331][ C0] RSP: 0018:ffffc90004a567e8 EFLAGS: 00000206 [ 991.679349][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 991.679364][ C0] RDX: 0000000000000006 RSI: ffffffff8e586ce4 RDI: 0000000000000001 [ 991.679377][ C0] RBP: dffffc0000000000 R08: ffffffff909ba57f R09: 1ffffffff21374af [ 991.679391][ C0] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff888032122000 [ 991.679408][ C0] R13: ffff88804e8b53b0 R14: ffff88804e8b53b0 R15: ffffffff8ccfb620 [ 991.679434][ C0] garmin_write_bulk+0xac/0x6d0 [ 991.679514][ C0] garmin_init_session+0xc9/0x210 [ 991.679540][ C0] garmin_port_probe+0x20a/0x2a0 [ 991.679562][ C0] usb_serial_device_probe+0xde/0x2e0 [ 991.679634][ C0] ? really_probe+0x21a/0xae0 [ 991.679682][ C0] ? __pfx_usb_serial_device_probe+0x10/0x10 [ 991.679711][ C0] really_probe+0x254/0xae0 [ 991.679733][ C0] __driver_probe_device+0x1e8/0x360 [ 991.679767][ C0] driver_probe_device+0x4f/0x240 [ 991.679790][ C0] __device_attach_driver+0x270/0x410 [ 991.679826][ C0] bus_for_each_drv+0x258/0x2f0 [ 991.679851][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 991.679883][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 991.679910][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 991.679948][ C0] __device_attach+0x2c4/0x450 [ 991.679980][ C0] ? __pfx___device_attach+0x10/0x10 [ 991.680011][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 991.680039][ C0] ? _raw_spin_unlock+0x28/0x50 [ 991.680070][ C0] device_initial_probe+0xa1/0xd0 [ 991.680102][ C0] bus_probe_device+0x12a/0x220 [ 991.680131][ C0] device_add+0x7d7/0xb80 [ 991.680163][ C0] usb_serial_probe+0x26e0/0x2e50 [ 991.680191][ C0] ? __pfx_garmin_write_bulk_callback+0x10/0x10 [ 991.680226][ C0] ? __pfx_garmin_write_bulk_callback+0x10/0x10 [ 991.680253][ C0] usb_probe_interface+0x788/0xe50 [ 991.680322][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 991.680351][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 991.680383][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 991.680415][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 991.680440][ C0] really_probe+0x254/0xae0 [ 991.680463][ C0] __driver_probe_device+0x1e8/0x360 [ 991.680499][ C0] driver_probe_device+0x4f/0x240 [ 991.680520][ C0] __device_attach_driver+0x270/0x410 [ 991.680555][ C0] bus_for_each_drv+0x258/0x2f0 [ 991.680582][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 991.680611][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 991.680639][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 991.680672][ C0] __device_attach+0x2c4/0x450 [ 991.680705][ C0] ? __pfx___device_attach+0x10/0x10 [ 991.680736][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 991.680764][ C0] ? _raw_spin_unlock+0x28/0x50 [ 991.680794][ C0] device_initial_probe+0xa1/0xd0 [ 991.680826][ C0] bus_probe_device+0x12a/0x220 [ 991.680854][ C0] device_add+0x7d7/0xb80 [ 991.680880][ C0] usb_set_configuration+0x1ad8/0x2180 [ 991.680914][ C0] usb_generic_driver_probe+0x8d/0x150 [ 991.681014][ C0] usb_probe_device+0x1c3/0x3b0 [ 991.681044][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 991.681071][ C0] really_probe+0x254/0xae0 [ 991.681095][ C0] __driver_probe_device+0x1e8/0x360 [ 991.681128][ C0] driver_probe_device+0x4f/0x240 [ 991.681150][ C0] __device_attach_driver+0x270/0x410 [ 991.681181][ C0] bus_for_each_drv+0x258/0x2f0 [ 991.681207][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 991.681240][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 991.681267][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 991.681300][ C0] __device_attach+0x2c4/0x450 [ 991.681330][ C0] ? __pfx___device_attach+0x10/0x10 [ 991.681361][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 991.681389][ C0] ? _raw_spin_unlock+0x28/0x50 [ 991.681420][ C0] device_initial_probe+0xa1/0xd0 [ 991.681451][ C0] bus_probe_device+0x12a/0x220 [ 991.681478][ C0] device_add+0x7d7/0xb80 [ 991.681507][ C0] usb_new_device+0x9aa/0x1690 [ 991.681534][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 991.681557][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 991.681586][ C0] hub_event+0x28e8/0x4d30 [ 991.681611][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 991.681656][ C0] ? __pfx_hub_event+0x10/0x10 [ 991.681685][ C0] ? rcu_is_watching+0x16/0xb0 [ 991.681709][ C0] ? process_scheduled_works+0x97a/0x1630 [ 991.681735][ C0] process_scheduled_works+0xc3d/0x1630 [ 991.681773][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 991.681803][ C0] ? assign_work+0x3cf/0x5d0 [ 991.681828][ C0] worker_thread+0xa47/0xfb0 [ 991.681860][ C0] ? __kthread_parkme+0x71/0x1f0 [ 991.681893][ C0] kthread+0x38b/0x480 [ 991.681924][ C0] ? __pfx_worker_thread+0x10/0x10 [ 991.681956][ C0] ? __pfx_kthread+0x10/0x10 [ 991.681988][ C0] ret_from_fork+0x514/0xb70 [ 991.682022][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 991.682053][ C0] ? __switch_to+0xc89/0x1420 [ 991.682081][ C0] ? __pfx_kthread+0x10/0x10 [ 991.682113][ C0] ret_from_fork_asm+0x1a/0x30 [ 991.682148][ C0] [ 991.682159][ C0] [ 991.682165][ C0] Allocated by task 14223: [ 991.682179][ C0] kasan_save_track+0x3e/0x80 [ 991.682208][ C0] __kasan_kmalloc+0x93/0xb0 [ 991.682239][ C0] __kmalloc_noprof+0x36b/0x720 [ 991.682265][ C0] usb_copy_descriptors+0xf7/0x320 [ 991.682330][ C0] f_midi2_bind+0x2736/0x2c40 [ 991.682397][ C0] usb_add_function+0x2e1/0x9f0 [ 991.682418][ C0] configfs_composite_bind+0xde0/0x1410 [ 991.682459][ C0] gadget_bind_driver+0x2ca/0x9e0 [ 991.682483][ C0] really_probe+0x254/0xae0 [ 991.682499][ C0] __driver_probe_device+0x1e8/0x360 [ 991.682523][ C0] driver_probe_device+0x4f/0x240 [ 991.682539][ C0] __driver_attach+0x339/0x600 [ 991.682566][ C0] bus_for_each_dev+0x23b/0x2c0 [ 991.682588][ C0] bus_add_driver+0x345/0x670 [ 991.682610][ C0] driver_register+0x23a/0x320 [ 991.682630][ C0] usb_gadget_register_driver_owner+0xf9/0x270 [ 991.682659][ C0] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 991.682690][ C0] configfs_write_iter+0x337/0x430 [ 991.682751][ C0] vfs_write+0x612/0xba0 [ 991.682772][ C0] ksys_write+0x150/0x270 [ 991.682791][ C0] do_syscall_64+0x166/0x520 [ 991.682811][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.682831][ C0] [ 991.682838][ C0] Freed by task 20182: [ 991.682849][ C0] kasan_save_track+0x3e/0x80 [ 991.682878][ C0] kasan_save_free_info+0x40/0x50 [ 991.682901][ C0] __kasan_slab_free+0x5c/0x80 [ 991.682926][ C0] kfree+0x1c5/0x650 [ 991.683059][ C0] usb_free_all_descriptors+0x78/0x110 [ 991.683084][ C0] purge_configs_funcs+0x248/0x3d0 [ 991.683107][ C0] configfs_composite_unbind+0xa4/0x1c0 [ 991.683126][ C0] gadget_unbind_driver+0x1cb/0x410 [ 991.683155][ C0] device_release_driver_internal+0x48b/0x880 [ 991.683183][ C0] driver_detach+0x1f3/0x2d0 [ 991.683211][ C0] bus_remove_driver+0x226/0x320 [ 991.683236][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 991.683265][ C0] gadget_dev_desc_UDC_store+0x17a/0x2f0 [ 991.683293][ C0] configfs_write_iter+0x337/0x430 [ 991.683330][ C0] vfs_write+0x612/0xba0 [ 991.683359][ C0] ksys_write+0x150/0x270 [ 991.683383][ C0] do_syscall_64+0x166/0x520 [ 991.683403][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.683425][ C0] [ 991.683433][ C0] The buggy address belongs to the object at ffff88802af02400 [ 991.683433][ C0] which belongs to the cache kmalloc-512 of size 512 [ 991.683454][ C0] The buggy address is located 232 bytes inside of [ 991.683454][ C0] freed 512-byte region [ffff88802af02400, ffff88802af02600) [ 991.683477][ C0] [ 991.683483][ C0] The buggy address belongs to the physical page: [ 991.683496][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802af03000 pfn:0x2af00 [ 991.683600][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 991.683618][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 991.683641][ C0] page_type: f5(slab) [ 991.683664][ C0] raw: 00fff00000000240 ffff88813ff15c80 ffffea00019d8510 ffffea0001e6ef10 [ 991.683686][ C0] raw: ffff88802af03000 000000000010000d 00000000f5000000 0000000000000000 [ 991.683706][ C0] head: 00fff00000000240 ffff88813ff15c80 ffffea00019d8510 ffffea0001e6ef10 [ 991.683724][ C0] head: ffff88802af03000 000000000010000d 00000000f5000000 0000000000000000 [ 991.683744][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 991.683764][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 991.683777][ C0] page dumped because: kasan: bad access detected [ 991.683789][ C0] page_owner tracks the page as allocated [ 991.683798][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5264, tgid 5264 (dbus-daemon), ts 57579641112 [ 991.683835][ C0] post_alloc_hook+0x1f9/0x250 [ 991.683866][ C0] get_page_from_freelist+0x2209/0x2280 [ 991.683896][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 991.683924][ C0] allocate_slab+0x7d/0x620 [ 991.683947][ C0] refill_objects+0x2d5/0x350 [ 991.683968][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 991.683988][ C0] __kmalloc_noprof+0x47b/0x720 [ 991.684011][ C0] tomoyo_init_log+0x1aae/0x1fa0 [ 991.684035][ C0] tomoyo_supervisor+0x35f/0x1560 [ 991.684055][ C0] tomoyo_path_permission+0x262/0x3b0 [ 991.684080][ C0] tomoyo_path_perm+0x3f3/0x560 [ 991.684102][ C0] security_inode_getattr+0x12b/0x310 [ 991.684124][ C0] vfs_getattr+0x23/0x70 [ 991.684143][ C0] vfs_statx_path+0x2b/0x230 [ 991.684165][ C0] vfs_statx+0x12e/0x200 [ 991.684182][ C0] vfs_fstatat+0x11b/0x170 [ 991.684199][ C0] page last free pid 4994 tgid 4994 ts 49139901950 stack trace: [ 991.684219][ C0] __free_frozen_pages+0xc93/0xd90 [ 991.684245][ C0] __slab_free+0x274/0x2c0 [ 991.684272][ C0] qlist_free_all+0x99/0x100 [ 991.684300][ C0] kasan_quarantine_reduce+0x148/0x160 [ 991.684328][ C0] __kasan_slab_alloc+0x22/0x80 [ 991.684360][ C0] __kmalloc_noprof+0x307/0x720 [ 991.684385][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 991.684433][ C0] tomoyo_path_perm+0x283/0x560 [ 991.684458][ C0] security_inode_getattr+0x12b/0x310 [ 991.684482][ C0] __x64_sys_newfstat+0x133/0x270 [ 991.684503][ C0] do_syscall_64+0x166/0x520 [ 991.684531][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.684553][ C0] [ 991.684561][ C0] Memory state around the buggy address: [ 991.684575][ C0] ffff88802af02380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 991.684591][ C0] ffff88802af02400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.684606][ C0] >ffff88802af02480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.684618][ C0] ^ [ 991.684631][ C0] ffff88802af02500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.684647][ C0] ffff88802af02580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 991.684659][ C0] ================================================================== [ 991.684675][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 992.971270][ C0] CPU: 0 UID: 0 PID: 5724 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.982221][ C0] Tainted: [L]=SOFTLOCKUP [ 992.986563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.996829][ C0] Workqueue: usb_hub_wq hub_event [ 993.002489][ C0] Call Trace: [ 993.005788][ C0] [ 993.008813][ C0] vpanic+0x56d/0xa60 [ 993.012915][ C0] ? __pfx_vpanic+0x10/0x10 [ 993.017527][ C0] panic+0xc5/0xd0 [ 993.021367][ C0] ? __pfx_panic+0x10/0x10 [ 993.025892][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.030676][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.035554][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.040510][ C0] check_panic_on_warn+0x89/0xb0 [ 993.045541][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.050264][ C0] end_report+0x73/0x170 [ 993.054608][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.059484][ C0] kasan_report+0x128/0x150 [ 993.063998][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 993.068696][ C0] dummy_timer+0xcdb/0x4cf0 [ 993.073480][ C0] ? __lock_acquire+0x6df/0x2e50 [ 993.078730][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.084137][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 993.089089][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.095277][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 993.100607][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 993.105835][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 993.111048][ C0] handle_softirqs+0x226/0x860 [ 993.115829][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 993.120652][ C0] __irq_exit_rcu+0xcb/0x220 [ 993.125259][ C0] irq_exit_rcu+0x9/0x30 [ 993.129508][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 993.135302][ C0] [ 993.138251][ C0] [ 993.141187][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.147263][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 993.153785][ C0] Code: f7 e8 5d 6a b3 f5 f7 c3 00 02 00 00 74 05 e8 c0 a2 df f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 14 86 a4 f5 65 48 8b 05 bc ce c8 07 48 85 c0 74 18 5b 41 5e e9 [ 993.173589][ C0] RSP: 0018:ffffc90004a567e8 EFLAGS: 00000206 [ 993.179863][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 993.187944][ C0] RDX: 0000000000000006 RSI: ffffffff8e586ce4 RDI: 0000000000000001 [ 993.196022][ C0] RBP: dffffc0000000000 R08: ffffffff909ba57f R09: 1ffffffff21374af [ 993.204091][ C0] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff888032122000 [ 993.212378][ C0] R13: ffff88804e8b53b0 R14: ffff88804e8b53b0 R15: ffffffff8ccfb620 [ 993.220496][ C0] garmin_write_bulk+0xac/0x6d0 [ 993.225501][ C0] garmin_init_session+0xc9/0x210 [ 993.230557][ C0] garmin_port_probe+0x20a/0x2a0 [ 993.235645][ C0] usb_serial_device_probe+0xde/0x2e0 [ 993.241072][ C0] ? really_probe+0x21a/0xae0 [ 993.245771][ C0] ? __pfx_usb_serial_device_probe+0x10/0x10 [ 993.251948][ C0] really_probe+0x254/0xae0 [ 993.256476][ C0] __driver_probe_device+0x1e8/0x360 [ 993.261795][ C0] driver_probe_device+0x4f/0x240 [ 993.266829][ C0] __device_attach_driver+0x270/0x410 [ 993.272406][ C0] bus_for_each_drv+0x258/0x2f0 [ 993.277790][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 993.283802][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 993.289506][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.295623][ C0] __device_attach+0x2c4/0x450 [ 993.300439][ C0] ? __pfx___device_attach+0x10/0x10 [ 993.305857][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 993.310988][ C0] ? _raw_spin_unlock+0x28/0x50 [ 993.315878][ C0] device_initial_probe+0xa1/0xd0 [ 993.321226][ C0] bus_probe_device+0x12a/0x220 [ 993.326105][ C0] device_add+0x7d7/0xb80 [ 993.330535][ C0] usb_serial_probe+0x26e0/0x2e50 [ 993.335962][ C0] ? __pfx_garmin_write_bulk_callback+0x10/0x10 [ 993.342343][ C0] ? __pfx_garmin_write_bulk_callback+0x10/0x10 [ 993.348784][ C0] usb_probe_interface+0x788/0xe50 [ 993.353931][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 993.359671][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 993.365238][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 993.370367][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 993.376188][ C0] really_probe+0x254/0xae0 [ 993.380699][ C0] __driver_probe_device+0x1e8/0x360 [ 993.386109][ C0] driver_probe_device+0x4f/0x240 [ 993.391137][ C0] __device_attach_driver+0x270/0x410 [ 993.396703][ C0] bus_for_each_drv+0x258/0x2f0 [ 993.401567][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 993.407567][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 993.413046][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.419391][ C0] __device_attach+0x2c4/0x450 [ 993.424256][ C0] ? __pfx___device_attach+0x10/0x10 [ 993.429606][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 993.434818][ C0] ? _raw_spin_unlock+0x28/0x50 [ 993.439684][ C0] device_initial_probe+0xa1/0xd0 [ 993.444812][ C0] bus_probe_device+0x12a/0x220 [ 993.449884][ C0] device_add+0x7d7/0xb80 [ 993.454342][ C0] usb_set_configuration+0x1ad8/0x2180 [ 993.460231][ C0] usb_generic_driver_probe+0x8d/0x150 [ 993.465705][ C0] usb_probe_device+0x1c3/0x3b0 [ 993.470663][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 993.476048][ C0] really_probe+0x254/0xae0 [ 993.480566][ C0] __driver_probe_device+0x1e8/0x360 [ 993.485977][ C0] driver_probe_device+0x4f/0x240 [ 993.491011][ C0] __device_attach_driver+0x270/0x410 [ 993.496491][ C0] bus_for_each_drv+0x258/0x2f0 [ 993.501358][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 993.507287][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 993.512756][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.518591][ C0] __device_attach+0x2c4/0x450 [ 993.523366][ C0] ? __pfx___device_attach+0x10/0x10 [ 993.528747][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 993.533917][ C0] ? _raw_spin_unlock+0x28/0x50 [ 993.538791][ C0] device_initial_probe+0xa1/0xd0 [ 993.543839][ C0] bus_probe_device+0x12a/0x220 [ 993.548704][ C0] device_add+0x7d7/0xb80 [ 993.553047][ C0] usb_new_device+0x9aa/0x1690 [ 993.557857][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 993.563063][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 993.568284][ C0] hub_event+0x28e8/0x4d30 [ 993.572975][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 993.578292][ C0] ? __pfx_hub_event+0x10/0x10 [ 993.583155][ C0] ? rcu_is_watching+0x16/0xb0 [ 993.587955][ C0] ? process_scheduled_works+0x97a/0x1630 [ 993.593777][ C0] process_scheduled_works+0xc3d/0x1630 [ 993.599591][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.605581][ C0] ? assign_work+0x3cf/0x5d0 [ 993.610202][ C0] worker_thread+0xa47/0xfb0 [ 993.614911][ C0] ? __kthread_parkme+0x71/0x1f0 [ 993.619874][ C0] kthread+0x38b/0x480 [ 993.623984][ C0] ? __pfx_worker_thread+0x10/0x10 [ 993.629279][ C0] ? __pfx_kthread+0x10/0x10 [ 993.633908][ C0] ret_from_fork+0x514/0xb70 [ 993.638511][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 993.643648][ C0] ? __switch_to+0xc89/0x1420 [ 993.648543][ C0] ? __pfx_kthread+0x10/0x10 [ 993.653320][ C0] ret_from_fork_asm+0x1a/0x30 [ 993.658105][ C0] [ 993.661475][ C0] Kernel Offset: disabled [ 993.665814][ C0] Rebooting in 86400 seconds..