last executing test programs: 4m2.337042362s ago: executing program 0 (id=803): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x0, 0x15, 0x8, "1fc901b43afa1834"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0x3, 0x3, "cac942"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m59.930238273s ago: executing program 0 (id=827): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 3m58.679779639s ago: executing program 0 (id=836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="02c081") syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) 3m56.168523263s ago: executing program 0 (id=853): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m55.932481949s ago: executing program 0 (id=855): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x181042, 0x0) syz_fuse_handle_req(r2, &(0x7f0000001440)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.36616609s ago: executing program 0 (id=857): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 3m54.741056858s ago: executing program 32 (id=857): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 2m10.942057341s ago: executing program 2 (id=1663): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 2m10.657886484s ago: executing program 2 (id=1665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0xc0, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60ffff00008a0640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5018100090780000b87ef5d8ca21561822d057bbb5"], 0x0) 2m10.556401362s ago: executing program 2 (id=1666): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) read$dsp(r0, &(0x7f00000000c0)=""/44, 0x2c) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x33) 2m10.197396127s ago: executing program 2 (id=1668): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 2m10.124009126s ago: executing program 2 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="3e0f01c9c4e2ddbb2cca0f01dfc4234d026e0200460f3066b816018ed0c441ff12db43710ef30f01d8440f20c0350f000000440f22c0", 0x36}], 0x1, 0x66, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m9.785454758s ago: executing program 2 (id=1670): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x2}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xf}) 2m9.388454767s ago: executing program 33 (id=1670): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x2}, {@local, 0x4}, 0x400, "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"}, 0x418, 0xf}) 3.724423546s ago: executing program 4 (id=2786): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a80080002800800e500080000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3.62262822s ago: executing program 3 (id=2788): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.542183121s ago: executing program 3 (id=2789): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250900000028000280080002000200008008000100002000001400038008000100f800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.45138797s ago: executing program 4 (id=2790): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) close(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3.374305855s ago: executing program 3 (id=2791): r0 = socket$kcm(0x11, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0x4) 3.163894531s ago: executing program 4 (id=2792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 2.698389167s ago: executing program 3 (id=2795): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) fchdir(r0) close(r0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) chroot(&(0x7f0000000100)='./file0\x00') 2.524771502s ago: executing program 3 (id=2797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x6, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) 2.524487052s ago: executing program 6 (id=2798): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0x10, 0xcf, {0xcf, 0xb, "b2f1d0e11991a967942f6eda72e0015aa5a01ca3aa669dc271caacff0eafb50cb1b69b62a2b1e5b3e65290aa57eace4ac9cd583b23409728a04b808120bf3bf6dc25393146c38b9b459fd84c70ad44db81df21d3966a15745a5e1691d6d726c7cc390ea069ce6a901682aac4ef93c97d9d45e319826a541a7784acc4e7386f753b84e62cc9b1a9c54c2be13dca450b82552be50c12c4dcdbb22660720e5e7e982306e9d76778ce45b46833998f33bf1e6f35015706715e95ed1ecb70edf20b921e661b98087c8fb9d79c4c7891"}}, &(0x7f0000000500)={0x0, 0x3, 0x75, @string={0x75, 0x3, "7c2811a26c95960f0c48d45c497435e7ee74cc15877ef114ef4480f741770cabab816d59abdf451f9b36621d67515fec72a7ebddb39477dfb701ccb189fcccf3f055f733acd12bb89cfb45bf22810fc92d3ff785fc00454f48a510c68df760a8bf6d5e23b68b547da5ad6ada6707bc88fdb885"}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x20, 0xe, 0x1, "c7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380), &(0x7f0000000400)={0x40, 0x5, 0x6, "9f31a1695f2d"}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000005979e08d21001000000000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="20fff6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.371045597s ago: executing program 3 (id=2800): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3", @ANYBLOB], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "79caee2e", {0x3, 0x100, 0x0, 0x2, 0x40, 0x9, 0xb}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 2.224553934s ago: executing program 4 (id=2803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 2.076712642s ago: executing program 5 (id=2805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)="a7", 0x1}], 0x1, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20004080) 2.002006205s ago: executing program 1 (id=2806): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='user..'], 0x0, 0x0, 0x1) close(r0) 1.802612929s ago: executing program 5 (id=2807): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed00", 0x13}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}, {&(0x7f0000000100)="127d589163267e4b0eda2e", 0xb}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.723714706s ago: executing program 4 (id=2808): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.316802652s ago: executing program 1 (id=2809): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.059495968s ago: executing program 6 (id=2810): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.058241321s ago: executing program 1 (id=2811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) pselect6(0x40, &(0x7f0000000480)={0x3, 0x2e62276b, 0x100, 0x10000, 0x5, 0x6, 0x7ff, 0xe783}, &(0x7f0000000500)={0x8, 0x6, 0x80000000, 0x9, 0xa, 0xff53, 0x358, 0x4}, 0x0, 0x0, 0x0) 988.613016ms ago: executing program 1 (id=2812): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002600)='.\x00', 0x343400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) 842.84104ms ago: executing program 5 (id=2813): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r0, 0x5501) 774.597775ms ago: executing program 1 (id=2814): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 587.98964ms ago: executing program 1 (id=2815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x7}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 587.763192ms ago: executing program 6 (id=2816): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 447.971571ms ago: executing program 5 (id=2817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) 447.723794ms ago: executing program 4 (id=2818): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0000000001ffff00"}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000b40)=@vmx={0x8, 0x0, 0x2080, {0xe000, 0xf000, {0x1}, 0x0, 0x7}, {"8d84cc65723cbe548fd4178ffd9cf06b52f5896e3f1b4f25640f155ccb5444d15c0263cfb4bba62d019fad2cba9e58d58f85d92ba127962cc880af49ff5bfd8b951e400c89ce635da8d3a63e1ad9541ce6f164f8638ea72a1671e2c3050887d4b528d22a1c6ac12b361111ea6369e6a819732e3a617b830ab4721a7fc61c58108f0538f1a3f9387d9b6eb3074f24cdab2f4b6797f776d34cc7627e9acdc00b375445230ecdda749ccc710c3b736e42985e45a7df520c74ddb80cedc7df4ed239c37fb5245a4b78d0dadf9af32735fb1183a498d30c5fdc99b39db847c43430521ec907507ce9a4c03d6e0290849b73869165224f098bbca794affa3496bd4dee95f236c6f1c61ed1c4b35995e6f47a4772a4e28272f48a1247bb93fd825f7e6f31d91c62055891b8140d231be795e01db9f5df11af5d649d74b41a237402abbcec02e8ffda0c4562e2a08a6a8f892a32d11bc6834e0da75931cb301ac2b0ad834a9dabd335391adf5437eccc1ec529d50c5c47f80ce6d3cee5203371c8925cf35e9191f1c793cd5edcf6e79db7ba2ace8ca1dd60cf289689dd58e4384cdd77b2bdd5095249497037178d5e1a4a21a08f5a42db123433576271c50e1e2df878c26f707c3d81c2583e3ba6fd41111219e479598642806a167e7fe51b23e727588e6b1eb5b60ed58c77bf8f0a4cadd8bb1969a5e14150a30c370cea06d2a6cced710039cbfe9d9ee5f4cf591ab1ef7b7675a0031d7d4df96dfbebbc57bacbd67421bd520a1f2c5779ff272e86b9ba7a5b522ff844e9f68b6025d57ff26c5fe51a95d1e0968822e5fa95185a02f4d03e6007e522caad07f33777c81e201cfbcbbcb8b79e8138bf0d62372d485a2eb7b31c0078d30cebee845e7eef6994b720629685d7702cfbb3b213d46d934dee0f2168eb7838bd32195ebf96df8b40e6f8b546bfeccdad672f33853f5d8397fe12a0fa5da322ce6de1f07487a9fa516422d1f556b72d6df87df55f8d7483b0728713a091359daaddb804cd0cb15626c45d6923a9eab24b2a3bb9e7b1ec32ec6a47b5d288dad2b5ad2de22154da3e29d80db90f105e8db3af1cc43fd8a919267a40e9644cb7a7191d0a117b9d00bc20fa00c2b539f5552777c8c5c947da85af7fefc6e8f7c65625167f08f02c9ce0764beeebcc7a1c3649c0d29b4b9e94d8107707d36bacfaf32fa013de8c8e45138e99b21d2cf5f91be8bc7425c4fb2b22b3061075122f5c9a20f32d491faaf3c146dd8d35234ed995361243803d738c12857b4c007f507ab782db59184f888988b6c1f0badd54ed6137983e5ec1a2376af6cf7023e717dbb250fc74d68db70a8d9e59afc02444fb4ff503a6fbd0c8bf95c66f294ba602b2ff2579de50c345aea7f57904e306ff22c68f72718663a90398f3dd7e8737b04ac8131b52d243c50ad16b3847bf67905ee424fef69e1a38e1385873f9ae496a533aa0e7e27327b19eb7375473b9abd3bc33e59ae06350b644fefd320d19a62e937c97a8e2de44482cf5a896a6485553157b0d33eb0b80b0bba72c2423a904361ffd789964dfd358899babb743f5446ce6c6f2cc3ff8d35ce85fc47e142993cdf8169836b5e120afb882dc7fdd8496d08166b94d4ba64947d9797a0157e98852461d7f2d9da4a513f37e7fe46067965030113fa4c053ad68e28b7d870050c2c276b80e3e8b76d689c15786f19a2ddb9fb55ceb1009d70eba0064bc550dcbc09d17073ae3880579c032544de6d1c0d17e72defbd82cf12431d8fc95059a6dcf7e37e0f9a8d0311d4335437fec92c447247df82f424ed812a148a1cf7dd9411c0bb32c5105ef6b25c333329c7b45ef040197c0321ddd41019b354e2abf67134be17167119d9fae6f010d6ac35a9b30c291e0dea6d362ca90317b1960f04c79d03025cb283a150c5f5aeee5803ade33ba62c4d3ac945da3b77c71b015eca0a841fc13ffe3fcdeba96d4180959c441c9638822208e61fb7f28fb356701cb46c57c5c26a67c38553bd3e5274fc569ec2463a4898fde51c8e9433aeb03f587b8cc1491445fb253834de2f27b712530a52c46bbde5e7483644f7101ab745d9666ad5c3839d65019592981017c46414a8a301a9a324e1a7e64c57806d2b8cf99e751104c35f4b954f07c79aeb98fbd86bf78c1bcdf6e78370791d354ad2b13f0107adc23d7cdf4a318db901c2fe7fb7e3efe86185ba930f700c033e559f9a2c6c6ecf1b600bc3a106da087b0432ac82fa36e136ea800d982240357739a004841e2d3e00d59f3f9f9a6a68f9a02e752a8afb40a2e144aca1fd92f454192475979e8279d0d9d64bb8f0885555634a90488a54c7bfe30f89ac45f2e71dbd2163b66dee7f8f604bac9704040c855f1ddfea8149c1892d733da6743d6ec8f8d5474e913f15a82a2012842309c41ccd597ba397cfc38fa57362cf14c56a9cb5140f03a5938f93fd276942a6485ff298487f43b1bfd7ddd9ef2239bc0a2705a7bf7489933128361b8b17bb72209d86b85519d30017ea2405e75997aa89ee55c3a3717bdd7823b3774eead03addd1a94ab341dae1deb199180c2ddfe7b27969081eb3c084afe9b9e20958db8fd7a806639a7e07486986a6495fc95670292d15facd82f629c72ed4a4ea1a8aab341468cb719eddb062af85d05883548d2b848d83bd1652be9ccbfbd5b6550ba8afff378742fc29e69ed2834cdcf8198d109208aa45f696c9cf12eed6641963a72cf307e469571d796a078d8d5ab8e2c3bd071436e51ce4a22e4cc3e5e006ef074a330db750d8f521ccd541f564f9686e6e819b37dea835be1bef94cf93b330aace22bc2d4ab053103bcc01c6060d890a98c80349185533a00985aa4841a2b79d7938898aa406035bd97b70cf0960344a06544c46f7bd955fc150fe7a010c81cc78b9061cd5f67bcea1d3e1996e97112531fdec60909ca845b79235368d1db3727fc2812d7c335c7386599ceec3a14f17e7681531e0940c7c597e5a0584e5086e37c408bef6a5fefdb5d2fcdb9c6d8b03c8795f4b8ca0afd56e24ecf2bf92c4e2362d577bf3650a32a70e41b668c5d507bbee44d7216f5898a5ba329f008e0ef3858ba64b56d8e0cdaaf5fd6ed40c4bb3dca42ca7f8ed754ab77aed1cccfa534d2ca6b732bc0f97eff2c13e08828204720bae4c322ce87777ab9daf18311de9e0c3b3e4e5c817329a75dbd294594ff92391ebefed81012e318fcb3c5d729d119d171e171128f2e67d7192a31d85e826f4fc42316ec1f2973261819590e19d934e0e231195b2ab456523510661dcc0214737156e1a1bd99c1f5e45d10902b13d6975249624dfe44e681d957c2468b6c9cda9757a40a1f5c69dabbc6517f67f136fb56e106a5bb39424568d84316f2c9f924c9d87ac2062836711695a4bc67c9868d571c4128d57927e87074ce9209f7a775baf25663fb3f9ba2c50e05b1f4455acbfb251ef4528a7c21f5bf3925866fe28109b8663ce4d02a7fc8faad7896ea77fc8457f9e46c6add7ea3d4b35a021777ed1ba2a64591ece34bbeea6f45d8e3aa46133358f2e56df165a2eea8c004a9b0a82cc6e3adc5ed101ad54a246bdcce7262699c04934ae7a98491d5887065550cea42b550c3e1da504ca3578932474ff612809f98247b7145417a3770a9a4a0bf1df995af04df8595144b820aa250d7aff79e332b8da7ef9d7db501bd7168bcbc631787dae8a139457edb7edcdd7105442f632f02e46b54190091c8b7e783ac929b3f1b51817e113658554f7854de0f9184b42aa6da29c21254af2f2c8d2e791da56c1d254af359d5a10cc3dc9f6e401ea49ecdc91a98c277003b93fa3fc5e5c3d04d4f4327351a501307961887760c525fc294a7d09cd3ab88ae96b474514626ff92790fc4ee69c0c0cd73ffad86503bd9c39261dd9634165330da51fba3295e692b61a56fe86ef84c08ccdeb0a1f3e20862907b503bd2c8c079ac38642f970b3ca5341c936b9e92203263a157159a28d655b6e011bc5fd97c6083e0b1528f6fb1f743c266acf3ecff1b6bba818842acfb5b47f23077082df3d275c79ea1e311cdb69d0c3b9f8a0799307bd8e642828d2e4489996a1708105ea90d573a5fe15408537a1c210dde7a311aebd6d0c1b88c75cd58767b35d4636b68bb6c4557f38202db96cc6473eab7f7b1c0bf57a104116feecf6b238edadbaff9ce09680c0a1bb6fb42d7e976019c33c68d136231fbe01ab253f4ff607760b8ec4aac0a5170301b383d57adf8d245c11d52521b3ed7d47d1bd3a2e53d165230349b0608a42dc6f5cc19f55d1d31d7dc61358b4540fdf55a8e4955f7f96590ed0c41f1641f8475ebc1c8cd6020655191ba2724ce4fa79390939e1989fd491d36f4e5bda36f8d874379fcfb71fd9fab9867cfc9b995fdd582e45036a7d49d588fedc42cbf2a38ead9c13ff4b81e8723023df6e0a36c13467b69ba305723480f996eb9ec3d3c4e6cd0e3954c7a456755b3b632409e8956f4d4a7eb9f98935320f5688a947a7180d5860b7c5c5600cbe9afee725dbd1d06eb21360623735310686df96e3128145e6728f6c9b70c5cd459b72dd5ab7a6e503a7fe6fd27423d8f012efc7d74970ec3971f3503d5721096cfb507649f8b19e2f4e446de1780700b26f4f149e081955b7d409b401d953f13b75ff4113b7449c3d165c296348e209532126f5b74502a04ce42a9d2708a114a78978325c9687172e3378068986933ccedff276e9b751575a62509a36307f2be09eaa9f49243f4aa664ad6dbda91a614f3dc72b8cb6ce2f36701e48abf1f16ccea615bcc74ceb20d414c6a3d90308ae6479daf755b0f3a7850ebaf864e9cf5b66941fc0f1102d86425c286c4a609da1ee4b53797e4922df907eb186a524b8c7f533c61230b1cbc1d7b31cdfdadd45e2dbebc24b511ffa12ed3a1be4342c3fd5aa999e9d15474aaa28cacb29033ce156d3202c484100b5cc3588df9021e3521b8c11b19d24e364f9a396478ab7f0b477402387174aaf67e9ce5d07a12428a6b2802d7b5b0a18185a6ca6c0f0664ac701ac2b12efd7a487f657acda89a7faa90bcc8f99f83bea64c0a1e81969dd2d102720265e230301bd8a18e1b75d716913c798d0b52798ad94de9f3c1f8ab88a11d45ef3e86b0fd3771baa03364cc38f7c27ef05511fefd0c6ad84df54a3982b984a7baf6a34d31945228f80215389db195dc7802c4d344aab6ce09e389c80f4ce513ed5e27b9b3808f60a89fbe8135a4a986b74b8400507990037bec3b4f1126e8e50e40008ee23655a7f73d70c2b5cb5b8230fcb204597e13e7aa3d5bef9a650c0df41852d50f91c317726f42ff0a78366a20e9350423996150970078989bb18841ae29a5ae4dbfb6252044e1d4027fd63023f0abcf32c7fc69be1bd69d85959bd396fc45e6d9b6dfedcfc135c713c180c9d1ef86da78e898b9e460cacfddbd3992ebc577141acc6ae32a53856b10e368d2270aca81bb4afdcd85d4fa8c58879c626e7f5533fa1f34ca298e021641c8b4d5a4e34fc22447fb431f63c9985a588cf59160b0864e2810381af7c8bbc49403fd3f3e1c6db5a2073660796bada2d17d83db9f716049591f5cf41287edd0020beefd9653bafda72bf6ab7f7a9912dcb99c622a03506d326df7046076fb6e28f2d346690d755c954396f3617a01f240b2a31fdf720d1394f764d25ac3aa8b8f1c754ef02863d7e7f6e9d9f833e808e5971a1f578019975092693bb06acae42731dc7d0f4db1cb09dd3156ee418ea860ad95ec47a6bcce", "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"}}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000680)={0x7ffffffa, 0x3, 0x0, 0x7fff, 0xea, "f8b9697fccbe285905af0f0000009f00"}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 198.547571ms ago: executing program 6 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 154.652175ms ago: executing program 5 (id=2820): socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000"], 0xd0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20050800) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) 39.660082ms ago: executing program 6 (id=2821): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0x18, 0x32, 0x1, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x44080) 21.839839ms ago: executing program 5 (id=2822): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 0s ago: executing program 6 (id=2823): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) kernel console output (not intermixed with test programs): device eth6 [ 270.447016][ T9886] netlink: 'syz.2.1522': attribute type 2 has an invalid length. [ 270.490476][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1522'. [ 270.653206][ T9886] : entered promiscuous mode [ 270.849870][ T29] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 271.035360][ T29] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 271.061462][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 271.094284][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 271.130563][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.133159][ T9908] input: syz1 as /devices/virtual/input/input44 [ 271.149315][ T5618] Bluetooth: hci2: command tx timeout [ 271.991536][ T5712] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 272.060227][ T9767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.081767][ T9767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.110492][ T9767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.133300][ T9767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.154369][ T9767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.183772][ T9767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.193348][ T5712] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 272.208142][ T9767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.221466][ T5712] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 272.240495][ T5712] usb 3-1: config 0 has no interface number 0 [ 272.250992][ T9767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.258200][ T5712] usb 3-1: config 0 interface 41 has no altsetting 0 [ 272.284940][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.302818][ T5712] usb 3-1: Product: syz [ 272.323782][ T5712] usb 3-1: Manufacturer: syz [ 272.338247][ T5712] usb 3-1: SerialNumber: syz [ 272.366821][ T5712] usb 3-1: config 0 descriptor?? [ 272.453314][ T29] pegasus 4-1:1.0: can't reset MAC [ 272.475369][ T29] pegasus 4-1:1.0: probe with driver pegasus failed with error -5 [ 272.498853][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.526193][ T29] usb 4-1: USB disconnect, device number 35 [ 272.595938][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.631076][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.638353][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.639915][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1533'. [ 272.667919][ T9936] c: renamed from gre0 (while UP) [ 272.702308][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1533'. [ 272.719738][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.726980][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.933888][ T9767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.095249][ T9767] veth0_vlan: entered promiscuous mode [ 273.165986][ T9767] veth1_vlan: entered promiscuous mode [ 273.229480][ T5618] Bluetooth: hci2: command tx timeout [ 273.296972][ T9767] veth0_macvtap: entered promiscuous mode [ 273.309679][ T9767] veth1_macvtap: entered promiscuous mode [ 273.337725][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.368005][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.574422][ T8736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.637263][ T8736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.644539][ T5712] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 273.675536][ T5712] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 273.698613][ T8747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.714259][ T5712] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 273.748583][ T8748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.767151][ T5712] usb 3-1: USB disconnect, device number 36 [ 273.860170][ T8748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.893359][ T8748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.996667][ T8747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.012665][ T8747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.959827][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 275.131238][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.164926][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 275.198968][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.236939][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.272512][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.298233][ T9] usb 5-1: Product: syz [ 275.308298][ T9] usb 5-1: Manufacturer: syz [ 275.321459][ T9] usb 5-1: SerialNumber: syz [ 275.374572][ T9] usb 5-1: selecting invalid altsetting 1 [ 275.400419][ T9] usb 5-1: unit 6 not found! [ 275.661556][T10015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.581897][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 276.636025][ T9] usb 5-1: USB disconnect, device number 24 [ 276.738524][ T5691] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 276.757204][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.955756][ T5691] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.992831][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.010520][ T5691] usb 6-1: Product: syz [ 277.014912][ T5691] usb 6-1: Manufacturer: syz [ 277.020200][ T5691] usb 6-1: SerialNumber: syz [ 277.032750][ T5691] usb 6-1: config 0 descriptor?? [ 277.109824][T10056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1561'. [ 277.271228][ T5691] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 277.520468][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 277.705778][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 277.729602][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 277.758105][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.789425][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.837869][ T9] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 277.884926][ T5691] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 277.929601][ T5691] usb 6-1: USB disconnect, device number 11 [ 278.246603][ T9] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 278.263005][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 278.294394][ T9] videodev: could not get a free minor [ 278.303577][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 278.304134][ T9] uvcvideo 5-1:1.1: Failed to register meta-cap device (-23). [ 278.356506][T10087] netlink: 'syz.3.1573': attribute type 6 has an invalid length. [ 278.425117][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 278.509376][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 278.531175][ T29] usb 5-1: USB disconnect, device number 25 [ 278.560678][T10087] netlink: 'syz.3.1573': attribute type 6 has an invalid length. [ 278.726990][T10068] syz.2.1565 (10068): drop_caches: 2 [ 278.765632][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 278.807232][T10096] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 278.844429][T10096] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 279.012019][ T30] audit: type=1326 audit(1787313982.048:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faee659e0d9 code=0x0 [ 279.036494][T10105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.703280][T10127] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.1591'. [ 280.248529][ T5691] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 280.428664][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 280.438031][ T5691] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 280.458361][ T5691] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.473272][ T5691] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.488800][ T5691] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.503280][T10122] syz.1.1589 (10122): drop_caches: 2 [ 280.515000][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.540881][ T5691] usb 6-1: Product: syz [ 280.549574][ T5691] usb 6-1: Manufacturer: syz [ 280.558697][ T5691] usb 6-1: SerialNumber: syz [ 280.578623][ T5691] usb 6-1: config 0 descriptor?? [ 280.899182][ T5712] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 280.985521][T10155] fuse: root generation should be zero [ 281.007669][ T5691] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 281.058623][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 281.065322][ T5712] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 281.076758][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.090381][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.099612][ T5712] usb 2-1: Product: syz [ 281.103947][ T5712] usb 2-1: Manufacturer: syz [ 281.108995][ T5712] usb 2-1: SerialNumber: syz [ 281.117052][ T5712] usb 2-1: config 0 descriptor?? [ 281.132390][ T5712] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 281.238601][ T5801] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 281.399627][ T5801] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.413049][ T5691] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 281.438141][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.475785][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.511204][ T5801] usb 4-1: config 0 descriptor?? [ 281.760336][ T5712] usb 6-1: USB disconnect, device number 12 [ 281.774381][ T5801] usbhid 4-1:0.0: can't add hid device: -71 [ 281.800865][ T5801] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.876975][ T5801] usb 4-1: USB disconnect, device number 36 [ 282.192096][ T29] usb 2-1: USB disconnect, device number 21 [ 282.218566][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 282.330244][ T5801] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 282.381898][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.404897][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 282.424347][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.437787][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.452074][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.460672][ T9] usb 5-1: Product: syz [ 282.465073][ T9] usb 5-1: Manufacturer: syz [ 282.471629][ T9] usb 5-1: SerialNumber: syz [ 282.497900][ T9] usb 5-1: selecting invalid altsetting 1 [ 282.505773][ T9] usb 5-1: unit 6 not found! [ 282.509925][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 282.520643][ T5801] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 282.541051][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.558505][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.570435][ T5801] usb 4-1: config 0 descriptor?? [ 282.582320][ T5801] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 282.597773][T10171] syz.5.1608 (10171): drop_caches: 2 [ 282.605890][ T5801] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 282.670959][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 282.829459][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.852880][ T29] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 282.869769][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 282.899120][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.912958][ T29] usb 3-1: Product: syz [ 282.922330][ T29] usb 3-1: Manufacturer: syz [ 282.928122][ T29] usb 3-1: SerialNumber: syz [ 283.018903][ T5712] usb 4-1: USB disconnect, device number 37 [ 283.051459][ T5712] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 283.128253][ T5801] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.433746][ T29] usb 3-1: USB disconnect, device number 37 [ 283.516633][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 283.658929][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.685035][ T9] usb 5-1: USB disconnect, device number 26 [ 283.761980][ T5691] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 283.791852][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.960336][ T5691] usb 6-1: not running at top speed; connect to a high speed hub [ 283.968681][ T5691] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 283.979199][ T5691] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.990240][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.013253][ T5691] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 284.199685][ T5801] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 284.220752][ T5801] ath9k_htc: Failed to initialize the device [ 284.231607][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 284.421684][ T5691] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 284.439968][ T5691] videodev: could not get a free minor [ 284.445522][ T5691] uvcvideo 6-1:1.1: Failed to register meta-cap device (-23). [ 284.540380][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 284.642587][ T5691] usb 6-1: USB disconnect, device number 13 [ 284.710346][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 284.719781][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 284.730334][ T29] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 284.741380][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 284.757260][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.765596][ T29] usb 3-1: Product: syz [ 284.769895][ T29] usb 3-1: Manufacturer: syz [ 284.774619][ T29] usb 3-1: SerialNumber: syz [ 284.788182][ T29] ldusb 3-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 284.999526][ T9] usb 3-1: USB disconnect, device number 38 [ 285.005619][ C0] ldusb 3-1:1.0: usb_submit_urb failed (-19) [ 285.020056][ T9] ldusb 3-1:1.0: LD USB Device #0 now disconnected [ 286.038606][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 286.212650][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 286.240235][ T9] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 286.249798][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 286.266854][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.275548][ T9] usb 5-1: Product: syz [ 286.280160][ T9] usb 5-1: Manufacturer: syz [ 286.284825][ T9] usb 5-1: SerialNumber: syz [ 286.297470][ T9] usb 5-1: config 0 descriptor?? [ 286.318213][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 286.355504][T10230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1631'. [ 286.478540][ T29] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 286.618761][ T5691] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 286.649652][ T29] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 286.671276][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.692420][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.732137][ T29] as10x_usb: device has been detected [ 286.743187][ T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 286.788468][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 286.802555][ T5691] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 286.844965][ T29] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 286.860343][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.878480][ T5691] usb 4-1: Product: syz [ 286.889542][ T5691] usb 4-1: Manufacturer: syz [ 286.906985][ T5691] usb 4-1: SerialNumber: syz [ 286.938376][ T5691] usb 4-1: config 0 descriptor?? [ 287.045062][ T29] as10x_usb: error during firmware upload part1 [ 287.060917][ T29] Registered device Abilis Systems DVB-Titan [ 287.137053][T10249] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1639'. [ 287.173047][ T5691] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.385639][ T5691] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 287.423284][ T5691] usb 4-1: USB disconnect, device number 38 [ 287.528027][ T9] gspca_sunplus: reg_r err -71 [ 287.543103][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 287.557968][ T9] usb 5-1: USB disconnect, device number 27 [ 287.988697][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 288.138662][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 288.151864][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 288.175226][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 288.204477][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.219952][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.231292][T10282] syz.4.1647 (10282): drop_caches: 2 [ 288.247793][ T9] usb 3-1: config 0 descriptor?? [ 288.505922][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 288.522300][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 288.553751][ T9] usb 3-1: USB disconnect, device number 39 [ 288.626537][ T5691] usb 2-1: USB disconnect, device number 22 [ 288.658533][ T5705] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.698269][ T5691] Unregistered device Abilis Systems DVB-Titan [ 288.706024][ T5691] as10x_usb: device has been disconnected [ 288.728686][ T5754] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 288.831216][ T5705] usb 6-1: unable to get BOS descriptor or descriptor too short [ 288.848538][ T5705] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 288.873049][ T5705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.889230][ T5754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.892633][ T5705] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.906257][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.928005][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.944882][ T5754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.952627][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.960099][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.983468][ T5754] usb 5-1: config 0 descriptor?? [ 288.988562][ T5705] usb 6-1: Product: syz [ 288.988584][ T5705] usb 6-1: Manufacturer: syz [ 288.988601][ T5705] usb 6-1: SerialNumber: syz [ 289.025770][ T5705] usb 6-1: selecting invalid altsetting 1 [ 289.049541][ T5705] usb 6-1: unit 6 not found! [ 289.353601][ T30] audit: type=1800 audit(1787313992.388:258): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1659" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 289.480826][ T5754] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 289.676082][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.077868][ T5705] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 290.093209][ T5705] usb 6-1: USB disconnect, device number 14 [ 290.125987][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.221325][ T5754] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 290.391339][ T5754] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 290.403617][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 290.412224][ T5754] usb 2-1: Product: syz [ 290.416437][ T5754] usb 2-1: SerialNumber: syz [ 290.424227][ T5754] usb 2-1: config 0 descriptor?? [ 290.652268][ T5754] hso 2-1:0.0: Can't find BULK endpoints [ 290.757908][ T8741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.769657][ T8741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.886659][ T5691] usb 2-1: USB disconnect, device number 23 [ 291.021038][ T8741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.032607][ T8741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.244993][ T8741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.269542][ T8741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.336335][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.372696][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.401499][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.411721][T10347] netlink: 'syz.5.1675': attribute type 1 has an invalid length. [ 291.436676][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.450076][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.570010][ T5712] usb 5-1: USB disconnect, device number 28 [ 291.739274][ T8741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.750103][ T8741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.814801][T10360] syzkaller1: entered allmulticast mode [ 292.369687][ T8741] bridge_slave_1: left allmulticast mode [ 292.377183][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.392305][ T8741] bridge_slave_0: left allmulticast mode [ 292.399874][ T8741] bridge_slave_0: left promiscuous mode [ 292.405938][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.597275][ T5754] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 292.761679][T10388] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.801286][ T5754] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 292.853532][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 292.874754][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 292.892244][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 292.907476][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.916548][ T5754] usb 6-1: Product: syz [ 292.921798][ T5754] usb 6-1: Manufacturer: syz [ 292.926985][ T5754] usb 6-1: SerialNumber: syz [ 292.952871][ T5754] usb 6-1: config 0 descriptor?? [ 293.038182][ T8741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.052287][ T8741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.064271][ T8741] bond0 (unregistering): Released all slaves [ 293.114335][T10392] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 293.159584][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'. [ 293.214683][ T5754] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 293.266804][ T8741] : left promiscuous mode [ 293.478241][ T5754] usb 6-1: USB disconnect, device number 15 [ 293.550556][ T5618] Bluetooth: hci1: command tx timeout [ 293.696275][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 293.950442][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 294.074835][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.105511][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.117176][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.140774][T10352] bridge_slave_0: entered allmulticast mode [ 294.155157][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.172987][T10352] bridge_slave_0: entered promiscuous mode [ 294.189422][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.217837][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.279691][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.300492][ T8741] hsr_slave_0: left promiscuous mode [ 294.319371][ T8741] hsr_slave_1: left promiscuous mode [ 294.342399][ T9] usb 5-1: config 0 descriptor?? [ 294.346467][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.377476][ T8741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.395157][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.418740][ T8741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.456220][ T8741] veth1_macvtap: left promiscuous mode [ 294.468651][ T8741] veth0_macvtap: left promiscuous mode [ 294.479016][ T8741] veth1_vlan: left promiscuous mode [ 294.489394][ T8741] veth0_vlan: left promiscuous mode [ 294.797592][ T9] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 295.033867][ T8741] team0 (unregistering): Port device team_slave_1 removed [ 295.098100][ T8741] team0 (unregistering): Port device team_slave_0 removed [ 295.334372][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.342004][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.351166][T10352] bridge_slave_1: entered allmulticast mode [ 295.363912][T10352] bridge_slave_1: entered promiscuous mode [ 295.389040][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 295.437046][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.457036][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.514343][T10352] team0: Port device team_slave_0 added [ 295.542214][T10352] team0: Port device team_slave_1 added [ 295.620131][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.627624][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.659422][ T5618] Bluetooth: hci1: command tx timeout [ 295.662857][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.678484][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.685695][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.714934][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.870729][T10352] hsr_slave_0: entered promiscuous mode [ 295.877475][T10352] hsr_slave_1: entered promiscuous mode [ 296.368045][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 296.405568][T10352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.416064][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.425154][T10352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.436668][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.446582][T10352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.463100][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.475655][T10352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.486399][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.687727][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.721572][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.740229][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.747559][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.777320][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.784954][ T8747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.869496][ T5754] usb 5-1: USB disconnect, device number 29 [ 296.932735][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.014368][T10352] veth0_vlan: entered promiscuous mode [ 297.030213][T10352] veth1_vlan: entered promiscuous mode [ 297.084375][T10352] veth0_macvtap: entered promiscuous mode [ 297.097583][T10352] veth1_macvtap: entered promiscuous mode [ 297.124113][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.142441][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.219936][ T8736] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.295404][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 297.332070][ T8747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.341436][ T8736] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.349556][ T8747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.363950][ T8736] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.415615][ T8736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.429494][ T8737] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.442634][ T8736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.719010][ T5618] Bluetooth: hci1: command tx timeout [ 298.448128][T10513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.628618][ T29] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 298.820175][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 298.841178][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1713'. [ 298.845874][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 298.890425][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.923488][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.011114][ T29] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 299.413945][ T29] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 299.474376][ T29] videodev: could not get a free minor [ 299.483496][ T29] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 299.691704][ T5754] usb 2-1: USB disconnect, device number 24 [ 299.798858][ T5618] Bluetooth: hci1: command tx timeout [ 300.279314][T10563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.553734][T10577] vivid-002: disconnect [ 300.676178][ T188] vivid-002: reconnect [ 301.459071][ T188] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 301.655780][ T188] usb 2-1: not running at top speed; connect to a high speed hub [ 301.680798][ T188] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 301.705655][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.718164][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.754636][ T188] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 301.925629][T10614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.157879][ T188] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 302.202722][ T188] videodev: could not get a free minor [ 302.219892][ T188] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 302.402522][ T188] usb 2-1: USB disconnect, device number 25 [ 302.426991][T10624] netlink: 'syz.6.1748': attribute type 1 has an invalid length. [ 302.488855][T10624] netlink: 'syz.6.1748': attribute type 2 has an invalid length. [ 302.923448][T10636] syzkaller1: entered promiscuous mode [ 302.966423][T10636] syzkaller1: entered allmulticast mode [ 303.132401][T10644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.173019][T10645] netlink: 'syz.6.1755': attribute type 4 has an invalid length. [ 303.224029][T10642] netlink: 'syz.6.1755': attribute type 4 has an invalid length. [ 303.565749][T10657] input: syz1 as /devices/virtual/input/input45 [ 304.229120][ T188] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 304.400225][ T188] usb 6-1: Using ep0 maxpacket: 8 [ 304.414450][ T188] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 304.444685][ T188] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 304.467968][ T188] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.504809][ T188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.547254][ T188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.590245][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.618642][ T188] usb 6-1: Product: syz [ 304.625210][ T188] usb 6-1: Manufacturer: syz [ 304.634556][ T188] usb 6-1: SerialNumber: syz [ 304.659088][ T188] usb 6-1: config 0 descriptor?? [ 304.679049][T10663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.918099][ T188] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 304.960794][ T188] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46 [ 305.178329][ C0] powermate: config urb returned -71 [ 305.180726][ T5691] usb 6-1: USB disconnect, device number 16 [ 305.183781][ C0] powermate: usb_submit_urb(config) failed [ 305.189705][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 305.634457][T10714] syzkaller1: entered promiscuous mode [ 305.643158][T10714] syzkaller1: entered allmulticast mode [ 306.711454][ T188] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 306.778486][ T5712] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 306.871325][ T188] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.914966][ T188] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.934538][ T188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.949854][ T188] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.959985][ T188] usb 4-1: config 1 has no interface number 1 [ 306.966169][ T188] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.980424][ T5712] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.995959][ T188] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x74, changing to 0x4 [ 307.014666][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1803'. [ 307.015956][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.034908][ T188] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 307.044857][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.056086][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.072845][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.076192][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1803'. [ 307.081477][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.085466][ T188] usb 4-1: Product: syz [ 307.107150][ T5712] usb 5-1: config 0 descriptor?? [ 307.140848][ T188] usb 4-1: Manufacturer: syz [ 307.145681][ T188] usb 4-1: SerialNumber: syz [ 307.599673][ T5712] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 307.612221][ T188] usb 4-1: No MIDI endpoints found [ 307.622360][ T188] usb 4-1: Failed to parse MIDI 2.0 interface [ 307.637320][ T188] usb 4-1: 0:2: cannot create sequencer device [ 307.810352][ T188] usb 4-1: USB disconnect, device number 39 [ 307.822870][ T5691] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 307.835344][ T5621] usb 5-1: USB disconnect, device number 30 [ 307.965471][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1811'. [ 307.999258][ T5691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 308.010807][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 308.038877][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 308.061636][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.094665][ T5691] usb 6-1: config 0 descriptor?? [ 308.478624][ T5754] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 308.782526][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.792328][ T5691] ath6kl: Failed to submit usb control message: -71 [ 308.799940][ T5754] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 308.809195][ T5691] ath6kl: unable to send the bmi data to the device: -71 [ 308.823210][ T5691] ath6kl: Unable to send get target info: -71 [ 308.832838][ T5754] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.849068][ T5691] ath6kl: Failed to init ath6kl core: -71 [ 308.870781][ T5754] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 308.899853][ T5691] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 308.909182][ T5621] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 308.920450][ T5754] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.969176][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.977339][ T5691] usb 6-1: USB disconnect, device number 17 [ 308.986210][ T5754] usb 2-1: Product: syz [ 309.002862][ T5754] usb 2-1: Manufacturer: syz [ 309.014211][ T5754] usb 2-1: SerialNumber: syz [ 309.062057][T10816] batadv_slave_0: entered promiscuous mode [ 309.068677][ T5621] usb 7-1: Using ep0 maxpacket: 8 [ 309.074653][T10816] batadv_slave_0: left promiscuous mode [ 309.080394][ T5621] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.082936][ T5621] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.107505][ T5621] usb 7-1: config 0 has no interface number 0 [ 309.114075][ T5621] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.125315][ T5621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.137475][ T5621] usb 7-1: config 0 descriptor?? [ 309.162051][ T5621] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 309.370249][ T5621] usb 7-1: USB disconnect, device number 2 [ 309.465284][ T5754] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 309.504642][ T5754] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 309.540889][ T5754] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 309.869926][ T5754] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 309.894041][ T5754] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 309.949941][ T5754] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 310.075277][ T5754] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 310.170848][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 310.363536][ T5754] usb 2-1: USB disconnect, device number 26 [ 310.612586][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.912247][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1845'. [ 312.862235][ T5621] hid_parser_main: 3 callbacks suppressed [ 312.862257][ T5621] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 312.912763][ T5621] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.128973][ T188] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 313.354171][ T188] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.378262][ T188] usb 6-1: New USB device found, idVendor=6e6e, idProduct=1874, bcdDevice=fe.df [ 313.411411][ T188] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 313.431964][ T188] usb 6-1: can't read configurations, error -71 [ 314.176340][ T24] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 314.246031][ T24] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.186745][T10990] loop5: detected capacity change from 0 to 7 [ 315.203327][T10990] Dev loop5: unable to read RDB block 7 [ 315.213105][T10990] loop5: unable to read partition table [ 315.223277][T10990] loop5: partition table beyond EOD, truncated [ 315.231689][T10990] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.681262][ T30] audit: type=1326 audit(1787314018.718:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.1876" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f583399e0d9 code=0x0 [ 315.988604][ T188] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 316.089530][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 316.150515][ T188] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.162193][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.175035][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.186350][ T188] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.207770][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.222803][ T188] usb 7-1: config 0 descriptor?? [ 316.261360][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.274879][ T24] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 316.287426][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.296156][ T24] usb 5-1: Product: syz [ 316.300456][ T24] usb 5-1: Manufacturer: syz [ 316.305085][ T24] usb 5-1: SerialNumber: syz [ 316.336010][ T5754] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.560769][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.626990][T11028] tls_set_device_offload: netdev not found [ 316.640089][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.671483][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.706712][ T188] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 316.722308][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.763179][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.816013][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.861004][ T5691] usb 5-1: USB disconnect, device number 31 [ 316.946892][T11036] netlink: 'syz.3.1888': attribute type 18 has an invalid length. [ 316.960493][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 316.971974][T11036] netlink: 'syz.3.1888': attribute type 18 has an invalid length. [ 316.981467][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 317.232038][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238730][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.393424][ T5754] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 317.409659][ T5754] ath9k_htc: Failed to initialize the device [ 317.437825][ T5691] usb 5-1: ath9k_htc: USB layer deinitialized [ 317.833168][ T5691] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 317.948988][ C0] plantronics 0003:047F:FFFF.002D: usb_submit_urb(ctrl) failed: -1 [ 317.995739][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 318.004809][ T5691] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 318.021767][ T5691] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 318.031950][ T5691] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 318.051411][ T5691] usb 5-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.074898][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.102577][ T5691] usb 5-1: config 0 descriptor?? [ 318.122126][ T5691] mos7840 5-1:0.0: missing endpoints [ 318.315909][T11060] input: syz0 as /devices/virtual/input/input47 [ 318.374887][ T5754] usb 5-1: USB disconnect, device number 32 [ 318.730624][ T5801] usb 7-1: USB disconnect, device number 3 [ 318.857551][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 319.598631][ T188] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 319.709064][ T5801] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 319.749531][ T188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.761997][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.773349][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.783176][ T188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.796568][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.810378][ T188] usb 5-1: config 0 descriptor?? [ 319.880137][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 319.899316][ T5801] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.910641][ T5801] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.924718][ T5801] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.939233][ T5801] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 319.952593][ T5801] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 319.965062][ T5801] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 319.978347][ T5801] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.994649][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.242336][ T5801] usb 4-1: GET_CAPABILITIES returned 0 [ 320.248795][ T5801] usbtmc 4-1:16.0: can't read capabilities [ 320.271986][ T188] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 321.438579][ T188] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 321.549373][ C0] plantronics 0003:047F:FFFF.002E: usb_submit_urb(ctrl) failed: -1 [ 321.558904][ T5801] usb 4-1: USB disconnect, device number 40 [ 321.566034][ T5705] usb 5-1: USB disconnect, device number 33 [ 321.590585][ T188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 321.599957][ T188] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 321.621941][ T188] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.644257][ T188] usb 7-1: string descriptor 0 read error: -22 [ 321.650858][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.638558][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035588400: rx timeout, send abort [ 322.648574][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035588400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 323.058788][ T5801] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 323.231062][ T5801] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.270398][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.296843][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.324390][ T5801] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.350413][ T5801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.374505][ T5801] usb 6-1: config 0 descriptor?? [ 323.421371][T11170] syzkaller1: entered promiscuous mode [ 323.427002][T11170] syzkaller1: entered allmulticast mode [ 323.543021][ T30] audit: type=1326 audit(1787314026.578:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.4.1942" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9159e0d9 code=0x0 [ 323.854605][ T5801] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 324.105046][T11190] input: syz1 as /devices/virtual/input/input48 [ 324.367508][T11198] veth0: entered promiscuous mode [ 324.387477][T11198] veth0: left promiscuous mode [ 325.056112][T11218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.128578][ T5705] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 325.299488][ T5705] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.317427][ T5705] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 325.338528][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.360243][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.380275][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.407602][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.421690][ T5705] usb 4-1: config 0 descriptor?? [ 325.494430][T11232] gretap0: entered promiscuous mode [ 325.503162][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 325.512353][T11232] gretap0: left promiscuous mode [ 325.852833][ T5705] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 325.877873][ T5705] plantronics 0003:047F:FFFF.0030: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 326.105607][ T5705] usb 4-1: USB disconnect, device number 41 [ 326.218510][ T5691] usb 6-1: reset high-speed USB device number 20 using dummy_hcd [ 326.329701][ T30] audit: type=1326 audit(1787314029.368:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.4.1975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9159e0d9 code=0x0 [ 326.389833][ T5691] usb 6-1: device firmware changed [ 326.412856][ T5801] usb 6-1: USB disconnect, device number 20 [ 326.568657][ T5801] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 326.731395][ T5801] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 326.750652][ T5801] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.777844][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.788228][ T5801] usb 6-1: Product: syz [ 326.792933][ T5801] usb 6-1: Manufacturer: syz [ 326.797743][ T5801] usb 6-1: SerialNumber: syz [ 326.840607][T11251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.023773][ T5801] dvbdev: DVB: registering new adapter (DEC3000-s) [ 327.050171][ T5801] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 327.161538][T11263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.229211][ T5801] ttusb_dec_send_command: command bulk message failed: error -71 [ 327.264888][ T5801] usb 6-1: USB disconnect, device number 21 [ 327.692948][ T5621] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 327.702858][T11131] usb 7-1: 1:1: usb_set_interface failed (-110) [ 327.727327][T11131] snd-usb-audio 7-1:1.0: Runtime PM usage count underflow! [ 327.734953][T11131] snd-usb-audio 7-1:1.2: Runtime PM usage count underflow! [ 327.744298][ T5705] usb 7-1: USB disconnect, device number 4 [ 327.872025][ T5621] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 327.917368][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.957912][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.973373][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.003880][ T5621] usb 5-1: config 0 descriptor?? [ 328.388656][T11285] capability: warning: `syz.3.1991' uses 32-bit capabilities (legacy support in use) [ 328.473246][ T5621] kye 0003:0458:5016.0031: control desc unexpectedly large [ 328.508118][ T5621] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0031/input/input50 [ 328.683921][ T5621] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0031/input/input51 [ 328.772669][ T5621] kye 0003:0458:5016.0031: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 329.049596][ T5621] usb 5-1: USB disconnect, device number 34 [ 329.215787][ T30] audit: type=1326 audit(1787314032.248:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.1.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f583399e0d9 code=0x0 [ 329.426717][T11319] loop4: detected capacity change from 0 to 7 [ 329.441436][T11319] Dev loop4: unable to read RDB block 7 [ 329.447135][T11319] loop4: unable to read partition table [ 329.453750][T11319] loop4: partition table beyond EOD, truncated [ 329.467393][T11319] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 329.538485][ T5691] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 329.700100][ T5691] usb 7-1: Using ep0 maxpacket: 16 [ 329.714412][ T5691] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.727618][ T5691] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.739511][ T5691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.752304][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.761593][ T5691] usb 7-1: Product: syz [ 329.766552][ T5691] usb 7-1: Manufacturer: syz [ 329.781081][ T5691] usb 7-1: SerialNumber: syz [ 329.810148][ T5691] usb 7-1: 0:2 : does not exist [ 330.010807][ T5691] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 330.106493][ T5691] usb 7-1: USB disconnect, device number 5 [ 330.206490][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.382142][T11341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.955850][T11360] ªªªªªª: renamed from vlan0 (while UP) [ 331.182170][ T5712] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 331.351358][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 331.423013][ T5712] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 331.442704][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.460190][ T5712] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 331.481735][ T5712] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 331.506353][ T5712] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 331.531864][ T5712] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.563578][ T5712] usb 2-1: config 1 interface 1 has no altsetting 0 [ 331.592704][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.611326][ T5712] usb 2-1: Product: syz [ 331.633890][ T5712] usb 2-1: Manufacturer: syz [ 331.661775][ T5712] usb 2-1: SerialNumber: syz [ 331.924069][ T5712] usb 2-1: selecting invalid altsetting 0 [ 332.114857][ T5712] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 332.332960][ T5712] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 332.591731][ T5621] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 332.625351][ T5712] usb 2-1: USB disconnect, device number 27 [ 332.733463][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.768995][ T5621] usb 5-1: Using ep0 maxpacket: 8 [ 332.805395][ T5621] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 332.844541][ T5621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.878205][ T5621] usb 5-1: config 0 has no interfaces? [ 332.905328][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 332.940526][ T5621] usb 5-1: Product: syz [ 332.962739][ T5621] usb 5-1: Manufacturer: syz [ 332.990065][ T5621] usb 5-1: SerialNumber: syz [ 333.042442][ T5621] usb 5-1: config 0 descriptor?? [ 333.329554][T11399] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2039'. [ 333.402354][ T5712] usb 5-1: USB disconnect, device number 35 [ 333.627879][T11427] syzkaller1: entered allmulticast mode [ 334.038299][T11441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.244012][T11482] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2070'. [ 335.347279][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a617400: rx timeout, send abort [ 335.355881][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a617400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 335.474536][T11484] loop4: detected capacity change from 0 to 7 [ 335.488056][T11484] Dev loop4: unable to read RDB block 7 [ 335.494347][T11484] loop4: unable to read partition table [ 335.500548][T11484] loop4: partition table beyond EOD, truncated [ 335.508143][T11484] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 337.772511][T11502] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 337.772511][T11502] program syz.6.2078 not setting count and/or reply_len properly [ 338.256539][T11523] ªªªªªª: renamed from vlan0 (while UP) [ 338.539191][ T5621] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 338.709453][T11544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.714582][ T5621] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.755918][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.777464][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.804394][ T5621] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.834835][T11549] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.847442][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.874073][ T5621] usb 6-1: config 0 descriptor?? [ 338.941292][T11549] bond2: (slave lo): Enslaving as an active interface with an up link [ 338.972026][T11549] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 339.126165][T11557] ªªªªªª: renamed from vlan0 [ 339.168035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b605800: rx timeout, send abort [ 339.176620][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b605800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 339.278474][ T5801] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 339.338118][ T5621] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 339.411967][T11566] xt_hashlimit: size too large, truncated to 1048576 [ 339.448945][ T5801] usb 7-1: Using ep0 maxpacket: 8 [ 339.471665][ T5801] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 339.501954][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.530106][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.553647][ T5801] usb 7-1: config 0 descriptor?? [ 339.817982][ T5801] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 339.952597][T11576] all: renamed from bridge_slave_0 (while UP) [ 339.963146][T11578] hsr0: entered promiscuous mode [ 339.973818][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 340.096283][T11580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.216288][T11585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.267871][T11589] sg_write: data in/out 462812/136 bytes for SCSI command 0x0-- guessing data in; [ 340.267871][T11589] program syz.3.2115 not setting count and/or reply_len properly [ 340.594005][ T30] audit: type=1800 audit(1787314043.628:263): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2119" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 340.642080][ T5621] usb 6-1: USB disconnect, device number 22 [ 341.509579][T11620] bridge0: port 1(bridge_slave_0) entered listening state [ 342.020916][ T30] audit: type=1800 audit(1787314045.058:264): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2132" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 342.131881][ T24] usb 7-1: USB disconnect, device number 6 [ 342.578496][ T188] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 342.677379][T11655] netlink: 'syz.4.2142': attribute type 19 has an invalid length. [ 342.694426][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 342.751130][ T188] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.782060][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.804091][T11655] netlink: 'syz.4.2142': attribute type 19 has an invalid length. [ 342.812741][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.823698][ T188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.829418][ T8736] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.841634][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 342.857785][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.875786][ T188] usb 4-1: config 0 descriptor?? [ 343.012090][ T8741] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.021171][ T8741] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.031068][ T8741] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.076230][T11666] input: syz1 as /devices/virtual/input/input52 [ 343.208613][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2147'. [ 343.342576][ T188] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 344.255991][T11690] input: syz1 as /devices/virtual/input/input53 [ 344.664775][T11702] input: syz1 as /devices/virtual/input/input54 [ 345.402160][ T188] usb 4-1: USB disconnect, device number 42 [ 346.129707][ T188] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 346.290630][ T188] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 346.327257][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.357668][ T188] usb 7-1: Product: syz [ 346.365388][ T188] usb 7-1: Manufacturer: syz [ 346.374097][ T188] usb 7-1: SerialNumber: syz [ 346.392274][ T188] usb 7-1: config 0 descriptor?? [ 346.733192][T11739] input: syz1 as /devices/virtual/input/input55 [ 347.048916][ T188] mos7840 7-1:0.0: required endpoints missing [ 347.089521][ T188] usb 7-1: USB disconnect, device number 7 [ 347.769886][T11761] kvm: user requested TSC rate below hardware speed [ 347.779293][ T5705] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 347.969559][ T5705] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.001719][ T5705] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.043513][ T5705] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.073776][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.112985][T11759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.151496][ T5705] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.222963][T11775] loop8: detected capacity change from 0 to 7 [ 348.285501][T11775] Dev loop8: unable to read RDB block 7 [ 348.311425][T11775] loop8: AHDI p1 p2 p3 [ 348.329396][T11775] loop8: partition table partially beyond EOD, truncated [ 348.352919][T11775] loop8: p1 start 1700754297 is beyond EOD, truncated [ 348.418203][T11775] loop8: p2 size 1701016946 extends beyond EOD, truncated [ 348.700898][ T6476] udevd[6476]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 348.940454][ T5691] usb 2-1: USB disconnect, device number 28 [ 349.629350][ T5691] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 349.798765][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 349.818570][ T5691] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 349.866298][ T5691] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.920934][ T5691] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 349.967413][ T5691] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 349.987748][ T5705] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 350.014727][ T5691] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 350.048238][ T5705] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.065215][ T5691] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.118431][ T5691] usb 7-1: config 1 interface 1 has no altsetting 0 [ 350.140766][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.159312][ T5691] usb 7-1: Product: syz [ 350.163767][ T5691] usb 7-1: Manufacturer: syz [ 350.171040][ T5691] usb 7-1: SerialNumber: syz [ 350.238739][ T188] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 350.419272][ T5691] usb 7-1: selecting invalid altsetting 0 [ 350.481750][ T188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.498671][ T188] usb 4-1: New USB device found, idVendor=6e6e, idProduct=1874, bcdDevice=fe.df [ 350.525913][ T188] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 350.539767][ T188] usb 4-1: can't read configurations, error -71 [ 350.601980][ T5691] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 350.820182][ T5691] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 350.970577][ T5691] usb 7-1: USB disconnect, device number 8 [ 351.081386][T11828] netlink: 'syz.4.2213': attribute type 7 has an invalid length. [ 351.117779][T11828] netlink: 'syz.4.2213': attribute type 7 has an invalid length. [ 351.583108][ T30] audit: type=1326 audit(1787314054.618:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7c7f9e0d9 code=0x0 [ 351.997724][T11852] syzkaller0: mtu greater than device maximum [ 352.011732][T11854] xt_hashlimit: size too large, truncated to 1048576 [ 352.078498][ T5621] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 352.261109][ T5621] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.278484][ T5621] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 352.302443][ T5621] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.337877][ T5621] usb 4-1: string descriptor 0 read error: -22 [ 352.362684][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.448997][ T188] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 352.599024][ T188] usb 2-1: Using ep0 maxpacket: 8 [ 352.613377][ T188] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 352.626556][ T188] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 352.639575][ T188] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.640812][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 352.655110][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.674179][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 352.689046][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.717484][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.727107][ T188] usb 2-1: Product: syz [ 352.731781][ T188] usb 2-1: Manufacturer: syz [ 352.737516][ T188] usb 2-1: SerialNumber: syz [ 352.748027][ T188] usb 2-1: config 0 descriptor?? [ 352.771080][T11860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.041424][ T188] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 353.105205][ T188] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 353.188632][ T5705] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 353.199010][T11883] netlink: 'syz.5.2236': attribute type 1 has an invalid length. [ 353.354457][ C0] powermate: config urb returned -71 [ 353.363189][ C0] powermate: config urb returned -71 [ 353.368755][ C0] powermate: config urb returned -71 [ 353.374296][ C0] powermate: config urb returned -71 [ 353.390990][ T5621] usb 2-1: USB disconnect, device number 29 [ 353.397075][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 353.409969][ T5705] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 353.420022][ T5705] usb 7-1: config 0 has no interfaces? [ 353.429925][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.440573][ T5705] usb 7-1: Product: syz [ 353.461601][ T5705] usb 7-1: Manufacturer: syz [ 353.479136][ T5705] usb 7-1: SerialNumber: syz [ 353.481714][T11883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.518994][ T5705] usb 7-1: config 0 descriptor?? [ 353.604108][T11885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.614988][T11885] bond3: (slave batadv1): making interface the new active one [ 353.625483][T11885] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 353.849510][ T5621] usb 7-1: USB disconnect, device number 9 [ 355.408485][ T5621] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 355.558521][ T5705] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 355.566248][ T5621] usb 7-1: Using ep0 maxpacket: 8 [ 355.574086][ T5621] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 355.584909][ T5621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 355.594867][ T5621] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.607744][ T5621] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.619028][ T5621] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.633447][ T5621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.641767][ T5621] usb 7-1: Product: syz [ 355.646000][ T5621] usb 7-1: Manufacturer: syz [ 355.651339][ T5621] usb 7-1: SerialNumber: syz [ 355.659819][ T5621] usb 7-1: config 0 descriptor?? [ 355.670620][T11935] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 355.731334][ T5705] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 355.741954][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.752195][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.765557][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.784271][ T5705] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 355.896832][ T5621] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 355.924310][ T5621] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input57 [ 356.013489][ T2361] pvrusb2: Invalid read control endpoint [ 356.061596][ T2361] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 356.074762][ T2361] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 356.201542][ T5754] usb 5-1: USB disconnect, device number 36 [ 356.221152][ C0] powermate: config urb returned -71 [ 356.226735][ C0] powermate: config urb returned -71 [ 356.232394][ C0] powermate: config urb returned -71 [ 356.237915][ C0] powermate: config urb returned -71 [ 356.253043][ T5801] usb 7-1: USB disconnect, device number 10 [ 356.253203][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 356.491328][T11956] usb usb7: usbfs: process 11956 (syz.1.2265) did not claim interface 0 before use [ 357.999017][ T5691] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 358.119288][ T5801] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 358.153714][ T5691] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.166343][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.178907][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.195803][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.210915][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.234310][ T5691] usb 6-1: config 0 descriptor?? [ 358.269068][T11846] usb 4-1: 1:1: usb_set_interface failed (-110) [ 358.276351][ T5801] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 358.303675][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.308006][T11846] snd-usb-audio 4-1:1.0: Runtime PM usage count underflow! [ 358.319405][ T5801] usb 2-1: Product: syz [ 358.322811][T11846] snd-usb-audio 4-1:1.2: Runtime PM usage count underflow! [ 358.324324][ T5801] usb 2-1: Manufacturer: syz [ 358.335295][ T5705] usb 4-1: USB disconnect, device number 45 [ 358.341913][ T5801] usb 2-1: SerialNumber: syz [ 358.355849][ T5801] usb 2-1: config 0 descriptor?? [ 358.508224][T12002] hsr0: entered promiscuous mode [ 358.534685][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 358.557534][T12002] hsr_slave_0: left promiscuous mode [ 358.567914][T12002] hsr_slave_1: left promiscuous mode [ 358.606355][T12002] hsr0 (unregistering): left promiscuous mode [ 358.712644][ T5691] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 359.002125][ T5801] mos7840 2-1:0.0: required endpoints missing [ 359.032753][ T5801] usb 2-1: USB disconnect, device number 30 [ 359.690763][ T5621] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 359.871798][ T5621] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 359.885592][ T5621] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 359.912225][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.920906][ T5621] usb 4-1: Product: syz [ 359.925232][ T5621] usb 4-1: Manufacturer: syz [ 359.949040][ T5621] usb 4-1: SerialNumber: syz [ 359.973430][ T5621] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 360.380457][T12016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.397875][ T5621] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.411630][ T5621] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 360.420889][T12016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.430247][ T5621] usb 4-1: media controller created [ 360.469818][ T5621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.518725][ T5622] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 360.688280][ T5621] usb 4-1: USB disconnect, device number 46 [ 360.704385][ T5622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 360.715249][ T188] usb 6-1: USB disconnect, device number 23 [ 360.739910][ T5622] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 360.764737][ T5622] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.799602][ T5622] usb 2-1: string descriptor 0 read error: -22 [ 360.828135][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.255884][T12052] hsr0: entered promiscuous mode [ 361.277768][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2304'. [ 361.428870][ T188] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 361.600706][ T188] usb 7-1: Using ep0 maxpacket: 8 [ 361.625394][ T188] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.662017][ T188] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 361.681131][ T188] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.708313][ T188] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.735006][ T188] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.769361][ T188] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.798258][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.046495][ T188] usb 7-1: usb_control_msg returned -32 [ 362.062421][ T188] usbtmc 7-1:16.0: can't read capabilities [ 362.618625][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 362.770101][ T24] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 362.792708][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 362.826877][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.837922][ T24] usb 6-1: Product: syz [ 362.843373][ T24] usb 6-1: Manufacturer: syz [ 362.848238][ T24] usb 6-1: SerialNumber: syz [ 362.859951][T12092] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 362.876186][ T24] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 363.058560][ T188] usb 7-1: USB disconnect, device number 11 [ 363.300300][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.322403][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.344284][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.369007][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 363.390308][ T24] usb 6-1: media controller created [ 363.419902][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.596556][ T24] usb 6-1: USB disconnect, device number 24 [ 363.799670][T12104] kvm: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 363.810425][T12104] kvm: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 363.825649][T12104] kvm: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 363.842392][T12104] kvm: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 363.851776][T12104] kvm: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 363.871386][T12104] kvm_intel: kvm [12103]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 365.269745][T12147] kvm: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 365.279249][T12147] kvm: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 365.293612][T12147] kvm: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 365.317218][T12147] kvm: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 365.328098][T12147] kvm: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 365.365695][T12147] kvm_intel: kvm [12140]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 365.648597][T12154] loop9: detected capacity change from 0 to 2640 [ 365.667267][T12154] buffer_io_error: 22 callbacks suppressed [ 365.667285][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.718841][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.734969][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.763519][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.791018][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.811118][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.819504][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.827477][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.837292][T12154] ldm_validate_partition_table(): Disk read failed. [ 365.845051][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.853412][T12154] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.863019][T12154] Dev loop9: unable to read RDB block 0 [ 365.872263][T12154] loop9: unable to read partition table [ 365.881206][T12154] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 366.712412][T12170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.830098][T12027] usb 2-1: 1:1: usb_set_interface failed (-110) [ 366.867943][ T24] usb 2-1: USB disconnect, device number 31 [ 367.811743][T12202] lo: entered allmulticast mode [ 367.841210][T12201] lo: left allmulticast mode [ 368.366937][T12213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.155815][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2372'. [ 369.198108][ T5705] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 369.255184][ T5705] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.858971][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 370.063902][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 370.103967][ T24] usb 2-1: config 0 has no interfaces? [ 370.125105][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.148439][ T24] usb 2-1: Product: syz [ 370.159657][ T24] usb 2-1: Manufacturer: syz [ 370.174631][ T24] usb 2-1: SerialNumber: syz [ 370.190438][ T24] usb 2-1: config 0 descriptor?? [ 370.623328][T12260] loop9: detected capacity change from 0 to 2640 [ 370.687240][T12260] buffer_io_error: 6 callbacks suppressed [ 370.687262][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.707259][ T5691] usb 2-1: USB disconnect, device number 32 [ 370.796670][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.820661][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.855597][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.874977][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.895824][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.917304][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.947059][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.978346][T12260] ldm_validate_partition_table(): Disk read failed. [ 371.010328][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.031237][T12260] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.048547][T12260] Dev loop9: unable to read RDB block 0 [ 371.065073][T12260] loop9: unable to read partition table [ 371.075156][T12260] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 371.243828][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 371.286253][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 371.441210][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2391'. [ 371.781196][T12290] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 371.973932][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f9c000: rx timeout, send abort [ 372.474225][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f9c400: rx timeout, send abort [ 372.482613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f9c000: abort rx timeout. Force session deactivation [ 372.809894][T12316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2406'. [ 372.982597][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f9c400: abort rx timeout. Force session deactivation [ 373.598782][ T5622] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 373.786493][ T5622] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.821128][ T5622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.862536][ T5622] usb 6-1: config 0 descriptor?? [ 373.894470][ T5622] cp210x 6-1:0.0: cp210x converter detected [ 374.306203][ T5622] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 374.348268][ T5622] usb 6-1: cp210x converter now attached to ttyUSB0 [ 374.546731][ T5622] usb 6-1: USB disconnect, device number 25 [ 374.572392][ T5622] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 374.602822][ T5622] cp210x 6-1:0.0: device disconnected [ 374.832409][T12373] netlink: 'syz.4.2431': attribute type 4 has an invalid length. [ 374.855474][T12374] netlink: 'syz.1.2430': attribute type 15 has an invalid length. [ 374.954792][T12374] netlink: 'syz.1.2430': attribute type 15 has an invalid length. [ 374.960688][ T8741] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 375.013604][ T8741] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 375.055613][ T8741] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 375.065963][ T8741] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 375.470448][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2437'. [ 375.510594][T12391] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2437'. [ 375.830855][T12400] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 375.838721][T12400] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 375.850491][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2441'. [ 376.730991][T12432] lo: entered allmulticast mode [ 376.743663][T12431] lo: left allmulticast mode [ 377.347387][T12452] input: syz1 as /devices/virtual/input/input58 [ 378.406042][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2476'. [ 378.508545][ T5691] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 378.677310][ T5691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.688324][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695751][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.755507][ T5691] usb 4-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 378.778769][ T5691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.803744][ T5691] usb 4-1: config 1 has no interface number 0 [ 378.819406][ T5691] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.858620][ T5691] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 378.888485][ T5691] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 378.918591][ T5691] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 56968, setting to 64 [ 378.948508][ T5691] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.992056][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.018477][ T5691] usb 4-1: Product: syz [ 379.025397][ T5691] usb 4-1: Manufacturer: syz [ 379.039483][ T5691] usb 4-1: SerialNumber: syz [ 379.067549][T12480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.238581][T12497] netlink: 'syz.1.2482': attribute type 11 has an invalid length. [ 379.301397][T12480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.560969][T12480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.894458][T12509] syzkaller1: entered promiscuous mode [ 379.922121][T12509] syzkaller1: entered allmulticast mode [ 380.015580][T12480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.081859][ T5691] cdc_ncm 4-1:1.1: bind() failure [ 380.256557][ T5622] usb 4-1: USB disconnect, device number 47 [ 380.655352][T12519] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2491'. [ 380.678131][T12519] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2491'. [ 380.788480][ T30] audit: type=1326 audit(1787314083.818:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583399e0d9 code=0x7ffc0000 [ 380.854559][ T30] audit: type=1326 audit(1787314083.818:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583399e0d9 code=0x7ffc0000 [ 380.916852][ T30] audit: type=1326 audit(1787314083.828:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583399e0d9 code=0x7ffc0000 [ 380.997213][ T30] audit: type=1326 audit(1787314083.818:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583399e0d9 code=0x7ffc0000 [ 381.118519][ T30] audit: type=1326 audit(1787314083.828:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f583399e0d9 code=0x7ffc0000 [ 381.192929][ T30] audit: type=1326 audit(1787314083.888:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f583395e90e code=0x7ffc0000 [ 381.259147][ T30] audit: type=1326 audit(1787314083.918:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f583395e90e code=0x7ffc0000 [ 381.353404][ T30] audit: type=1326 audit(1787314083.918:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f583395e90e code=0x7ffc0000 [ 381.466625][ T30] audit: type=1326 audit(1787314083.918:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f583395e90e code=0x7ffc0000 [ 381.554537][ T30] audit: type=1326 audit(1787314083.928:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.2492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f583395e90e code=0x7ffc0000 [ 381.623064][T12539] loop5: detected capacity change from 0 to 7 [ 381.649792][T12539] Dev loop5: unable to read RDB block 7 [ 381.669454][T12539] loop5: unable to read partition table [ 381.687860][T12539] loop5: partition table beyond EOD, truncated [ 381.700970][T12539] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 382.252939][T12549] input: syz0 as /devices/virtual/input/input59 [ 382.902302][T12567] ip6gre1: entered promiscuous mode [ 382.925717][T12567] ip6gre1: entered allmulticast mode [ 382.954641][ T8748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.971995][T12571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2512'. [ 383.001313][ T188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.011130][ T8748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.035860][T12571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2512'. [ 383.414993][ T188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.968482][ T188] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 384.029043][ T5705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.140753][ T188] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.175249][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.215327][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.246350][ T188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.293614][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.324664][ T188] usb 2-1: config 0 descriptor?? [ 384.482272][T12606] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.811487][ T188] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 385.289846][ T188] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 385.450947][ T188] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 385.501370][ T188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 385.541956][ T188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 385.581650][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.247125][T12654] syzkaller1: entered promiscuous mode [ 386.276046][T12654] syzkaller1: entered allmulticast mode [ 386.349658][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 386.370725][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 386.380043][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 386.427373][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 386.673179][ T188] pegasus 6-1:1.0: probe with driver pegasus failed with error -121 [ 386.748838][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.872633][ T5622] usb 2-1: USB disconnect, device number 33 [ 386.907812][ T5801] usb 6-1: USB disconnect, device number 26 [ 387.008876][T12675] loop4: detected capacity change from 0 to 7 [ 387.085551][T12675] Dev loop4: unable to read RDB block 7 [ 387.094693][T12675] loop4: unable to read partition table [ 387.101426][T12675] loop4: partition table beyond EOD, truncated [ 387.119160][T12675] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 387.638229][T12691] syzkaller1: entered promiscuous mode [ 387.655793][T12691] syzkaller1: entered allmulticast mode [ 387.797455][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 387.797475][ T30] audit: type=1326 audit(1787314090.828:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7f9e0d9 code=0x7ffc0000 [ 387.864773][ T30] audit: type=1326 audit(1787314090.828:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7f9e0d9 code=0x7ffc0000 [ 387.918889][ T30] audit: type=1326 audit(1787314090.868:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7f9e0d9 code=0x7ffc0000 [ 388.020951][ T30] audit: type=1326 audit(1787314090.868:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7f9e0d9 code=0x7ffc0000 [ 388.092615][ T30] audit: type=1326 audit(1787314090.868:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc7c7f9e0d9 code=0x7ffc0000 [ 388.168561][ T30] audit: type=1326 audit(1787314090.928:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7c7f5e90e code=0x7ffc0000 [ 388.295491][ T30] audit: type=1326 audit(1787314090.958:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7c7f5e90e code=0x7ffc0000 [ 388.405179][ T30] audit: type=1326 audit(1787314090.988:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7c7f5e90e code=0x7ffc0000 [ 388.510987][T12703] syzkaller1: entered promiscuous mode [ 388.530393][T12703] syzkaller1: entered allmulticast mode [ 388.537989][ T30] audit: type=1326 audit(1787314090.988:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7c7f5e90e code=0x7ffc0000 [ 388.646949][ T30] audit: type=1326 audit(1787314090.988:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.6.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7c7f5e90e code=0x7ffc0000 [ 388.838474][ T5621] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 389.000080][ T5621] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 389.023884][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.048805][ T5621] usb 4-1: Product: syz [ 389.061914][ T5621] usb 4-1: Manufacturer: syz [ 389.074890][ T5621] usb 4-1: SerialNumber: syz [ 389.104032][ T5621] usb 4-1: config 0 descriptor?? [ 389.126454][ T5621] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 390.430548][ T5621] gspca_stk1135: reg_w 0xd err -71 [ 390.457445][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.495640][ T5621] gspca_stk1135: Sensor write failed [ 390.515570][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.550126][ T5621] gspca_stk1135: Sensor write failed [ 390.581483][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.604243][ T5621] gspca_stk1135: Sensor read failed [ 390.633851][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.654922][ T5621] gspca_stk1135: Sensor read failed [ 390.672608][ T5621] gspca_stk1135: Detected sensor type unknown (0x0) [ 390.686259][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.697768][ T5621] gspca_stk1135: Sensor read failed [ 390.703543][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.710376][ T5621] gspca_stk1135: Sensor read failed [ 390.716785][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.723747][ T5621] gspca_stk1135: Sensor write failed [ 390.729457][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 390.735979][ T5621] gspca_stk1135: Sensor write failed [ 390.763552][ T5621] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 390.818319][ T5621] usb 4-1: USB disconnect, device number 48 [ 391.020995][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 391.841508][ T5621] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 391.896503][ T5691] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 392.048735][ T5621] usb 6-1: Using ep0 maxpacket: 32 [ 392.075832][ T5621] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 392.139426][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.153587][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.172599][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.202472][ T5621] usb 6-1: config 0 descriptor?? [ 392.244268][ T5621] hub 6-1:0.0: USB hub found [ 392.402270][ T188] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 392.412739][ T188] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.437243][ T5691] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 392.453016][ T5621] hub 6-1:0.0: 1 port detected [ 392.551208][ T188] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 392.664347][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.675294][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.685080][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.696244][ T5691] usb 4-1: config 0 descriptor?? [ 392.770651][ T188] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 392.800771][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.813523][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.823943][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.838901][ T188] usb 7-1: config 0 descriptor?? [ 393.061394][ T5621] hub 6-1:0.0: activate --> -90 [ 393.251544][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.258415][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.265258][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.272088][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.278948][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.285806][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.318433][ T5691] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 393.327800][ T5691] pyra 0003:1E7D:2CF6.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 393.351201][ T188] lenovo 0003:17EF:60EE.003A: unknown main item tag 0x0 [ 393.363447][ T188] lenovo 0003:17EF:60EE.003A: unknown main item tag 0x0 [ 393.393737][ T188] lenovo 0003:17EF:60EE.003A: hidraw1: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0 [ 393.508335][ T5621] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 393.535266][ T5621] hub_port_connect: 10 callbacks suppressed [ 393.535287][ T5621] usb 6-1-port1: connect-debounce failed [ 393.552031][ T5712] usb 6-1: USB disconnect, device number 27 [ 393.562143][ T5705] psmouse serio3: Failed to reset mouse on : -5 [ 394.172011][ T5691] pyra 0003:1E7D:2CF6.0039: couldn't init struct pyra_device [ 394.179550][ T5691] pyra 0003:1E7D:2CF6.0039: couldn't install mouse [ 394.193818][ T5691] pyra 0003:1E7D:2CF6.0039: probe with driver pyra failed with error -71 [ 394.225827][ T29] usb 7-1: USB disconnect, device number 12 [ 394.293769][ T5691] usb 4-1: USB disconnect, device number 49 [ 394.615501][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2605'. [ 394.708841][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.068183][ T5801] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 395.568102][ T5801] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 395.797789][ T5801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.808075][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.817759][ T5801] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.827536][ T5801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.923941][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.255297][T12843] binder: 12842:12843 ioctl c0306201 2000000003c0 returned -14 [ 396.749136][T12855] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 396.756595][T12855] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.109554][ T188] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 397.223680][ T5801] gud 4-1:1.0: DP-1: Failed to add properties (ret=-71) [ 397.230744][ T5801] gud 4-1:1.0: Failed to get connectors (error=-71) [ 397.237386][ T5801] gud 4-1:1.0: probe with driver gud failed with error -71 [ 397.253501][ T5801] usb 4-1: USB disconnect, device number 50 [ 397.318949][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 397.331095][ T188] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 397.345687][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.357147][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.367994][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.379161][ T188] usb 7-1: config 0 descriptor?? [ 397.448984][ T5705] misc userio: Buffer overflowed, userio client isn't keeping up [ 397.832456][ T188] savu 0003:1E7D:2D5A.003B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 398.080049][ T5801] usb 7-1: USB disconnect, device number 13 [ 398.577877][ T5705] input: PS/2 Generic Mouse as /devices/serio3/input/input61 [ 398.840850][ T5705] psmouse serio3: Failed to enable mouse on [ 399.174003][T12907] syz_tun: refused to change device tx_queue_len [ 399.189800][T12907] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 399.250849][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 399.270517][T12907] syz_tun: refused to change device tx_queue_len [ 399.284493][T12907] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 399.615222][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 400.052872][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 400.167463][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 400.400483][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 400.408640][ T24] usb 2-1: config 0 has no interface number 0 [ 400.415286][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 400.454900][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 400.765543][ T30] audit: type=1804 audit(1787314103.798:362): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2674" name="/newroot/529/file1" dev="tmpfs" ino=2731 res=1 errno=0 [ 400.856558][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.864627][ T24] usb 2-1: Product: syz [ 400.868833][ T24] usb 2-1: Manufacturer: syz [ 400.873470][ T24] usb 2-1: SerialNumber: syz [ 400.884663][ T24] usb 2-1: config 0 descriptor?? [ 400.912208][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 401.021978][ T29] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 401.244766][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.255714][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.265551][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.276474][ T29] usb 7-1: config 0 descriptor?? [ 402.092998][ T29] usb 7-1: language id specifier not provided by device, defaulting to English [ 402.347540][ T29] letsketch 0003:6161:4D15.003C: Device info: ï“¿ [ 402.603716][ T29] letsketch 0003:6161:4D15.003C: Device info: Ь [ 402.871384][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 402.878993][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 402.886334][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 402.894000][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 402.950270][ T24] usb 2-1: USB disconnect, device number 34 [ 403.585823][T12988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.617012][ T29] usb 7-1: Max retries (5) exceeded reading string descriptor 202 [ 403.624980][ T29] letsketch 0003:6161:4D15.003C: probe with driver letsketch failed with error -71 [ 403.685213][ T29] usb 7-1: USB disconnect, device number 14 [ 404.151337][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 404.794764][ T188] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 405.020059][ T188] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.031162][ T188] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 405.040544][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.051730][ T188] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 405.061156][ T188] usb 2-1: config 1 has no interface number 1 [ 405.067548][ T188] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.081062][ T188] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x6F, changing to 0xF [ 405.093031][ T188] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 405.104415][ T188] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 405.117362][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.128400][ T188] usb 2-1: Product: syz [ 405.132730][ T188] usb 2-1: Manufacturer: syz [ 405.137567][ T188] usb 2-1: SerialNumber: syz [ 405.601001][ T188] usb 2-1: No MIDI endpoints found [ 405.607593][ T188] usb 2-1: Failed to parse MIDI 2.0 interface [ 405.614246][ T188] usb 2-1: 0:2: cannot create sequencer device [ 405.862507][ T188] usb 2-1: USB disconnect, device number 35 [ 406.317302][ T5801] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 406.857896][ T29] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 406.931826][ T5801] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 407.206874][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.217830][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.228115][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.240021][ T5801] usb 7-1: config 0 descriptor?? [ 407.423469][ T29] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 407.693346][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.704329][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.758524][ T188] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 407.774763][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2702'. [ 407.917796][ T5801] hid-steam 0003:28DE:1142.003D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 407.967556][ T188] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 407.985557][ T5801] hid-steam 0003:28DE:1142.003D: Steam wireless receiver connected [ 407.996073][ T5801] hid-steam 0003:28DE:1142.003D: steam_probe:steam_get_conn_status failed with error -22 [ 408.000117][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.042699][ T188] usb 6-1: config 0 descriptor?? [ 408.084736][ T188] gspca_main: spca508-2.14.0 probing 8086:0110 [ 408.144933][ T5801] hid-steam 0003:28DE:1142.003E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 408.160957][ T5801] usb 7-1: USB disconnect, device number 15 [ 408.184967][ T5801] hid-steam 0003:28DE:1142.003D: Steam wireless receiver disconnected [ 408.261042][ T29] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 408.313350][ T29] wwan wwan0: port wwan0qmi0 attached [ 408.341495][ T188] gspca_spca508: reg_read err -32 [ 408.477717][T13037] fido_id[13037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 408.528420][ T29] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, e6:e1:cf:0a:50:91 [ 408.602866][ T188] gspca_spca508: reg_read err -71 [ 408.665325][ T188] gspca_spca508: reg_read err -71 [ 408.695785][ T188] gspca_spca508: reg_read err -71 [ 408.723494][ T188] gspca_spca508: reg write: error -71 [ 408.747910][ T188] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 408.770359][ T5801] usb 2-1: USB disconnect, device number 36 [ 408.782672][ T5801] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 408.805871][ T188] usb 6-1: USB disconnect, device number 28 [ 409.200837][ T5801] wwan wwan0: port wwan0qmi0 disconnected [ 409.215980][T13062] netlink: 'syz.6.2713': attribute type 25 has an invalid length. [ 409.258452][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 409.307868][T13062] netlink: 'syz.6.2713': attribute type 25 has an invalid length. [ 409.330495][ T8741] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.343311][ T8741] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.357058][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 409.366849][ T8741] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.376048][ T8741] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.192815][T13088] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2719'. [ 410.239983][T13093] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2720'. [ 410.251928][T13088] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2719'. [ 410.306544][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2719'. [ 410.699114][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.317168][T13130] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2731'. [ 412.489478][ T30] audit: type=1326 audit(1787314115.478:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.6.2750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7c7f9e0d9 code=0x0 [ 413.532653][ T5801] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 413.760444][T13214] capability: warning: `syz.5.2765' uses deprecated v2 capabilities in a way that may be insecure [ 413.889050][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 414.418417][ T29] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 414.483066][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.490804][ T5801] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 414.678616][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.688439][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 414.741792][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.751969][ T5801] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.761009][ T5801] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 414.771935][ T5801] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 414.785126][ T5801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 414.820469][ T5801] usb 2-1: config 1 interface 1 has no altsetting 0 [ 415.222206][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.230296][ T29] usb 7-1: Product: syz [ 415.234469][ T29] usb 7-1: Manufacturer: syz [ 415.239071][ T29] usb 7-1: SerialNumber: syz [ 415.632602][ T5801] usb 2-1: string descriptor 0 read error: -22 [ 415.638972][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.840589][ T29] usb 7-1: Limiting number of CPorts to U8_MAX [ 416.267160][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2782'. [ 416.598684][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 416.621703][ C1] usb 7-1: short message received [ 416.777817][ T5712] usb 7-1: USB disconnect, device number 16 [ 416.807470][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 416.835211][ C1] usb 7-1: failed to resubmit arpc in-urb: -19 [ 416.841585][ C1] usb 7-1: failed to resubmit arpc in-urb: -19 [ 416.863736][ T5712] usb 7-1: failed to send ARPC request 4: -19 [ 416.909797][ T5712] usb 7-1: failed to execute ARPC: -19 [ 416.925719][ T5712] usb 7-1: failed to flush cport 0: -19 [ 416.955817][ T5712] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 416.983888][ T5712] usb 7-1: failed to send ARPC request 2: -19 [ 417.008489][ T5712] usb 7-1: failed to execute ARPC: -19 [ 417.020897][ T5712] usb 7-1: failed to quiesce cport 0: -19 (0) [ 417.033731][ T5712] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 417.051575][ T5712] usb 7-1: failed to send ARPC request 3: -19 [ 417.058075][ T5712] usb 7-1: failed to execute ARPC: -19 [ 417.064067][ T5712] usb 7-1: failed to clear cport 0: -19 [ 417.070438][ T5712] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 417.507959][ T188] usb 2-1: USB disconnect, device number 37 [ 418.258626][ T188] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 418.348244][ T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 418.418555][ T188] usb 7-1: Using ep0 maxpacket: 8 [ 418.424787][ T188] usb 7-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 418.436090][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.451416][ T188] usb 7-1: config 0 descriptor?? [ 418.478630][ T188] usblcd 7-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 418.669294][ T188] usb 7-1: USB disconnect, device number 17 [ 418.789138][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 418.931659][ T29] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 419.215376][ T29] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 419.223719][ T29] usb 4-1: config 179 has no interface number 0 [ 419.230341][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 419.241431][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 419.252724][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.291942][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 419.303412][ T29] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.316691][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.429352][T13301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 419.479281][T13331] use of bytesused == 0 is deprecated and will be removed in the future, [ 419.531594][T13331] use the actual size instead. [ 419.669075][T13334] input: syz0 as /devices/virtual/input/input62 [ 419.812539][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63 [ 419.832469][ T2361] pvrusb2: request_firmware fatal error with code=-110 [ 419.878816][ T2361] pvrusb2: Failure uploading firmware1 [ 419.922852][ T2361] pvrusb2: Device initialization was not successful. [ 419.950598][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 420.031418][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 420.042912][ T5754] pvrusb2: Device being rendered inoperable [ 420.086494][T13345] syzkaller1: entered promiscuous mode [ 420.092079][T13345] syzkaller1: entered allmulticast mode [ 420.404131][ T188] usb 4-1: USB disconnect, device number 51 [ 420.439647][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 420.448067][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 420.457061][ C1] ================================================================== [ 420.465174][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28a/0x2f0 [ 420.473032][ C1] Read of size 4 at addr ffff88807f52305c by task syz-executor/10352 [ 420.481133][ C1] [ 420.483527][ C1] CPU: 1 UID: 0 PID: 10352 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 420.483554][ C1] Tainted: [L]=SOFTLOCKUP [ 420.483562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.483582][ C1] Call Trace: [ 420.483590][ C1] [ 420.483602][ C1] dump_stack_lvl+0xe8/0x150 [ 420.483633][ C1] print_address_description+0x55/0x1e0 [ 420.483661][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 420.483681][ C1] print_report+0x58/0x70 [ 420.483701][ C1] kasan_report+0x117/0x150 [ 420.483730][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 420.483753][ C1] do_raw_spin_lock+0x28a/0x2f0 [ 420.483772][ C1] ? __wake_up_common_lock+0x30/0x1f0 [ 420.483792][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.483811][ C1] ? kcov_remote_stop+0x77/0x6e0 [ 420.483839][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 420.483859][ C1] __wake_up_common_lock+0x30/0x1f0 [ 420.483883][ C1] __usb_hcd_giveback_urb+0x3b6/0x540 [ 420.483906][ C1] dummy_timer+0xa91/0x4cf0 [ 420.483934][ C1] ? __lock_acquire+0x683/0x2cf0 [ 420.483971][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.483991][ C1] ? rcu_is_watching+0x16/0xb0 [ 420.484019][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 420.484043][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.484064][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 420.484084][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 420.484115][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 420.484142][ C1] handle_softirqs+0x226/0x860 [ 420.484170][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 420.484199][ C1] __irq_exit_rcu+0xcb/0x220 [ 420.484225][ C1] irq_exit_rcu+0x9/0x30 [ 420.484247][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 420.484274][ C1] [ 420.484282][ C1] [ 420.484291][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.484317][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 420.484354][ C1] Code: f7 e8 ad c6 c4 f5 f7 c3 00 02 00 00 74 05 e8 80 e7 f0 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 e6 b5 f5 65 48 8b 05 2c 2e 92 07 48 85 c0 74 18 5b 41 5e c3 [ 420.484375][ C1] RSP: 0018:ffffc900039efb68 EFLAGS: 00000206 [ 420.484394][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 8000000000000001 [ 420.484407][ C1] RDX: 0000000000000000 RSI: ffffffff8e25cc49 RDI: 0000000000000001 [ 420.484420][ C1] RBP: ffffc900039efc10 R08: ffffffff9058d537 R09: 1ffffffff20b1aa6 [ 420.484433][ C1] R10: dffffc0000000000 R11: fffffbfff20b1aa7 R12: 0000000000000202 [ 420.484446][ C1] R13: 1ffff9200073df70 R14: ffffffff8f488e18 R15: dffffc0000000000 [ 420.484468][ C1] add_device_randomness+0xcf/0x130 [ 420.484497][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 420.484530][ C1] kernel_clone+0x2e3/0x940 [ 420.484555][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 420.484584][ C1] __x64_sys_clone+0x1b6/0x230 [ 420.484608][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 420.484637][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 420.484668][ C1] do_syscall_64+0x166/0x520 [ 420.484689][ C1] ? trace_irq_disable+0x3b/0x140 [ 420.484715][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.484739][ C1] ? clear_bhb_loop+0x70/0xc0 [ 420.484759][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.484777][ C1] RIP: 0033:0x7fc7c7fc6b52 [ 420.484799][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 420.484820][ C1] RSP: 002b:00007fc7c834fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 420.484839][ C1] RAX: ffffffffffffffda RBX: 00007fc7c834fc60 RCX: 00007fc7c7fc6b52 [ 420.484852][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 420.484863][ C1] RBP: 00007fc7c834fdec R08: 0000000000000000 R09: 0000000000000001 [ 420.484874][ C1] R10: 00005555873f77d0 R11: 0000000000000246 R12: 0000000000000001 [ 420.484886][ C1] R13: 00000000000927c0 R14: 00000000000669d8 R15: 00007fc7c834fe40 [ 420.484905][ C1] [ 420.484911][ C1] [ 420.875770][ C1] Allocated by task 29: [ 420.879950][ C1] kasan_save_track+0x3e/0x80 [ 420.884671][ C1] __kasan_kmalloc+0x93/0xb0 [ 420.889295][ C1] __kmalloc_cache_noprof+0x331/0x660 [ 420.894716][ C1] xpad_probe+0x43f/0x2020 [ 420.899170][ C1] usb_probe_interface+0x653/0xc60 [ 420.904432][ C1] really_probe+0x254/0xae0 [ 420.908982][ C1] __driver_probe_device+0x1e8/0x360 [ 420.914320][ C1] driver_probe_device+0x4f/0x240 [ 420.919383][ C1] __device_attach_driver+0x270/0x410 [ 420.924796][ C1] bus_for_each_drv+0x258/0x2f0 [ 420.929751][ C1] __device_attach+0x2c4/0x450 [ 420.934569][ C1] device_initial_probe+0xa1/0xd0 [ 420.939638][ C1] bus_probe_device+0x12a/0x220 [ 420.944538][ C1] device_add+0x7d7/0xb80 [ 420.948933][ C1] usb_set_configuration+0x1ad8/0x2180 [ 420.954426][ C1] usb_generic_driver_probe+0x8d/0x150 [ 420.959938][ C1] usb_probe_device+0x1c3/0x3b0 [ 420.964829][ C1] really_probe+0x254/0xae0 [ 420.969367][ C1] __driver_probe_device+0x1e8/0x360 [ 420.974696][ C1] driver_probe_device+0x4f/0x240 [ 420.979754][ C1] __device_attach_driver+0x270/0x410 [ 420.985169][ C1] bus_for_each_drv+0x258/0x2f0 [ 420.990052][ C1] __device_attach+0x2c4/0x450 [ 420.994857][ C1] device_initial_probe+0xa1/0xd0 [ 420.999912][ C1] bus_probe_device+0x12a/0x220 [ 421.004793][ C1] device_add+0x7d7/0xb80 [ 421.009151][ C1] usb_new_device+0x9aa/0x1690 [ 421.013939][ C1] hub_event+0x28e8/0x4d30 [ 421.018391][ C1] process_scheduled_works+0xc3d/0x1630 [ 421.023983][ C1] worker_thread+0xa47/0xfb0 [ 421.028600][ C1] kthread+0x38b/0x480 [ 421.032705][ C1] ret_from_fork+0x514/0xb70 [ 421.037319][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.042140][ C1] [ 421.044482][ C1] Freed by task 188: [ 421.048391][ C1] kasan_save_track+0x3e/0x80 [ 421.053097][ C1] kasan_save_free_info+0x40/0x50 [ 421.058162][ C1] __kasan_slab_free+0x5c/0x80 [ 421.062959][ C1] kfree+0x1c5/0x640 [ 421.066874][ C1] xpad_disconnect+0x323/0x440 [ 421.071655][ C1] usb_unbind_interface+0x295/0x9f0 [ 421.076872][ C1] device_release_driver_internal+0x4f5/0x880 [ 421.082975][ C1] bus_remove_device+0x444/0x560 [ 421.087933][ C1] device_del+0x524/0x8f0 [ 421.092314][ C1] usb_disable_device+0x3d4/0x8d0 [ 421.097372][ C1] usb_disconnect+0x346/0x9a0 [ 421.102071][ C1] hub_event+0x1bbb/0x4d30 [ 421.106517][ C1] process_scheduled_works+0xc3d/0x1630 [ 421.112083][ C1] worker_thread+0xa47/0xfb0 [ 421.116695][ C1] kthread+0x38b/0x480 [ 421.120784][ C1] ret_from_fork+0x514/0xb70 [ 421.125396][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.130187][ C1] [ 421.132525][ C1] Last potentially related work creation: [ 421.138256][ C1] kasan_save_stack+0x3e/0x60 [ 421.142964][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 421.148181][ C1] insert_work+0x3d/0x330 [ 421.152543][ C1] __queue_work+0xd07/0x10d0 [ 421.157178][ C1] queue_work_on+0x106/0x1d0 [ 421.161810][ C1] xpad_irq_in+0xabf/0x23f0 [ 421.166340][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 421.171747][ C1] dummy_timer+0xa91/0x4cf0 [ 421.176702][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 421.181925][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 421.187070][ C1] handle_softirqs+0x226/0x860 [ 421.191857][ C1] __irq_exit_rcu+0xcb/0x220 [ 421.196470][ C1] irq_exit_rcu+0x9/0x30 [ 421.200757][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 421.206415][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.212502][ C1] [ 421.214854][ C1] Second to last potentially related work creation: [ 421.221456][ C1] kasan_save_stack+0x3e/0x60 [ 421.226164][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 421.231389][ C1] insert_work+0x3d/0x330 [ 421.235744][ C1] __queue_work+0xd07/0x10d0 [ 421.240356][ C1] queue_work_on+0x106/0x1d0 [ 421.244971][ C1] xpad_irq_in+0xabf/0x23f0 [ 421.249493][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 421.254913][ C1] dummy_timer+0xa91/0x4cf0 [ 421.259460][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 421.264695][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 421.269857][ C1] handle_softirqs+0x226/0x860 [ 421.274636][ C1] __irq_exit_rcu+0xcb/0x220 [ 421.279241][ C1] irq_exit_rcu+0x9/0x30 [ 421.283513][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 421.289186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.295206][ C1] [ 421.297563][ C1] The buggy address belongs to the object at ffff88807f523000 [ 421.297563][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 421.311806][ C1] The buggy address is located 92 bytes inside of [ 421.311806][ C1] freed 1024-byte region [ffff88807f523000, ffff88807f523400) [ 421.325625][ C1] [ 421.327971][ C1] The buggy address belongs to the physical page: [ 421.334450][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807f522800 pfn:0x7f520 [ 421.344533][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 421.353052][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 421.361585][ C1] page_type: f5(slab) [ 421.365589][ C1] raw: 00fff00000000240 ffff88801b003dc0 ffffea0001ee7e10 ffffea0000cb6210 [ 421.374189][ C1] raw: ffff88807f522800 000000080010000e 00000000f5000000 0000000000000000 [ 421.382786][ C1] head: 00fff00000000240 ffff88801b003dc0 ffffea0001ee7e10 ffffea0000cb6210 [ 421.391477][ C1] head: ffff88807f522800 000000080010000e 00000000f5000000 0000000000000000 [ 421.400169][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 421.408865][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 421.417559][ C1] page dumped because: kasan: bad access detected [ 421.423995][ C1] page_owner tracks the page as allocated [ 421.429720][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5294, tgid 5294 (dhcpcd-run-hook), ts 56637770490 [ 421.448758][ C1] post_alloc_hook+0x1f9/0x250 [ 421.453554][ C1] get_page_from_freelist+0x2209/0x2280 [ 421.459125][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 421.464953][ C1] allocate_slab+0x7c/0x5e0 [ 421.469476][ C1] refill_objects+0x2d5/0x350 [ 421.474165][ C1] __pcs_replace_empty_main+0x2c3/0x6b0 [ 421.479738][ C1] __kmalloc_noprof+0x489/0x720 [ 421.484610][ C1] tomoyo_init_log+0x1aae/0x1fa0 [ 421.489590][ C1] tomoyo_supervisor+0x35f/0x1560 [ 421.494642][ C1] tomoyo_env_perm+0x151/0x1f0 [ 421.499429][ C1] tomoyo_find_next_domain+0x1332/0x1a90 [ 421.505090][ C1] tomoyo_bprm_check_security+0x11b/0x180 [ 421.510835][ C1] security_bprm_check+0x85/0x240 [ 421.515900][ C1] bprm_execve+0x888/0x1590 [ 421.520436][ C1] do_execveat_common+0x4f4/0x670 [ 421.525482][ C1] __x64_sys_execve+0x97/0xc0 [ 421.530182][ C1] page last free pid 5294 tgid 5294 ts 56634659978 stack trace: [ 421.537825][ C1] __free_frozen_pages+0xc93/0xd90 [ 421.542966][ C1] __slab_free+0x274/0x2c0 [ 421.547418][ C1] qlist_free_all+0x99/0x100 [ 421.552032][ C1] kasan_quarantine_reduce+0x148/0x160 [ 421.557527][ C1] __kasan_slab_alloc+0x22/0x80 [ 421.562401][ C1] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 421.567917][ C1] jbd2__journal_start+0x145/0x5d0 [ 421.573060][ C1] __ext4_journal_start_sb+0x205/0x780 [ 421.578544][ C1] ext4_dirty_inode+0x93/0x110 [ 421.583333][ C1] __mark_inode_dirty+0x3a8/0x13b0 [ 421.588475][ C1] touch_atime+0x568/0x670 [ 421.592925][ C1] filemap_read+0xffc/0x11e0 [ 421.597546][ C1] ext4_file_read_iter+0x553/0xad0 [ 421.602682][ C1] __kernel_read+0x4ca/0x960 [ 421.607288][ C1] bprm_execve+0x862/0x1590 [ 421.611814][ C1] do_execveat_common+0x4f4/0x670 [ 421.616859][ C1] [ 421.619224][ C1] Memory state around the buggy address: [ 421.624867][ C1] ffff88807f522f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.632970][ C1] ffff88807f522f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.641056][ C1] >ffff88807f523000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.649224][ C1] ^ [ 421.656184][ C1] ffff88807f523080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.664270][ C1] ffff88807f523100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.672370][ C1] ================================================================== [ 421.680460][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 421.687773][ C1] CPU: 1 UID: 0 PID: 10352 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 421.698919][ C1] Tainted: [L]=SOFTLOCKUP [ 421.703271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.713356][ C1] Call Trace: [ 421.716749][ C1] [ 421.719620][ C1] vpanic+0x56d/0xa60 [ 421.723645][ C1] ? __pfx_vpanic+0x10/0x10 [ 421.728177][ C1] panic+0xc5/0xd0 [ 421.731925][ C1] ? __pfx_panic+0x10/0x10 [ 421.736370][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.741426][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.746520][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.751595][ C1] check_panic_on_warn+0x89/0xb0 [ 421.757002][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.762046][ C1] end_report+0x73/0x170 [ 421.766411][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.771486][ C1] kasan_report+0x128/0x150 [ 421.776023][ C1] ? do_raw_spin_lock+0x28a/0x2f0 [ 421.781073][ C1] do_raw_spin_lock+0x28a/0x2f0 [ 421.786039][ C1] ? __wake_up_common_lock+0x30/0x1f0 [ 421.791455][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.796855][ C1] ? kcov_remote_stop+0x77/0x6e0 [ 421.801827][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 421.807057][ C1] __wake_up_common_lock+0x30/0x1f0 [ 421.812285][ C1] __usb_hcd_giveback_urb+0x3b6/0x540 [ 421.817682][ C1] dummy_timer+0xa91/0x4cf0 [ 421.822218][ C1] ? __lock_acquire+0x683/0x2cf0 [ 421.827203][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.832604][ C1] ? rcu_is_watching+0x16/0xb0 [ 421.837400][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 421.842371][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.848203][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 421.853170][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 421.858403][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 421.863553][ C1] handle_softirqs+0x226/0x860 [ 421.868340][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 421.873135][ C1] __irq_exit_rcu+0xcb/0x220 [ 421.877747][ C1] irq_exit_rcu+0x9/0x30 [ 421.882013][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 421.887673][ C1] [ 421.890620][ C1] [ 421.893573][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.899669][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 421.906112][ C1] Code: f7 e8 ad c6 c4 f5 f7 c3 00 02 00 00 74 05 e8 80 e7 f0 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 e6 b5 f5 65 48 8b 05 2c 2e 92 07 48 85 c0 74 18 5b 41 5e c3 [ 421.925735][ C1] RSP: 0018:ffffc900039efb68 EFLAGS: 00000206 [ 421.931827][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 8000000000000001 [ 421.939852][ C1] RDX: 0000000000000000 RSI: ffffffff8e25cc49 RDI: 0000000000000001 [ 421.947879][ C1] RBP: ffffc900039efc10 R08: ffffffff9058d537 R09: 1ffffffff20b1aa6 [ 421.955907][ C1] R10: dffffc0000000000 R11: fffffbfff20b1aa7 R12: 0000000000000202 [ 421.963905][ C1] R13: 1ffff9200073df70 R14: ffffffff8f488e18 R15: dffffc0000000000 [ 421.971913][ C1] add_device_randomness+0xcf/0x130 [ 421.977147][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 421.982985][ C1] kernel_clone+0x2e3/0x940 [ 421.987519][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 421.992579][ C1] __x64_sys_clone+0x1b6/0x230 [ 421.997375][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 422.002695][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 422.008022][ C1] do_syscall_64+0x166/0x520 [ 422.012646][ C1] ? trace_irq_disable+0x3b/0x140 [ 422.017698][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.023821][ C1] ? clear_bhb_loop+0x70/0xc0 [ 422.028533][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.034447][ C1] RIP: 0033:0x7fc7c7fc6b52 [ 422.038889][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 422.058610][ C1] RSP: 002b:00007fc7c834fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 422.067063][ C1] RAX: ffffffffffffffda RBX: 00007fc7c834fc60 RCX: 00007fc7c7fc6b52 [ 422.075064][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 422.083058][ C1] RBP: 00007fc7c834fdec R08: 0000000000000000 R09: 0000000000000001 [ 422.091053][ C1] R10: 00005555873f77d0 R11: 0000000000000246 R12: 0000000000000001 [ 422.099042][ C1] R13: 00000000000927c0 R14: 00000000000669d8 R15: 00007fc7c834fe40 [ 422.107044][ C1] [ 422.110704][ C1] Kernel Offset: disabled [ 422.118396][ C1] Rebooting in 86400 seconds..