last executing test programs: 1m5.65602632s ago: executing program 1 (id=558): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x66, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x39, 0x30, 0x30, 0x39, 0x64, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0xc, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000440)='2', 0x1, r0) 1m4.602745552s ago: executing program 1 (id=562): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000700)={0x40, 0x8, 0x4, "a52200a4"}, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.213979972s ago: executing program 1 (id=574): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) 58.47187128s ago: executing program 1 (id=579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0f0100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0xb}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 57.807925754s ago: executing program 1 (id=582): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff0000000705810340000107058202000200070503"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 52.923863777s ago: executing program 1 (id=594): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) clock_gettime(0x9, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04d64020"], 0x7) 37.578925754s ago: executing program 32 (id=594): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) clock_gettime(0x9, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04d64020"], 0x7) 13.181343008s ago: executing program 0 (id=697): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x25, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 9.990689106s ago: executing program 0 (id=706): syz_usb_connect(0x3, 0x3b9, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c27dae20009050402ff"], 0x0) 9.509090173s ago: executing program 5 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 9.219943314s ago: executing program 5 (id=708): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a8000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 9.194300499s ago: executing program 2 (id=709): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$inet_udp(0x2, 0x2, 0x0) r0 = add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d060960864801650304020105", 0x5d, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x5, 0xffff, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 9.081452197s ago: executing program 4 (id=710): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/38, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 8.916343897s ago: executing program 5 (id=711): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 8.8867276s ago: executing program 4 (id=712): sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 8.044681341s ago: executing program 2 (id=713): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.014000966s ago: executing program 3 (id=714): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000dee400000020000000100000000000000000000000d000000feffffff1000000000000000010000000300"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 7.872384597s ago: executing program 5 (id=715): r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000600)='sessname=s. device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) syz_usb_control_io$lan78xx(r0, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0xd, 0xda, {0xda, 0xd, "99dad61be41d9cd0cf0b707abcbc35ff5f3b5cc82b2c5657d45bed65cb75f87e6df9bb9ae0ea1ee6e95e56ea437dff109bb441c8f82234111296136dbfbff326f5c2f7798c91826459b53d245961bfba54ff6d175c69a497fbe3658260888a406628699dded0fc70f45b7e668de084c70bce2255e837a056dd8c6e8548c1fea2222c64e1e58ca6a60109018683a2551e616e06a9a81adbbce3842969fa32b1c0a625680c28233771f279a99c466682182925806639673030834ab9f0c6b2796ae872ac96fd5f1e5d1ac523387a0190d239a5b9b466af91ac"}}, &(0x7f0000000680)={0x0, 0x3, 0x41, @string={0x41, 0x3, "f9d9e6b858e5b0e4ac81061a3ac8717aff8c02082f3125fc89b304f76cb4afc41e87625e276f4fd659997bd36af5aeb8515dc5abfe26c3176ee3648bbfc9e4"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000740)={0x40, 0x14, 0x2b, "9ea508055a6b5cb186f227ff4c7db1d45599c422edd2146027f8b5fb28955256eb280961bbb20762468d43"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0xc0, 0xa1, 0x4, 0x6}, 0x0, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "cda9cdff7ec5881356e8aee211c85e86cd9aa8d63e7e5312d4972ea627ab7b7385d85a5ef58c614fbef28052499cce"}}) 7.703455633s ago: executing program 3 (id=716): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@echo=0xfffffffb) 7.615226149s ago: executing program 2 (id=717): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x25, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 7.506230469s ago: executing program 3 (id=718): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.107121664s ago: executing program 4 (id=719): semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$SETALL(0x0, 0xff7f0000, 0x11, &(0x7f0000000000)) 6.950344895s ago: executing program 4 (id=720): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2030b00) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xffffffffffffffff) 6.755337548s ago: executing program 0 (id=721): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x2, r4, 0x29}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x805) 6.532152663s ago: executing program 5 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x84}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000004200)=""/197, 0xc5}, {&(0x7f0000004300)=""/61, 0x3d}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x8}, 0x3424}], 0x7, 0x2, 0x0) 6.359297534s ago: executing program 0 (id=723): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000200), 0x8) listen(r2, 0x801) accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) 5.247035865s ago: executing program 0 (id=724): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0xe}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 3.4448521s ago: executing program 0 (id=725): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000300)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.353320063s ago: executing program 3 (id=726): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x4, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x4, 0x0, &(0x7f00000000c0)) prlimit64(r1, 0xd, &(0x7f00000001c0)={0x4, 0x4}, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sched_setparam(r2, &(0x7f0000000300)=0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) memfd_create(&(0x7f0000000240)='syz1\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) 3.304042138s ago: executing program 5 (id=727): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") 3.208001397s ago: executing program 2 (id=728): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000dee400000020000000100000000000000000000000d000000feffffff1000000000000000010000000300"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.019375802s ago: executing program 6 (id=634): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000a00)={0x14, 0x0, 0x0}, &(0x7f0000000e00)={0x44, &(0x7f0000000ac0)={0x20, 0x13, 0xb4, "6e84c64a7eef15a7ebbeb678390e93ebbd7b07073c4260d0b8b99faee94acc9b5688e74486d9ffd53f54e8b4e9e7344951452ab5b71e165ccd5edd480c40154d6a7c5ecea38d43800dc1d7f62127eec939ada5798ce67152ffede66061c74128a7cc8cb9c38277a4f28dfe8996f482801f05029d369bcd4b904fd7ce3538738f11152738c04a1055a0a1a6a4fd46475cbc25eadc8ec943a9a7be7594f9e11c3c197172d1fc45c5e708d2e163c54b6f6b1148ae5b"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000c40)={0x20, 0x81, 0x2, "7502"}, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)={0x20, 0x83, 0x3, '^?.'}, &(0x7f0000000d80)={0x20, 0x84, 0x4, "2bd86557"}, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "74a842"}}) 2.119953244s ago: executing program 3 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.114893938s ago: executing program 4 (id=730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8917, &(0x7f0000000180)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x6, @random="bd820c000060"}, 0x8, {0x2, 0x4e20, @remote}}) 1.99717391s ago: executing program 2 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.135907449s ago: executing program 4 (id=732): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 1.101031711s ago: executing program 3 (id=733): r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0), 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000600)='sessname=s. device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) syz_usb_control_io$lan78xx(r0, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0xd, 0xda, {0xda, 0xd, "99dad61be41d9cd0cf0b707abcbc35ff5f3b5cc82b2c5657d45bed65cb75f87e6df9bb9ae0ea1ee6e95e56ea437dff109bb441c8f82234111296136dbfbff326f5c2f7798c91826459b53d245961bfba54ff6d175c69a497fbe3658260888a406628699dded0fc70f45b7e668de084c70bce2255e837a056dd8c6e8548c1fea2222c64e1e58ca6a60109018683a2551e616e06a9a81adbbce3842969fa32b1c0a625680c28233771f279a99c466682182925806639673030834ab9f0c6b2796ae872ac96fd5f1e5d1ac523387a0190d239a5b9b466af91ac"}}, &(0x7f0000000680)={0x0, 0x3, 0x41, @string={0x41, 0x3, "f9d9e6b858e5b0e4ac81061a3ac8717aff8c02082f3125fc89b304f76cb4afc41e87625e276f4fd659997bd36af5aeb8515dc5abfe26c3176ee3648bbfc9e4"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000740)={0x40, 0x14, 0x2b, "9ea508055a6b5cb186f227ff4c7db1d45599c422edd2146027f8b5fb28955256eb280961bbb20762468d43"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0xc0, 0xa1, 0x4, 0x6}, 0x0, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "cda9cdff7ec5881356e8aee211c85e86cd9aa8d63e7e5312d4972ea627ab7b7385d85a5ef58c614fbef28052499cce"}}) 0s ago: executing program 2 (id=734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) shmctl$IPC_RMID(0x0, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) kernel console output (not intermixed with test programs): g 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 140.990045][ T186] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 141.013348][ T5739] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 141.038667][ T5739] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 141.056324][ T5739] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.071455][ T5739] usb 2-1: config 1 interface 1 has no altsetting 0 [ 141.086270][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.096832][ T5739] usb 2-1: Product: syz [ 141.105393][ T5739] usb 2-1: Manufacturer: syz [ 141.112285][ T5739] usb 2-1: SerialNumber: syz [ 141.152613][ T186] usb 6-1: Using ep0 maxpacket: 8 [ 141.158807][ T186] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 141.205777][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.252216][ T186] pvrusb2: Hardware description: Terratec Grabster AV400 [ 141.270010][ T10] usb 3-1: USB disconnect, device number 9 [ 141.281497][ T186] pvrusb2: ********** [ 141.296656][ T186] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 141.327404][ T186] pvrusb2: Important functionality might not be entirely working. [ 141.372872][ T186] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 141.403607][ T6503] netlink: 116 bytes leftover after parsing attributes in process `syz.4.215'. [ 141.407397][ T186] pvrusb2: ********** [ 141.424190][ T5739] usb 2-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 141.466869][ T2353] pvrusb2: Invalid write control endpoint [ 141.694373][ T5621] usb 6-1: USB disconnect, device number 8 [ 141.719852][ T2353] pvrusb2: Invalid write control endpoint [ 141.753477][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 141.769800][ T5739] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.785356][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 141.804703][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 141.825480][ T2353] pvrusb2: Device being rendered inoperable [ 141.836673][ T5739] usb 2-1: USB disconnect, device number 7 [ 141.837804][ T2353] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 141.869163][ T2353] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 141.897349][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.982906][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.105004][ T2353] pvrusb2: Attached sub-driver cx25840 [ 142.122585][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 142.132910][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.102583][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 143.124484][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.139019][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.161456][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.235354][ T5621] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.954074][ T9] usb 4-1: Product: syz [ 143.959438][ T9] usb 4-1: Manufacturer: syz [ 143.965757][ T9] usb 4-1: SerialNumber: syz [ 144.006856][ T9] usb 4-1: config 0 descriptor?? [ 144.034334][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.066817][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 144.294646][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 144.321962][ T6522] syzkaller0: entered promiscuous mode [ 144.339618][ T6522] syzkaller0: entered allmulticast mode [ 144.357887][ T5621] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 144.385099][ T5621] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 144.402594][ T5621] usb 6-1: config 1 has no interface number 0 [ 144.404409][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 144.415077][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.737197][ T9] em28xx 4-1:0.0: board has no eeprom [ 145.072990][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.128625][ T5621] usb 6-1: Product: syz [ 145.132932][ T5621] usb 6-1: Manufacturer: syz [ 145.137533][ T5621] usb 6-1: SerialNumber: syz [ 145.139474][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 145.176729][ T5621] usb 6-1: 3:1 : does not exist [ 145.189301][ T5621] usb 6-1: 3:2 : does not exist [ 145.200207][ T5739] em28xx 4-1:0.0: Binding DVB extension [ 145.241503][ T9] usb 4-1: USB disconnect, device number 6 [ 145.326318][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 145.439195][ T5739] em28xx 4-1:0.0: Registering input extension [ 145.459049][ T9] em28xx 4-1:0.0: Closing input extension [ 145.535281][ T6538] netlink: 116 bytes leftover after parsing attributes in process `syz.1.229'. [ 145.551085][ T9] em28xx: Freeing device [ 145.612921][ T5621] usb 6-1: USB disconnect, device number 9 [ 145.642695][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.708574][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.833092][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 145.854108][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.867368][ T6544] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 145.883174][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.022089][ T6548] veth2: entered allmulticast mode [ 146.133510][ T3686] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.160008][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 146.161087][ T5759] usb 1-1: USB disconnect, device number 7 [ 146.178715][ T6544] bond1: entered promiscuous mode [ 146.188923][ T6544] bond1: entered allmulticast mode [ 146.195399][ T6544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.291641][ T5759] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 146.322614][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 146.331065][ T3686] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 146.357269][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.424191][ T3686] pvrusb2: Hardware description: Terratec Grabster AV400 [ 146.463371][ T3686] pvrusb2: ********** [ 146.479210][ T3686] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 146.519941][ T3686] pvrusb2: Important functionality might not be entirely working. [ 146.535155][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.559225][ T3686] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 146.585396][ T3686] pvrusb2: ********** [ 146.627767][ T2353] pvrusb2: Invalid write control endpoint [ 146.849527][ T3686] usb 2-1: USB disconnect, device number 8 [ 146.887430][ T2353] pvrusb2: Invalid write control endpoint [ 147.842388][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.853412][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.869475][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.882559][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.758871][ T2353] pvrusb2: Device being rendered inoperable [ 148.774417][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.816350][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.825103][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 148.875544][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.913598][ T2353] pvrusb2: Attached sub-driver cx25840 [ 148.948676][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.997912][ T10] usb 3-1: string descriptor 0 read error: -71 [ 149.004130][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.030096][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.044531][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 149.063911][ T5857] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 149.142695][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 149.250301][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 149.269710][ T5857] usb 5-1: can't read configurations, error -71 [ 149.300385][ T10] usb 3-1: config 0 descriptor?? [ 149.582708][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 149.723880][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 149.890775][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.953565][ T24] usb 6-1: Product: syz [ 149.976628][ T24] usb 6-1: Manufacturer: syz [ 150.013080][ T10] usb 3-1: can't set config #0, error -71 [ 150.020171][ T24] usb 6-1: SerialNumber: syz [ 150.047215][ T10] usb 3-1: USB disconnect, device number 10 [ 150.050012][ T24] usb 6-1: config 0 descriptor?? [ 150.095544][ T6574] overlayfs: failed to resolve './file1': -2 [ 150.110743][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 150.172101][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 150.217662][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 150.258434][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 150.276368][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 150.326582][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.368640][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 150.393356][ T24] usb 6-1: media controller created [ 150.400233][ T6579] netlink: 116 bytes leftover after parsing attributes in process `syz.1.244'. [ 150.412981][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.489864][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.569403][ T24] usb 6-1: selecting invalid altsetting 3 [ 150.583427][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 150.595078][ T24] ttusb2: set interface to alts=3 failed [ 150.610208][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.659930][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 150.703930][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.732271][ T10] usb 3-1: Product: syz [ 150.749706][ T10] usb 3-1: Manufacturer: syz [ 150.774979][ T10] usb 3-1: SerialNumber: syz [ 150.797023][ T24] DVB: Unable to find symbol tda10086_attach() [ 150.807725][ T10] usb 3-1: config 0 descriptor?? [ 150.834932][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.874485][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 151.019407][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 151.044607][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 151.051343][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 151.082679][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 151.088610][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 151.148863][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 151.792737][ T3686] usb 6-1: USB disconnect, device number 10 [ 151.869482][ T3686] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 152.093643][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 152.142634][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.987476][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 153.000083][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.032244][ T10] em28xx 3-1:0.0: board has no eeprom [ 153.051377][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 153.122906][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.133030][ T5617] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.298466][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.303353][ T5617] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 153.307051][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 153.325730][ T5857] em28xx 3-1:0.0: Binding DVB extension [ 153.331800][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.378170][ T24] pvrusb2: ********** [ 154.109069][ T10] usb 3-1: USB disconnect, device number 11 [ 154.132339][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 154.132388][ T5617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.155700][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.211115][ T24] pvrusb2: Important functionality might not be entirely working. [ 154.213005][ T5857] em28xx 3-1:0.0: Registering input extension [ 154.241987][ T5617] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.256195][ T10] em28xx 3-1:0.0: Closing input extension [ 154.269235][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.299707][ T24] pvrusb2: ********** [ 154.306479][ T5617] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 154.319937][ T5617] usb 2-1: Manufacturer: syz [ 154.328730][ T2353] pvrusb2: Invalid write control endpoint [ 154.345170][ T6616] overlayfs: failed to resolve './file1': -2 [ 154.370317][ T5617] usb 2-1: config 0 descriptor?? [ 154.374433][ T10] em28xx: Freeing device [ 154.531079][ T9] usb 1-1: USB disconnect, device number 8 [ 154.540528][ T2353] pvrusb2: Invalid write control endpoint [ 154.556068][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.590103][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.626554][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.639336][ T6622] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 154.655819][ T2353] pvrusb2: Device being rendered inoperable [ 154.668873][ T2353] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 154.681000][ T2353] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 154.694937][ T2353] pvrusb2: Attached sub-driver cx25840 [ 154.700470][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.711886][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.804601][ T6627] veth2: entered allmulticast mode [ 154.849020][ T6630] bond1: entered promiscuous mode [ 154.879864][ T6630] bond1: entered allmulticast mode [ 154.887143][ T6630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.896348][ T6628] syzkaller0: entered promiscuous mode [ 154.912691][ T6628] syzkaller0: entered allmulticast mode [ 156.592922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 157.002992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.385889][ T5626] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 157.392824][ T5633] Bluetooth: hci6: command 0x1003 tx timeout [ 157.521727][ T6660] overlayfs: failed to resolve './file1': -2 [ 157.571421][ T24] usb 2-1: USB disconnect, device number 9 [ 157.920366][ T6671] netlink: 'syz.5.277': attribute type 1 has an invalid length. [ 158.179804][ T6678] veth2: entered allmulticast mode [ 158.222691][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.295197][ T6684] bond1: entered promiscuous mode [ 158.330085][ T6684] bond1: entered allmulticast mode [ 158.382613][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 158.393908][ T6684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.479554][ T6673] syzkaller0: entered promiscuous mode [ 158.600495][ T6673] syzkaller0: entered allmulticast mode [ 159.132545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.399198][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.427765][ T24] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 159.466400][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 159.488312][ T24] usb 5-1: can't read configurations, error -71 [ 159.672045][ T6709] syz.2.290 uses obsolete (PF_INET,SOCK_PACKET) [ 159.739504][ T6712] overlayfs: failed to resolve './file0': -2 [ 160.692448][ T5617] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.785724][ T186] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.832596][ T5617] usb 4-1: device descriptor read/64, error -71 [ 160.973343][ T186] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 161.218912][ T186] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 161.241937][ T186] usb 1-1: config 1 has no interface number 0 [ 161.822617][ T5617] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.959088][ T186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.972167][ T186] usb 1-1: Product: syz [ 162.166392][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.175730][ T5617] usb 4-1: device descriptor read/64, error -71 [ 162.179851][ T186] usb 1-1: Manufacturer: syz [ 162.229566][ T186] usb 1-1: SerialNumber: syz [ 162.268375][ T186] usb 1-1: 3:1 : does not exist [ 162.290407][ T186] usb 1-1: 3:2 : does not exist [ 162.293894][ T5617] usb usb4-port1: attempt power cycle [ 162.337978][ T24] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 162.350939][ T6735] syz_tun: entered allmulticast mode [ 162.367937][ T24] usb 5-1: no configurations [ 162.378177][ T24] usb 5-1: can't read configurations, error -22 [ 162.385316][ T24] usb usb5-port1: attempt power cycle [ 162.410049][ T6735] pim6reg: entered allmulticast mode [ 162.602164][ T6740] fuse: Unknown parameter 'user_i00000000000000000000' [ 162.642668][ T5617] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.714140][ T186] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.722718][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.758759][ T24] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 162.785748][ T24] usb 5-1: no configurations [ 162.797716][ T24] usb 5-1: can't read configurations, error -22 [ 162.802413][ T6744] syzkaller0: entered promiscuous mode [ 162.811592][ T6744] syzkaller0: entered allmulticast mode [ 162.874555][ T5617] usb 4-1: device not accepting address 9, error -71 [ 162.913540][ T186] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 162.927551][ T186] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 162.942631][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.944770][ T186] usb 3-1: config 1 has no interface number 0 [ 162.960541][ T186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.974674][ T24] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 162.977459][ T186] usb 3-1: Product: syz [ 162.998095][ T24] usb 5-1: no configurations [ 163.004189][ T186] usb 3-1: Manufacturer: syz [ 163.011541][ T24] usb 5-1: can't read configurations, error -22 [ 163.022147][ T186] usb 3-1: SerialNumber: syz [ 163.041107][ T24] usb usb5-port1: unable to enumerate USB device [ 163.104848][ T186] usb 3-1: 3:1 : does not exist [ 163.120108][ T6755] overlayfs: failed to resolve './file0': -2 [ 163.123642][ T186] usb 3-1: 3:2 : does not exist [ 163.512608][ T5617] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.243741][ T5617] usb 4-1: Using ep0 maxpacket: 8 [ 164.252713][ T5617] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 164.277033][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.292624][ T5617] usb 4-1: Product: syz [ 164.302980][ T5617] usb 4-1: Manufacturer: syz [ 164.312831][ T5617] usb 4-1: SerialNumber: syz [ 164.333408][ T5617] usb 4-1: config 0 descriptor?? [ 164.357283][ T5617] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 164.400305][ T6767] misc userio: Invalid payload size [ 164.413751][ T6767] misc userio: Invalid payload size [ 164.629429][ T6775] fuse: Unknown parameter 'user_id00000000000000000000' [ 165.026536][ T5857] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 165.192628][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 165.207372][ T5857] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 165.219013][ T5857] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 165.227922][ T5857] usb 6-1: config 0 has no interface number 0 [ 165.234242][ T5857] usb 6-1: config 0 interface 12 has no altsetting 0 [ 165.248727][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.268364][ T5857] usb 6-1: Product: syz [ 165.277714][ T5857] usb 6-1: Manufacturer: syz [ 165.283150][ T5857] usb 6-1: SerialNumber: syz [ 165.298923][ T5857] usb 6-1: config 0 descriptor?? [ 165.367517][ T5617] gspca_sonixj: reg_w1 err -71 [ 165.413313][ T5617] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 165.428886][ T6787] syzkaller0: entered promiscuous mode [ 165.433661][ T5617] usb 4-1: USB disconnect, device number 10 [ 165.440492][ T6787] syzkaller0: entered allmulticast mode [ 165.627837][ T6791] overlayfs: failed to resolve './file0': -2 [ 165.872622][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.992612][ T5617] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.025079][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.040409][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.054178][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.068020][ T9] usb 2-1: config 0 descriptor?? [ 166.088809][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 166.127270][ T6803] fuse: Unknown parameter 'user_id00000000000000000000' [ 166.164149][ T5617] usb 5-1: Using ep0 maxpacket: 16 [ 166.186776][ T5617] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.204879][ T5617] usb 5-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 166.224500][ T5617] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 166.232190][ T5617] usb 5-1: can't read configurations, error -71 [ 166.334333][ T5857] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 166.342460][ T5857] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.352159][ T5857] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.360588][ T5857] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 166.377078][ T5857] usb 6-1: USB disconnect, device number 11 [ 166.495522][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.503013][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.510106][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.517646][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.524797][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.534833][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.543460][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 166.550408][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 166.557966][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 166.567279][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 166.574428][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 166.581327][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 166.588382][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 166.595387][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 166.602602][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 166.609430][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 166.619350][ T9] pwc: Registered as video103. [ 166.631813][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 166.670187][ T9] usb 2-1: USB disconnect, device number 10 [ 167.047254][ T6820] syzkaller0: entered promiscuous mode [ 167.052974][ T6820] syzkaller0: entered allmulticast mode [ 167.445619][ T6833] fuse: Unknown parameter 'user_id00000000000000000000' [ 167.558931][ T6836] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 167.599689][ T6836] bond1: entered promiscuous mode [ 167.606159][ T6836] bond1: entered allmulticast mode [ 167.611675][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.630680][ T9] usb 1-1: USB disconnect, device number 9 [ 167.669357][ T10] usb 3-1: USB disconnect, device number 12 [ 167.802671][ T5857] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 167.888989][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.349'. [ 167.974224][ T5617] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.978548][ T5857] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 168.017556][ T5857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.045607][ T5857] usb 6-1: config 0 has no interfaces? [ 168.066359][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.085049][ T5857] usb 6-1: Product: syz [ 168.092883][ T5857] usb 6-1: Manufacturer: syz [ 168.105385][ T5857] usb 6-1: SerialNumber: syz [ 168.130424][ T5857] usb 6-1: config 0 descriptor?? [ 168.162814][ T5617] usb 2-1: Using ep0 maxpacket: 8 [ 168.186688][ T5617] usb 2-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 168.209805][ T5617] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 168.229600][ T5617] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.250073][ T5617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.259952][ T5617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.276071][ T5617] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.289201][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.402612][ T5857] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.454945][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.519415][ T5617] usb 2-1: GET_CAPABILITIES returned 0 [ 168.525112][ T5617] usbtmc 2-1:16.0: can't read capabilities [ 168.542659][ T5857] usb 1-1: device descriptor read/64, error -71 [ 168.612579][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 168.621767][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.636096][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 168.652584][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.663459][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.684729][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.699458][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.721310][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.730849][ T5759] usb 2-1: USB disconnect, device number 11 [ 168.792620][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.937641][ T5857] usb 1-1: device descriptor read/64, error -71 [ 168.951263][ T10] usb 5-1: usb_control_msg returned -32 [ 168.957756][ T10] usbtmc 5-1:16.0: can't read capabilities [ 169.053460][ T5857] usb usb1-port1: attempt power cycle [ 169.152632][ T5617] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 169.307100][ T5617] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 169.330480][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.352004][ T5617] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 169.370490][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.406101][ T5857] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.467504][ T5857] usb 1-1: device descriptor read/8, error -71 [ 169.697048][ T6870] trusted_key: encrypted_key: master key parameter '' is invalid [ 169.716342][ T10] usb 3-1: USB disconnect, device number 13 [ 169.743353][ T5857] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.820406][ T29] audit: type=1326 audit(1787664845.299:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.357" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ed0f9e0d9 code=0x0 [ 169.848198][ T5857] usb 1-1: device descriptor read/8, error -71 [ 169.906667][ T6871] loop3: detected capacity change from 0 to 4096 [ 169.920302][ T6871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.928857][ T6871] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.956733][ T6871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 169.965454][ T6871] System zones: 0-5 [ 169.971724][ T6871] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.357: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 169.973074][ T5857] usb usb1-port1: unable to enumerate USB device [ 169.988977][ T6871] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 169.992535][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 170.012129][ C1] EXT4-fs (loop3): initial error at time 1787664845: ext4_ext_check_inode:521: inode 4 [ 170.021884][ C1] EXT4-fs (loop3): last error at time 1787664845: ext4_ext_check_inode:521: inode 4 [ 170.031703][ T6871] EXT4-fs (loop3): Remounting filesystem read-only [ 170.039661][ T6871] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.055450][ T6871] EXT4-fs (loop3): mount failed [ 170.400144][ T6879] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 170.487071][ T6881] bond2: entered promiscuous mode [ 170.494925][ T6881] bond2: entered allmulticast mode [ 170.500469][ T6881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.606980][ T24] usb 6-1: USB disconnect, device number 12 [ 170.732907][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.744734][ T6889] netlink: 36 bytes leftover after parsing attributes in process `syz.5.363'. [ 170.895988][ T6896] loop6: detected capacity change from 0 to 2640 [ 170.906291][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 170.916949][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.926365][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.936921][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.945379][ T10] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 170.963103][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.972174][ T10] usb 2-1: config 1 has no interface number 0 [ 170.994688][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.008310][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.017105][ T10] usb 2-1: Product: syz [ 171.021449][ T10] usb 2-1: Manufacturer: syz [ 171.027305][ T10] usb 2-1: SerialNumber: syz [ 171.034744][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.045259][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.055491][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.069271][ T6896] ldm_validate_partition_table(): Disk read failed. [ 171.077632][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.086249][ T6896] Buffer I/O error on dev loop6, logical block 0, async page read [ 171.088221][ T10] usb 2-1: 3:1 : does not exist [ 171.094972][ T6896] Dev loop6: unable to read RDB block 0 [ 171.111530][ T10] usb 2-1: 3:2 : does not exist [ 171.112408][ T6896] loop6: unable to read partition table [ 171.168352][ T6896] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 171.272902][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.297705][ T5759] usb 5-1: USB disconnect, device number 16 [ 171.405165][ T6906] process 'syz.4.371' launched './file2' with NULL argv: empty string added [ 171.465027][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 171.472539][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 171.493708][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 171.519145][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.535255][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.553395][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.567699][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.585809][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.602794][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.702622][ T6912] trusted_key: encrypted_key: master key parameter '' is invalid [ 171.774368][ T10] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 171.787313][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.797740][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 171.807051][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 171.812749][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.819072][ T24] usbtmc 4-1:16.0: can't read capabilities [ 172.017581][ T10] usb 4-1: USB disconnect, device number 11 [ 172.042048][ T186] usb 1-1: USB disconnect, device number 14 [ 172.063601][ T5857] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 172.253378][ T5857] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.264800][ T5857] usb 6-1: no configurations [ 172.269481][ T5857] usb 6-1: can't read configurations, error -22 [ 172.402725][ T5857] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 172.573441][ T5857] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.602865][ T5857] usb 6-1: no configurations [ 172.620443][ T5857] usb 6-1: can't read configurations, error -22 [ 172.640207][ T5857] usb usb6-port1: attempt power cycle [ 173.002662][ T5857] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 173.024735][ T5857] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 173.034139][ T5857] usb 6-1: no configurations [ 173.038789][ T5857] usb 6-1: can't read configurations, error -22 [ 173.172730][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.192719][ T5857] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 173.212819][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.225818][ T5857] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 173.235093][ T5857] usb 6-1: no configurations [ 173.239715][ T5857] usb 6-1: can't read configurations, error -22 [ 173.246454][ T5857] usb usb6-port1: unable to enumerate USB device [ 173.343340][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.00 [ 173.352665][ T24] usb 4-1: device descriptor read/64, error -71 [ 173.352774][ T10] usb 1-1: no configurations [ 173.363837][ T10] usb 1-1: can't read configurations, error -22 [ 173.505766][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 173.594456][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.684494][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.00 [ 173.707715][ T10] usb 1-1: no configurations [ 173.725662][ T10] usb 1-1: can't read configurations, error -22 [ 173.742886][ T24] usb 4-1: device descriptor read/64, error -71 [ 173.745594][ T10] usb usb1-port1: attempt power cycle [ 173.865405][ T24] usb usb4-port1: attempt power cycle [ 174.002916][ T5617] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 174.114446][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.144240][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.00 [ 174.153464][ T10] usb 1-1: no configurations [ 174.153926][ T5617] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 174.158458][ T10] usb 1-1: can't read configurations, error -22 [ 174.175423][ T5617] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.185377][ T5617] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 174.195126][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.203255][ T5759] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.214272][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.230848][ T5617] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 174.243320][ T24] usb 4-1: device descriptor read/8, error -71 [ 174.249787][ T5617] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 174.283694][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 174.324758][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.00 [ 174.334017][ T10] usb 1-1: no configurations [ 174.338805][ T10] usb 1-1: can't read configurations, error -22 [ 174.346470][ T10] usb usb1-port1: unable to enumerate USB device [ 174.372731][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 174.378983][ T5759] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 174.389382][ T5759] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.400384][ T5759] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 174.414307][ T5759] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.427192][ T5759] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.434743][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.450347][ T5759] usb 3-1: config 0 descriptor?? [ 174.458147][ T6948] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 174.492815][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.515540][ T24] usb 4-1: device descriptor read/8, error -71 [ 174.566620][ T5846] usb 5-1: USB disconnect, device number 17 [ 174.585015][ T5846] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 174.593901][ T5846] spcp8x5 5-1:1.0: device disconnected [ 174.634688][ T24] usb usb4-port1: unable to enumerate USB device [ 174.875986][ T5759] usbhid 3-1:0.0: can't add hid device: -71 [ 174.882159][ T5759] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.899749][ T5759] usb 3-1: USB disconnect, device number 14 [ 175.141043][ T6953] syzkaller0: entered promiscuous mode [ 175.147673][ T6953] syzkaller0: entered allmulticast mode [ 175.245634][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 175.432717][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 175.471222][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 175.509886][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 175.535577][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.560245][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.570541][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.591689][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.608248][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.846629][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 175.857829][ T10] usbtmc 6-1:16.0: can't read capabilities [ 176.074356][ T186] usb 6-1: USB disconnect, device number 17 [ 176.297065][ T6982] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 176.347450][ T5846] usb 2-1: USB disconnect, device number 12 [ 176.395741][ T6984] bond1: entered promiscuous mode [ 176.438994][ T6984] bond1: entered allmulticast mode [ 176.444693][ T5857] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 176.488980][ T6984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.567908][ T6986] syzkaller0: entered promiscuous mode [ 176.606661][ T6986] syzkaller0: entered allmulticast mode [ 176.634484][ T5857] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.665901][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.692048][ T5857] usb 1-1: config 0 has no interfaces? [ 176.699559][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.729733][ T5857] usb 1-1: config 0 descriptor?? [ 177.139967][ T7003] gadgetfs: bound to dummy_udc driver [ 177.283589][ T5759] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 177.393411][ T2207] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 177.432623][ T5759] usb 3-1: device descriptor read/64, error -71 [ 177.543810][ T2207] usb 6-1: device descriptor read/64, error -71 [ 177.632796][ T5846] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.682578][ T5759] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.792648][ T2207] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 177.803282][ T5846] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 177.823853][ T5759] usb 3-1: device descriptor read/64, error -71 [ 177.831683][ T5846] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 177.852705][ T5846] usb 2-1: config 1 has no interface number 0 [ 177.862230][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.882540][ T5846] usb 2-1: Product: syz [ 177.886754][ T5846] usb 2-1: Manufacturer: syz [ 177.893161][ T5846] usb 2-1: SerialNumber: syz [ 177.911125][ T5846] usb 2-1: 3:1 : does not exist [ 177.916660][ T5846] usb 2-1: 3:2 : does not exist [ 177.942790][ T2207] usb 6-1: device descriptor read/64, error -71 [ 177.942845][ T5759] usb usb3-port1: attempt power cycle [ 178.066087][ T2207] usb usb6-port1: attempt power cycle [ 178.126819][ T7023] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 178.177500][ T7023] bond1: entered promiscuous mode [ 178.182722][ T7023] bond1: entered allmulticast mode [ 178.188641][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.312624][ T5759] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.343410][ T5759] usb 3-1: device descriptor read/8, error -71 [ 178.445229][ T2207] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 178.487358][ T2207] usb 6-1: device descriptor read/8, error -71 [ 178.503801][ T5857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 178.592663][ T5759] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.613368][ T5759] usb 3-1: device descriptor read/8, error -71 [ 178.683161][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 178.708800][ T5857] usb 5-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 178.719969][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.723358][ T5759] usb usb3-port1: unable to enumerate USB device [ 178.737241][ T5857] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 178.745987][ T2207] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 178.753942][ T5857] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.763938][ T5857] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.775162][ T5857] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.787473][ T5857] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.787636][ T2207] usb 6-1: device descriptor read/8, error -71 [ 178.807707][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.913310][ T10] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 178.926926][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.940719][ T2207] usb usb6-port1: unable to enumerate USB device [ 178.948335][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.959659][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 178.972648][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.991989][ T10] cyberjack 4-1:1.0: required endpoints missing [ 179.048368][ T5857] usb 5-1: usb_control_msg returned -71 [ 179.062628][ T5857] usbtmc 5-1:16.0: can't read capabilities [ 179.082389][ T5857] usb 5-1: USB disconnect, device number 18 [ 179.199233][ T10] usb 4-1: USB disconnect, device number 16 [ 179.261072][ T5759] usb 1-1: USB disconnect, device number 19 [ 180.646152][ T7037] syzkaller0: entered promiscuous mode [ 180.669987][ T7037] syzkaller0: entered allmulticast mode [ 180.912599][ T5846] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 181.082694][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 181.093793][ T5846] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 181.114668][ T5846] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 181.123293][ T5846] usb 6-1: config 0 has no interface number 0 [ 181.136492][ T5846] usb 6-1: config 0 interface 12 has no altsetting 0 [ 181.155755][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.166170][ T5846] usb 6-1: Product: syz [ 181.176315][ T5846] usb 6-1: Manufacturer: syz [ 181.185644][ T5846] usb 6-1: SerialNumber: syz [ 181.205721][ T5846] usb 6-1: config 0 descriptor?? [ 183.175185][ T29] audit: type=1326 audit(1787664857.659:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.3.435" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ed0f9e0d9 code=0x0 [ 183.218224][ T5846] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 184.176609][ T5846] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 184.192572][ T5846] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 184.200343][ T5846] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 184.222602][ T5846] usb 6-1: USB disconnect, device number 22 [ 184.730799][ T5617] usb 2-1: USB disconnect, device number 13 [ 186.053615][ T5857] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.074058][ T5617] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 186.224068][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 186.244307][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 186.245379][ T5617] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.263799][ T5857] usb 3-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 186.307677][ T5617] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.327688][ T5857] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 186.349310][ T5617] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.352118][ T7100] syzkaller1: entered promiscuous mode [ 186.369659][ T5857] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.376833][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.393000][ T10] usb 5-1: device descriptor read/64, error -71 [ 186.402745][ T5857] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.410490][ T7083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.422750][ T7100] syzkaller1: entered allmulticast mode [ 186.431741][ T5857] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.440105][ T5617] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.466386][ T5857] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.502567][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.655640][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.666748][ T5617] usb 2-1: USB disconnect, device number 14 [ 186.765135][ T5857] usb 3-1: usb_control_msg returned -71 [ 186.781088][ T5857] usbtmc 3-1:16.0: can't read capabilities [ 186.822558][ T10] usb 5-1: device descriptor read/64, error -71 [ 186.835040][ T5857] usb 3-1: USB disconnect, device number 19 [ 186.973233][ T10] usb usb5-port1: attempt power cycle [ 187.060182][ T7109] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 187.334568][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 187.471357][ T10] usb 5-1: device descriptor read/8, error -71 [ 188.007310][ T7113] bond2: entered promiscuous mode [ 188.072558][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 188.118434][ T7113] bond2: entered allmulticast mode [ 188.137696][ T10] usb 5-1: device descriptor read/8, error -71 [ 188.150300][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.253388][ T5857] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.283038][ T10] usb usb5-port1: unable to enumerate USB device [ 188.417800][ T29] audit: type=1326 audit(1787664863.899:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e3219e0d9 code=0x0 [ 188.591417][ T5617] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 189.002805][ T5617] usb 6-1: Using ep0 maxpacket: 32 [ 189.066328][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.209959][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.372511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.642531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.682518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.732517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.992513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 190.092511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 190.102511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 190.242612][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 190.251474][ T5857] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.390918][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.476896][ T5857] usb 2-1: Product: syz [ 190.534437][ T5857] usb 2-1: Manufacturer: syz [ 190.577659][ T5857] usb 2-1: SerialNumber: syz [ 191.157232][ T5857] usb 2-1: config 0 descriptor?? [ 191.269936][ T5857] usb 2-1: can't set config #0, error -71 [ 191.345992][ T5857] usb 2-1: USB disconnect, device number 15 [ 191.494217][ T5617] usb 6-1: unable to get BOS descriptor or descriptor too short [ 191.527820][ T5617] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 191.541895][ T7148] syzkaller1: entered promiscuous mode [ 191.576276][ T7148] syzkaller1: entered allmulticast mode [ 191.608415][ T5617] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 191.649697][ T5617] usb 6-1: can't read configurations, error -71 [ 192.076644][ T29] audit: type=1326 audit(1787664867.559:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67cb79e0d9 code=0x0 [ 192.165945][ T7161] loop2: detected capacity change from 0 to 4096 [ 192.225663][ T7161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.235706][ T7161] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.327114][ T7161] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 192.336842][ T7161] System zones: 0-5 [ 192.344714][ T7161] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.463: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 192.362927][ T7161] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 192.366300][ T7161] EXT4-fs (loop2): Remounting filesystem read-only [ 192.375526][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 192.375549][ C1] EXT4-fs (loop2): initial error at time 1787664867: ext4_ext_check_inode:521: inode 4 [ 192.375588][ C1] EXT4-fs (loop2): last error at time 1787664867: ext4_ext_check_inode:521: inode 4 [ 192.408036][ T7161] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.423924][ T7161] EXT4-fs (loop2): mount failed [ 193.014067][ T5617] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 193.233919][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 193.282932][ T5617] usb 5-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 193.793478][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.799892][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.029651][ T5617] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 194.042570][ T5617] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.063747][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.075494][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.085487][ T5617] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.098690][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.514721][ T5857] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 194.529328][ T5617] usb 5-1: usb_control_msg returned -71 [ 194.547020][ T5617] usbtmc 5-1:16.0: can't read capabilities [ 194.658383][ T29] audit: type=1326 audit(1787664870.139:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.1.469" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd01039e0d9 code=0x0 [ 194.982152][ T5617] usb 5-1: USB disconnect, device number 23 [ 195.227856][ T7186] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 195.452258][ T7188] bond3: entered promiscuous mode [ 195.538433][ T7188] bond3: entered allmulticast mode [ 195.592570][ T5857] usb 6-1: device descriptor read/64, error -71 [ 195.631563][ T7188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.852592][ T5857] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 196.662790][ T5857] usb 6-1: device descriptor read/64, error -71 [ 196.862617][ T5617] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 196.910181][ T5857] usb usb6-port1: attempt power cycle [ 197.242587][ T5617] usb 5-1: Using ep0 maxpacket: 16 [ 197.264949][ T5617] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 197.301587][ T5617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.362032][ T5617] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.409283][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.441730][ T5617] usb 5-1: config 0 descriptor?? [ 197.935160][ T7220] syzkaller1: entered promiscuous mode [ 197.950169][ T7220] syzkaller1: entered allmulticast mode [ 198.969127][ T29] audit: type=1326 audit(1787664874.449:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.2.487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67cb79e0d9 code=0x0 [ 199.694020][ T24] usb 5-1: USB disconnect, device number 24 [ 201.268282][ T7252] overlayfs: missing 'lowerdir' [ 201.563856][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 201.744297][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.776258][ T24] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 201.822276][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.870378][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.899875][ T24] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 201.962576][ T24] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 201.984789][ T7272] syzkaller1: entered promiscuous mode [ 202.007003][ T7272] syzkaller1: entered allmulticast mode [ 202.024470][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 202.080824][ T24] usb 6-1: config 1 interface 1 has no altsetting 0 [ 202.131564][ T24] usb 6-1: string descriptor 0 read error: -22 [ 202.185804][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.536281][ T5617] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.657939][ T24] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 202.685799][ T24] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 202.713125][ T5617] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 202.740797][ T24] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 202.771321][ T5617] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.820081][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.858190][ T5617] usb 2-1: Product: syz [ 202.875268][ T5617] usb 2-1: Manufacturer: syz [ 202.904036][ T5617] usb 2-1: SerialNumber: syz [ 202.956052][ T5617] usb 2-1: config 0 descriptor?? [ 202.988783][ T5739] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 203.192835][ T5857] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.219427][ T5739] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 203.236539][ T24] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 203.272925][ T5739] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 203.327369][ T5739] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 203.370854][ T5739] usb 4-1: config 150 has no interface number 0 [ 203.415580][ T5739] usb 4-1: config 150 interface 204 has no altsetting 0 [ 203.422920][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 203.428758][ T24] usb 6-1: USB disconnect, device number 28 [ 203.442202][ T5857] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 203.509247][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.517753][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.541111][ T5739] usb 4-1: Product: syz [ 203.557367][ T5857] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.568588][ T5739] usb 4-1: Manufacturer: syz [ 203.589378][ T5739] usb 4-1: SerialNumber: syz [ 203.610609][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.714162][ T5857] usb 5-1: config 0 descriptor?? [ 203.820498][ T29] audit: type=1326 audit(1787664879.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67cb79e0d9 code=0x0 [ 205.488236][ T24] usb 2-1: USB disconnect, device number 16 [ 205.700094][ T5739] xr_serial 4-1:150.204: skipping garbage [ 205.719726][ T5739] xr_serial 4-1:150.204: xr_serial converter detected [ 205.777828][ T5739] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 205.827863][ T5739] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 205.868634][ T7311] overlayfs: missing 'lowerdir' [ 205.885443][ T5739] usb 4-1: USB disconnect, device number 17 [ 205.953804][ T5739] xr_serial 4-1:150.204: device disconnected [ 206.341652][ T5846] usb 5-1: USB disconnect, device number 25 [ 206.502638][ T5759] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 206.686599][ T7330] syzkaller1: entered promiscuous mode [ 206.703846][ T5759] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 206.721271][ T7330] syzkaller1: entered allmulticast mode [ 206.750654][ T5759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.801825][ T5759] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 206.854744][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.145571][ T5759] snd-usb-caiaq 2-1:1.0: invalid EPs [ 207.171229][ T5759] usb 2-1: unable to init card! (ret=-22) [ 207.203665][ T5759] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 207.390158][ T5739] usb 2-1: USB disconnect, device number 17 [ 207.962574][ T5846] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 208.042562][ T5759] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 208.142915][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 208.163481][ T5846] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 208.204898][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.249325][ T5846] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 208.265994][ T5759] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 208.296276][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.317079][ T5759] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.352747][ T5759] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 208.389301][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 208.418254][ T5759] usb 5-1: Product: syz [ 208.435599][ T5759] usb 5-1: Manufacturer: syz [ 208.709051][ T5846] usb 5-1: USB disconnect, device number 26 [ 209.012928][ T5857] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.212646][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 209.249030][ T5857] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.304675][ T5857] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.350388][ T5857] usb 4-1: config 0 has no interface number 0 [ 209.386057][ T5857] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 209.390711][ T7367] overlayfs: missing 'lowerdir' [ 209.462853][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.515736][ T5857] usb 4-1: Product: syz [ 209.530515][ T5857] usb 4-1: Manufacturer: syz [ 209.550764][ T5857] usb 4-1: SerialNumber: syz [ 209.595106][ T5857] usb 4-1: config 0 descriptor?? [ 209.644566][ T5857] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 209.722182][ T5857] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 210.693267][ T7386] syzkaller1: entered promiscuous mode [ 210.734935][ T7386] syzkaller1: entered allmulticast mode [ 210.859493][ T5739] usb 3-1: USB disconnect, device number 20 [ 211.018218][ T4923] Bluetooth: hci1: command 0x0406 tx timeout [ 211.018244][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 211.024506][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 211.024545][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 211.030742][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 211.036789][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 212.020333][ T5759] usb 4-1: USB disconnect, device number 18 [ 212.657011][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 212.865995][ T10] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 212.911383][ T7424] overlayfs: missing 'lowerdir' [ 212.932959][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.995731][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 213.057523][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 213.108285][ T10] usb 4-1: Product: syz [ 213.140043][ T10] usb 4-1: Manufacturer: syz [ 213.363611][ T5857] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 213.411566][ T10] usb 4-1: USB disconnect, device number 19 [ 213.529442][ T5759] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.565582][ T5857] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.626990][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.696825][ T5857] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 213.742839][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 213.745659][ T5857] usb 1-1: Manufacturer: syz [ 213.816836][ T5759] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 213.817673][ T5857] usb 1-1: config 0 descriptor?? [ 213.872932][ T5759] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.921053][ T5759] usb 3-1: config 0 has no interface number 0 [ 213.943484][ T5857] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 213.957909][ T5759] usb 3-1: config 0 interface 12 has no altsetting 0 [ 214.004731][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.065013][ T5759] usb 3-1: Product: syz [ 214.091963][ T5759] usb 3-1: Manufacturer: syz [ 214.112233][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 214.140072][ T5759] usb 3-1: SerialNumber: syz [ 214.186904][ T5759] usb 3-1: config 0 descriptor?? [ 214.343398][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 214.374782][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 214.444488][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.499562][ T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 214.553932][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.568867][ T7440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 214.983084][ T5739] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 215.173343][ T5759] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 215.183287][ T5739] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 215.214620][ T5759] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 215.236944][ T5739] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.327393][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.360833][ T5759] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 215.387171][ T5759] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 215.408926][ T5739] spcp8x5 6-1:1.0: required endpoints missing [ 215.491881][ T5759] usb 3-1: USB disconnect, device number 21 [ 216.103594][ T7450] syzkaller1: entered promiscuous mode [ 216.182531][ T7450] syzkaller1: entered allmulticast mode [ 216.216591][ T5759] usb 1-1: USB disconnect, device number 20 [ 217.438469][ T5739] usb 5-1: USB disconnect, device number 27 [ 217.632561][ T5759] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 218.170499][ T5857] usb 6-1: USB disconnect, device number 29 [ 218.412987][ T5739] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 218.516316][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 218.612826][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 218.645193][ T5759] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 218.652578][ T5739] usb 1-1: Using ep0 maxpacket: 8 [ 218.711104][ T5739] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.730932][ T5759] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.771566][ T5739] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 218.798335][ T5759] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 218.830229][ T5739] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.865677][ T5759] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.896170][ T5739] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.901379][ T7473] overlayfs: missing 'lowerdir' [ 218.917930][ T5759] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.953297][ T5739] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.962813][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.033423][ T5739] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.064690][ T5759] usb 3-1: config 0 descriptor?? [ 219.087573][ T7461] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.111503][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.443612][ T5846] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.591682][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 219.617327][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 219.625379][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 219.643065][ T5759] usbhid 3-1:0.0: can't add hid device: -32 [ 219.670317][ T5759] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 219.683105][ T5846] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 219.730673][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.747794][ T5759] usb 3-1: USB disconnect, device number 22 [ 219.791361][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.852550][ T5846] usb 5-1: Product: syz [ 219.871126][ T5846] usb 5-1: Manufacturer: syz [ 219.907587][ T5846] hub 5-1:1.0: bad descriptor, ignoring hub [ 219.932227][ T5846] hub 5-1:1.0: probe with driver hub failed with error -5 [ 219.968604][ T5846] navman 5-1:1.0: navman converter detected [ 220.022037][ T5846] usb 5-1: navman converter now attached to ttyUSB0 [ 220.029309][ T7484] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 220.252923][ T5846] usb 5-1: USB disconnect, device number 28 [ 220.329207][ T5846] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 220.384505][ T5846] navman 5-1:1.0: device disconnected [ 220.398421][ T7487] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 220.485639][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 220.757339][ T7492] bond3: entered promiscuous mode [ 220.814277][ T7492] bond3: entered allmulticast mode [ 220.859222][ T7492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.883689][ T5846] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 221.095658][ T5846] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.097228][ T7488] veth2: entered promiscuous mode [ 221.362421][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.406064][ T5846] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.426305][ T29] audit: type=1326 audit(1787664896.909:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.565" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67cb79e0d9 code=0x0 [ 221.465835][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.511698][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 221.522065][ T7500] loop2: detected capacity change from 0 to 4096 [ 221.532743][ T7500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.541219][ T7500] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.581284][ T7500] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 221.590098][ T7500] System zones: 0-5 [ 221.595867][ T5846] usb 2-1: config 0 descriptor?? [ 221.623290][ T7500] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.565: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 221.640637][ T7500] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 221.642508][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 221.658005][ C1] EXT4-fs (loop2): initial error at time 1787664897: ext4_ext_check_inode:521: inode 4 [ 221.667707][ C1] EXT4-fs (loop2): last error at time 1787664897: ext4_ext_check_inode:521: inode 4 [ 221.680205][ T7500] EXT4-fs (loop2): Remounting filesystem read-only [ 221.686848][ T7500] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.702002][ T7500] EXT4-fs (loop2): mount failed [ 221.754439][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.777675][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.816524][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 221.850551][ T24] usb 5-1: Manufacturer: syz [ 221.896266][ T24] usb 5-1: config 0 descriptor?? [ 221.939305][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.093151][ T5759] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 222.323101][ T5759] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.361169][ T5759] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 222.616535][ T7512] Bluetooth: MGMT ver 1.23 [ 223.360965][ T5759] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.371355][ T5759] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.380395][ T5759] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 223.396805][ T5759] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 224.363825][ T5759] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.374871][ T5759] usb 6-1: config 1 interface 1 has no altsetting 0 [ 224.395499][ T5759] usb 6-1: string descriptor 0 read error: -22 [ 224.402000][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.124440][ T7471] usbtmc 1-1:16.0: stb usb_control_msg returned -110 [ 225.332069][ T5857] usb 5-1: USB disconnect, device number 29 [ 225.380565][ T5617] usb 2-1: USB disconnect, device number 18 [ 225.402017][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 225.451345][ T5759] usb 6-1: can't set config #1, error -71 [ 225.462585][ T2207] usb 1-1: USB disconnect, device number 21 [ 225.477180][ T5759] usb 6-1: USB disconnect, device number 30 [ 225.599853][ T7522] overlayfs: missing 'workdir' [ 225.782798][ T5739] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 225.982977][ T5739] usb 4-1: Using ep0 maxpacket: 32 [ 226.000101][ T5739] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 226.044795][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.070818][ T5739] usb 4-1: Product: syz [ 226.086021][ T5739] usb 4-1: Manufacturer: syz [ 226.102979][ T5739] usb 4-1: SerialNumber: syz [ 226.139234][ T5739] usb 4-1: config 0 descriptor?? [ 226.199749][ T5739] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 226.442174][ T7538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 227.813948][ T5739] gspca_ov534_9: reg_w failed -110 [ 228.310371][ T5617] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.984545][ T5617] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 229.094166][ T5617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.141008][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.226478][ T7555] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 229.263483][ T5617] spcp8x5 2-1:1.0: required endpoints missing [ 229.392630][ T5739] gspca_ov534_9: Unknown sensor 0000 [ 229.392731][ T5739] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 229.624256][ T7555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.646752][ T5739] usb 4-1: USB disconnect, device number 20 [ 229.690460][ T7566] trusted_key: encrypted_key: insufficient parameters specified [ 229.935319][ T5617] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 230.705692][ T7556] bond2: (slave geneve2): making interface the new active one [ 230.762560][ T5617] usb 6-1: Using ep0 maxpacket: 8 [ 230.768642][ T5617] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.786306][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.796920][ T5617] usb 6-1: Product: syz [ 230.805938][ T5617] usb 6-1: Manufacturer: syz [ 230.814065][ T7556] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 230.820694][ T5617] usb 6-1: SerialNumber: syz [ 230.847219][ T5617] usb 6-1: config 0 descriptor?? [ 230.897526][ T7565] bridge0: port 3(syz_tun) entered blocking state [ 230.940381][ T7565] bridge0: port 3(syz_tun) entered disabled state [ 230.965962][ T7565] syz_tun: entered allmulticast mode [ 231.002890][ T7565] syz_tun: entered promiscuous mode [ 231.016177][ T7565] bridge0: port 3(syz_tun) entered blocking state [ 231.023856][ T7565] bridge0: port 3(syz_tun) entered listening state [ 231.100098][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 231.159893][ T5617] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.422605][ T5621] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 231.615244][ T5621] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.668363][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.721684][ T5621] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.773601][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.778816][ T10] usb 2-1: USB disconnect, device number 19 [ 231.837881][ T5621] usb 1-1: config 0 descriptor?? [ 231.853715][ T5857] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 231.915589][ T13] bridge0: port 3(syz_tun) entered disabled state [ 232.052802][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 232.156743][ T5857] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 232.214796][ T5857] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.221691][ T5621] usb 1-1: USB disconnect, device number 22 [ 232.334988][ T5857] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 232.653747][ T5857] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.925317][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.961073][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.007499][ T5857] usb 4-1: config 0 descriptor?? [ 233.019819][ T7592] netlink: 52 bytes leftover after parsing attributes in process `syz.2.595'. [ 233.034830][ T7580] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 233.134984][ T7592] syzkaller1: entered promiscuous mode [ 233.186644][ T5617] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 233.210272][ T5621] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 233.237701][ T7592] syzkaller1: entered allmulticast mode [ 233.271747][ T5617] usb 6-1: USB disconnect, device number 31 [ 234.291969][ T5618] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 234.305248][ T5857] usbhid 4-1:0.0: can't add hid device: -71 [ 234.305363][ T5857] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.273249][ T5857] usb 4-1: USB disconnect, device number 21 [ 235.281711][ T5621] usb 1-1: device descriptor read/all, error -71 [ 235.862565][ T7608] trusted_key: encrypted_key: insufficient parameters specified [ 235.959663][ T5621] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 236.230248][ T5621] usb 1-1: Using ep0 maxpacket: 32 [ 236.238160][ T5621] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 236.395567][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.395617][ T5621] usb 1-1: Product: syz [ 236.395711][ T5621] usb 1-1: Manufacturer: syz [ 236.395732][ T5621] usb 1-1: SerialNumber: syz [ 236.644553][ T5621] usb 1-1: config 0 descriptor?? [ 237.184302][ T5621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 237.583367][ T7614] fuse: Bad value for 'fd' [ 237.613819][ T5857] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 237.763418][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 237.765773][ T5857] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 237.773823][ T5857] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.773855][ T5857] usb 6-1: config 0 has no interface number 0 [ 237.773902][ T5857] usb 6-1: config 0 interface 12 has no altsetting 0 [ 237.793574][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.793609][ T5857] usb 6-1: Product: syz [ 237.793632][ T5857] usb 6-1: Manufacturer: syz [ 237.793652][ T5857] usb 6-1: SerialNumber: syz [ 237.808850][ T5857] usb 6-1: config 0 descriptor?? [ 238.212724][ T3686] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 238.425876][ T7623] loop4: detected capacity change from 0 to 4096 [ 238.428945][ T29] audit: type=1326 audit(1787664913.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7de179e0d9 code=0x0 [ 238.498347][ T7623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.498378][ T7623] EXT4-fs (loop4): Test dummy encryption mode enabled [ 238.550450][ T7623] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 238.550615][ T7623] System zones: 0-5 [ 238.557659][ T7623] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.597: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 238.557714][ T7623] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 238.558296][ T7623] EXT4-fs (loop4): Remounting filesystem read-only [ 238.558372][ T7623] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.558822][ T7623] EXT4-fs (loop4): mount failed [ 238.677110][ T5857] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 238.677173][ T5857] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 238.677196][ T5857] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 238.677278][ T5857] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 238.728182][ T5857] usb 6-1: USB disconnect, device number 32 [ 239.917379][ T5621] gspca_ov534_9: reg_r err -71 [ 239.933338][ T3686] usb 4-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice= 0.40 [ 239.934559][ T3686] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 239.934594][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 239.934629][ T3686] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.934656][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 239.984995][ T3686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.985030][ T3686] usb 4-1: Product: 㠁 [ 239.985050][ T3686] usb 4-1: Manufacturer: ఉ [ 239.985070][ T3686] usb 4-1: SerialNumber: 䚶ꚱᨂ쬛ﾽⰲꖫ幾䭢李㎯퓠ೕ눼≔㦡藽샂꾧Áﳿꪖ䇥ᬒ惰컭ⅎ曈捭ㆡ騣⹈ᦲ蝛祐憧英䏧ګ檀쀏鶾䲔ᅤ莕䓑膘珓괶ᖋ줞썄鮡䯮 [ 240.017936][ T7620] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 240.212618][ T5621] gspca_ov534_9: Unknown sensor 0000 [ 240.212796][ T5621] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 240.534574][ T5621] usb 1-1: USB disconnect, device number 24 [ 240.873615][ T7620] No source specified [ 240.876650][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 240.913453][ T7633] block nbd2: not configured, cannot reconfigure [ 241.115108][ T7635] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 241.151313][ T3686] usb 4-1: USB disconnect, device number 22 [ 241.224456][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 241.396696][ T6685] udevd[6685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.548139][ T7642] bond3: entered promiscuous mode [ 241.548168][ T7642] bond3: entered allmulticast mode [ 241.548531][ T7642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.913934][ T7650] warning: `syz.2.611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.090930][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 242.241843][ T7654] syzkaller1: entered promiscuous mode [ 242.241872][ T7654] syzkaller1: entered allmulticast mode [ 242.278433][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 242.313893][ T7658] fuse: Bad value for 'fd' [ 242.432603][ T3686] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 242.523949][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 242.593355][ T3686] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.596636][ T3686] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 242.596674][ T3686] usb 4-1: config 1 interface 0 has no altsetting 0 [ 242.604813][ T3686] usb 4-1: string descriptor 0 read error: -22 [ 242.604947][ T3686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.074305][ T3686] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 243.105713][ T3686] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0001/input/input19 [ 243.236400][ T5621] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 243.392566][ T5621] usb 3-1: Using ep0 maxpacket: 32 [ 243.394811][ T3686] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 243.400182][ T5621] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 243.415658][ T3686] usb 4-1: USB disconnect, device number 23 [ 243.419116][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.419151][ T5621] usb 3-1: Product: syz [ 243.419176][ T5621] usb 3-1: Manufacturer: syz [ 243.419196][ T5621] usb 3-1: SerialNumber: syz [ 243.431880][ T5621] usb 3-1: config 0 descriptor?? [ 243.439144][ T5621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 243.615378][ T7675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.615448][ T7675] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 243.689227][ T7675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.689257][ T7675] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 243.727763][ T7676] fido_id[7676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 243.787991][ T7675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.788021][ T7675] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 243.864406][ T7675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.864436][ T7675] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 243.902126][ T7675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.902156][ T7675] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 243.946849][ T7675] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 243.946878][ T7675] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 244.152628][ T5846] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.311611][ T5846] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 244.320809][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.334518][ T5846] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 025 [ 244.418759][ T7685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.041924][ T5846] (null): error -EIO: failure setting delay to 10us [ 245.042024][ T5846] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 245.049164][ T5846] usb 1-1: USB disconnect, device number 25 [ 245.278240][ T5621] gspca_ov534_9: reg_r err -71 [ 245.294140][ T7687] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 245.345954][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 245.424474][ T7691] veth2: entered promiscuous mode [ 245.467954][ T7687] bond4: entered promiscuous mode [ 245.467987][ T7687] bond4: entered allmulticast mode [ 245.468312][ T7687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.532697][ T5621] gspca_ov534_9: Unknown sensor 0000 [ 245.532772][ T5621] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 245.540589][ T5621] usb 3-1: USB disconnect, device number 23 [ 246.036957][ T7699] fuse: Bad value for 'fd' [ 246.072591][ T5739] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 246.169546][ T7701] dlm: no local IP address has been set [ 246.169649][ T7701] dlm: cannot start dlm midcomms -107 [ 246.232760][ T5739] usb 4-1: Using ep0 maxpacket: 32 [ 246.394526][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.457127][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 246.468857][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.643261][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 246.658400][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 246.730402][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 246.730448][ T10] usb 1-1: config 0 has no interface number 0 [ 246.730481][ T10] usb 1-1: config 0 interface 85 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 246.730501][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 246.751126][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.751158][ T10] usb 1-1: Product: syz [ 246.751178][ T10] usb 1-1: Manufacturer: syz [ 246.751197][ T10] usb 1-1: SerialNumber: syz [ 246.758133][ T10] usb 1-1: config 0 descriptor?? [ 246.771918][ T10] appletouch 1-1:0.85: Could not find int-in endpoint [ 246.771946][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 246.786473][ T10] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 246.916050][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 247.121890][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.121947][ T5739] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 247.123783][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 247.123821][ T5739] usb 4-1: can't read configurations, error -71 [ 247.186051][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 247.536516][ T7710] syzkaller1: entered promiscuous mode [ 247.542600][ T5621] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 247.568506][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 247.816348][ T7710] syzkaller1: entered allmulticast mode [ 247.920939][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.930350][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.942116][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.953637][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.962139][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.032688][ T5621] usb 6-1: Using ep0 maxpacket: 8 [ 248.049195][ T5621] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 248.064783][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.089093][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.100144][ T5621] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.104513][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.119640][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.130500][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.180380][ T5621] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 248.409361][ T5621] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.442518][ T5621] usb 6-1: config 0 interface 0 has no altsetting 0 [ 249.340485][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.361181][ T5621] usb 6-1: config 0 descriptor?? [ 249.368207][ T7716] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.438280][ T5739] usb 1-1: USB disconnect, device number 26 [ 249.579720][ T7723] syz_tun: refused to change device tx_queue_len [ 249.648090][ T7735] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 249.932003][ T5621] usbhid 6-1:0.0: can't add hid device: -71 [ 249.954411][ T5621] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 250.364952][ T5618] Bluetooth: hci6: command tx timeout [ 250.766097][ T5621] usb 6-1: USB disconnect, device number 33 [ 250.961461][ T7746] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 251.084263][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 251.261075][ T7758] hub 8-0:1.0: USB hub found [ 251.267769][ T7758] hub 8-0:1.0: 1 port detected [ 252.112099][ T5846] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 252.373058][ T7755] bond5: entered promiscuous mode [ 252.378175][ T5618] Bluetooth: hci6: command tx timeout [ 252.384628][ T7755] bond5: entered allmulticast mode [ 252.391827][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.402075][ T5846] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 252.412915][ T7755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.413682][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.429881][ T5846] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.442048][ T5846] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 253.106400][ T5846] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 253.166507][ T5846] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 253.180507][ T7750] veth4: entered allmulticast mode [ 253.205304][ T5846] usb 3-1: config 1 interface 1 has no altsetting 0 [ 253.255026][ T5846] usb 3-1: string descriptor 0 read error: -22 [ 253.268368][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.815524][ T5857] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 253.838038][ T7781] netlink: 9 bytes leftover after parsing attributes in process `syz.4.650'. [ 253.865670][ T5617] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 253.939454][ T7589] syz_tun (unregistering): left allmulticast mode [ 253.961722][ T5846] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 254.043615][ T5857] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 254.053779][ T5617] usb 6-1: Using ep0 maxpacket: 32 [ 254.083376][ T5857] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 254.088740][ T5617] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 254.104162][ T5857] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.131216][ T7781] 0: renamed from hsr0 (while UP) [ 254.136979][ T5617] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 254.137017][ T5617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 254.137048][ T5617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 254.137076][ T5617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 254.137108][ T5617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 254.139709][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.176327][ T7779] null_blk: nullb1: using native zone append [ 254.190145][ T5617] usb 6-1: Product: syz [ 254.215242][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.242604][ T5857] usb 4-1: Product: syz [ 254.250466][ T5617] usb 6-1: Manufacturer: syz [ 254.253424][ T5857] usb 4-1: Manufacturer: syz [ 254.255823][ T5617] usb 6-1: SerialNumber: syz [ 254.265989][ T5857] usb 4-1: SerialNumber: syz [ 254.314520][ T5617] usb 6-1: config 0 descriptor?? [ 254.315726][ T5857] rtl8150 4-1:1.0: couldn't find required endpoints [ 254.326881][ T5857] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 254.341416][ T7781] 0: entered allmulticast mode [ 254.347501][ T7781] hsr_slave_0: entered allmulticast mode [ 254.354075][ T7781] hsr_slave_1: entered allmulticast mode [ 254.363027][ T7781] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 254.452729][ T5618] Bluetooth: hci6: command tx timeout [ 254.525111][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.574882][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.584693][ T6007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.601711][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.608053][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.624905][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.636822][ T7779] null_blk: disk nullb1 created [ 254.646025][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.662184][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.678013][ T5621] usb 4-1: USB disconnect, device number 26 [ 254.692822][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.705401][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.718465][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.732202][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.741973][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.748957][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.755695][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.772401][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.782530][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.797647][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.822949][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.834770][ T6007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.839846][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.861687][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.876146][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.898244][ T5617] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 254.912990][ T5617] input input21: Timeout waiting for response from device. [ 254.938219][ T5617] usb 6-1: USB disconnect, device number 34 [ 255.015167][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.025677][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.079912][ T5857] usb 3-1: USB disconnect, device number 24 [ 255.150677][ T6007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.200670][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 255.281637][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 255.410734][ T6007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.573009][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 255.714468][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 255.751129][ T7801] syzkaller1: entered promiscuous mode [ 255.762603][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 255.766892][ T7817] misc userio: Invalid payload size [ 255.796210][ T24] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 255.837399][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.855792][ T7801] syzkaller1: entered allmulticast mode [ 255.867083][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 255.880863][ T24] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.903887][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.910597][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.923272][ T24] usb 1-1: config 0 descriptor?? [ 255.929307][ T7800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.941021][ T7821] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 255.993585][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 256.055564][ T7821] bond6: entered promiscuous mode [ 256.067633][ T7821] bond6: entered allmulticast mode [ 256.082937][ T7821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.175814][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 256.189434][ T7823] veth6: entered allmulticast mode [ 256.368287][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 256.393394][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 256.412953][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.466410][ T7828] bridge0: port 3(syz_tun) entered disabled state [ 256.477751][ T24] usb 1-1: USB disconnect, device number 27 [ 256.531023][ T7828] syz_tun (unregistering): left allmulticast mode [ 256.540174][ T5618] Bluetooth: hci6: command tx timeout [ 256.546891][ T7828] syz_tun (unregistering): left promiscuous mode [ 256.553635][ T7828] bridge0: port 3(syz_tun) entered disabled state [ 257.759651][ T6007] bridge_slave_1: left allmulticast mode [ 257.786850][ T6007] bridge_slave_1: left promiscuous mode [ 257.807930][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.955918][ T3686] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 257.987253][ T5617] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 258.102065][ T7855] comedi comedi3: pcl818: I/O base address not correctly aligned [ 258.258261][ T3686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.315252][ T6007] bridge_slave_0: left allmulticast mode [ 258.375334][ T3686] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 258.398009][ T6007] bridge_slave_0: left promiscuous mode [ 258.419450][ T1143] IPVS: starting estimator thread 0... [ 258.468045][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.543531][ T3686] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.557490][ T5617] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 258.622917][ T7863] IPVS: using max 25 ests per chain, 60000 per kthread [ 258.640627][ T3686] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.654886][ T5617] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 258.680662][ T3686] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 258.695651][ T5617] usb 4-1: can't read configurations, error -71 [ 258.719033][ T3686] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 258.728966][ T6007] pim6reg: left allmulticast mode [ 258.763057][ T3686] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 258.803548][ T3686] usb 3-1: config 1 interface 1 has no altsetting 0 [ 258.841406][ T3686] usb 3-1: string descriptor 0 read error: -22 [ 258.859765][ T3686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.148988][ T7869] binder: 7867:7869 ioctl c0306201 2000000001c0 returned -22 [ 259.537851][ T3686] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 259.561724][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.127204][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 260.280349][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.316130][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.342956][ T6007] bond0 (unregistering): Released all slaves [ 260.345360][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.381584][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.402734][ T7890] misc userio: Invalid payload size [ 260.408747][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.421727][ T6007] bond1 (unregistering): Released all slaves [ 260.480136][ T7873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 260.537003][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.280073][ T5617] usb 3-1: USB disconnect, device number 25 [ 261.666155][ T7898] netlink: zone id is out of range [ 261.690488][ T7898] netlink: zone id is out of range [ 263.205901][ T7898] netlink: zone id is out of range [ 263.235842][ T7898] netlink: zone id is out of range [ 263.258666][ T7898] netlink: zone id is out of range [ 263.269291][ T7898] netlink: zone id is out of range [ 263.275263][ T7898] netlink: zone id is out of range [ 263.280572][ T7898] netlink: zone id is out of range [ 263.286550][ T7898] netlink: zone id is out of range [ 263.291940][ T7898] netlink: zone id is out of range [ 264.190806][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 264.215924][ T5617] usb 5-1: USB disconnect, device number 30 [ 264.235072][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.078237][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.130006][ T7719] bridge_slave_0: entered allmulticast mode [ 265.238147][ T7719] bridge_slave_0: entered promiscuous mode [ 265.291519][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.382692][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.420060][ T7719] bridge_slave_1: entered allmulticast mode [ 265.674646][ T7719] bridge_slave_1: entered promiscuous mode [ 266.697738][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.748012][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.853178][ T2207] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 266.883169][ T7924] syzkaller0: create flow: hash 2703553777 index 2 [ 267.001189][ T13] syzkaller0: tun_net_xmit 76 [ 267.017936][ T13] syzkaller0: tun_net_xmit 48 [ 267.024170][ T186] syzkaller0: tun_net_xmit 76 [ 267.033645][ T2207] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 267.070606][ T2207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.091153][ T2207] usb 3-1: Product: syz [ 267.106235][ T2207] usb 3-1: Manufacturer: syz [ 267.116138][ T2207] usb 3-1: SerialNumber: syz [ 267.135144][ T2207] usb 3-1: config 0 descriptor?? [ 267.161196][ T2207] hub 3-1:0.0: bad descriptor, ignoring hub [ 267.183292][ T2207] hub 3-1:0.0: probe with driver hub failed with error -5 [ 267.292324][ T6007] hsr_slave_0: left promiscuous mode [ 267.299214][ T5739] syzkaller0: tun_net_xmit 76 [ 267.313679][ T6007] hsr_slave_1: left promiscuous mode [ 267.321995][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.348251][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.372664][ T2207] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 267.386176][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.405670][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.454666][ T6007] veth1_macvtap: left promiscuous mode [ 267.470673][ T6007] veth0_macvtap: left promiscuous mode [ 267.477884][ T2207] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 267.493455][ T6007] veth1_vlan: left promiscuous mode [ 267.498962][ T2207] dib0700: firmware download failed at 7 with -22 [ 267.507539][ T6007] veth0_vlan: left promiscuous mode [ 267.544874][ T2207] usb 3-1: USB disconnect, device number 26 [ 267.866246][ T5846] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 268.042581][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 268.053713][ T2207] syzkaller0: tun_net_xmit 76 [ 268.057173][ T5846] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 268.089147][ T5846] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 268.097780][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.132855][ T2207] syzkaller0: tun_net_xmit 76 [ 268.319310][ T5846] usb 6-1: config 0 has no interface number 0 [ 268.338350][ T5846] usb 6-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 269.204590][ T7955] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input28 [ 269.325689][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 269.376184][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.410717][ T5846] usb 6-1: config 0 descriptor?? [ 269.444481][ T5846] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.528249][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 269.604435][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.619880][ T5846] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 269.686278][ T5846] usb 6-1: USB disconnect, device number 35 [ 269.795509][ T7932] syzkaller0: delete flow: hash 2703553777 index 2 [ 269.833080][ T2207] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 269.995148][ T2207] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 270.016869][ T2207] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 270.026225][ T2207] usb 5-1: config 1 has no interface number 0 [ 270.061742][ T2207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.069953][ T2207] usb 5-1: Product: syz [ 270.074476][ T2207] usb 5-1: Manufacturer: syz [ 270.080020][ T2207] usb 5-1: SerialNumber: syz [ 270.099015][ T2207] usb 5-1: 3:1 : does not exist [ 270.104353][ T2207] usb 5-1: 3:2 : does not exist [ 270.383911][ T2207] usb 5-1: USB disconnect, device number 31 [ 270.622808][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 270.632350][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 271.450131][ T7972] misc userio: Invalid payload size [ 272.398422][ T7719] team0: Port device team_slave_0 added [ 272.412823][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 272.469317][ T7719] team0: Port device team_slave_1 added [ 272.681647][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.700521][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.765072][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.779286][ T7984] hub 8-0:1.0: USB hub found [ 272.798253][ T7984] hub 8-0:1.0: 1 port detected [ 272.836058][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.853141][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.926380][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.985464][ T7994] trusted_key: encrypted_key: master key parameter '' is invalid [ 273.032556][ T3686] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 273.104146][ T7719] hsr_slave_0: entered promiscuous mode [ 273.131607][ T7719] hsr_slave_1: entered promiscuous mode [ 273.142234][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 273.148365][ T7719] Cannot create hsr debugfs directory [ 273.192914][ T3686] usb 6-1: Using ep0 maxpacket: 32 [ 273.202391][ T3686] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 273.233893][ T3686] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 273.252536][ T3686] usb 6-1: config 0 has no interface number 0 [ 273.264382][ T3686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.282988][ T3686] usb 6-1: Product: syz [ 273.287201][ T3686] usb 6-1: Manufacturer: syz [ 273.291792][ T3686] usb 6-1: SerialNumber: syz [ 273.413929][ T3686] usb 6-1: config 0 descriptor?? [ 273.542544][ T186] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 273.739295][ T186] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.765323][ T186] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 273.800422][ T186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.848678][ T186] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 273.874797][ T3686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.908568][ T186] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 273.928004][ T3686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.965174][ T186] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 274.036493][ T7719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.052874][ T186] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 274.089394][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.096646][ T186] usb 4-1: config 1 interface 1 has no altsetting 0 [ 274.126331][ T186] usb 4-1: string descriptor 0 read error: -22 [ 274.136103][ T7719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.149492][ T186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.174212][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.209699][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 274.227254][ T7719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.265924][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.287121][ T7719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.306467][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.374058][ T5739] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 274.553438][ T5739] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 274.574760][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.586450][ T3686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 274.596500][ T5739] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 274.620667][ T5739] usb 5-1: config 1 has no interface number 0 [ 274.633223][ T3686] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 274.641190][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.657021][ T5739] usb 5-1: Product: syz [ 274.662371][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.690436][ T5739] usb 5-1: Manufacturer: syz [ 274.697440][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.704648][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.720879][ T5739] usb 5-1: SerialNumber: syz [ 274.731420][ T3686] usb 6-1: USB disconnect, device number 36 [ 274.770085][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.777291][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.819825][ T186] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 274.987419][ T5739] usb 5-1: 3:1 : does not exist [ 275.012600][ T5739] usb 5-1: 3:2 : does not exist [ 275.167749][ T5739] usb 5-1: USB disconnect, device number 32 [ 275.294516][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 276.662372][ T5857] usb 4-1: USB disconnect, device number 29 [ 276.905854][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 276.932399][ T8064] hub 8-0:1.0: USB hub found [ 276.965196][ T8064] hub 8-0:1.0: 1 port detected [ 277.006759][ T8069] misc userio: Invalid payload size [ 277.187217][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.432616][ T5857] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 277.522632][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 277.614408][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 277.634866][ T5857] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 277.658571][ T5857] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.680580][ T5857] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 277.694599][ T5857] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.698045][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 277.708821][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.742178][ T7719] veth0_vlan: entered promiscuous mode [ 277.745264][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 277.766984][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.778268][ T7719] veth1_vlan: entered promiscuous mode [ 277.797567][ T5857] usb 3-1: config 0 descriptor?? [ 277.799036][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 277.806044][ T8074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 277.832554][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.880201][ T24] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 277.902031][ T7719] veth0_macvtap: entered promiscuous mode [ 277.907938][ T24] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 277.929166][ T7719] veth1_macvtap: entered promiscuous mode [ 277.977403][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.997843][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.092714][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.186542][ T5801] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.227076][ T6247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.306967][ T5857] usbhid 3-1:0.0: can't add hid device: -71 [ 278.319779][ T5857] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.375663][ T5857] usb 3-1: USB disconnect, device number 27 [ 279.351863][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.363026][ T6248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.380879][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.320817][ T5621] usb 4-1: USB disconnect, device number 30 [ 281.358620][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.379905][ T5621] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 281.393679][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.406073][ T5621] spcp8x5 4-1:1.0: device disconnected [ 282.622922][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 282.902689][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 283.106800][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 283.150490][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.328935][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.386499][ T9] usb 7-1: Product: syz [ 283.416712][ T9] usb 7-1: Manufacturer: syz [ 283.444549][ T9] usb 7-1: SerialNumber: syz [ 283.476821][ T24] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 283.499737][ T9] usb 7-1: config 0 descriptor?? [ 283.502980][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.529109][ T24] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 283.558351][ T24] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 283.604042][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.743089][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.911518][ T8141] misc userio: Invalid payload size [ 284.180781][ T24] snd-usb-caiaq 6-1:1.0: invalid EPs [ 284.189082][ T24] usb 6-1: unable to init card! (ret=-22) [ 284.203369][ T24] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 284.603819][ T2207] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 284.774728][ T2207] usb 5-1: device descriptor read/64, error -71 [ 284.785928][ T5621] atkbd serio11: Failed to enable keyboard on [ 284.823190][ T5621] input: AT Raw Set 2 keyboard as /devices/serio11/input/input35 [ 284.907058][ T5621] usb 6-1: USB disconnect, device number 37 [ 285.080684][ T3686] ================================================================== [ 285.088781][ T3686] BUG: KASAN: slab-use-after-free in atkbd_event_work+0x592/0x650 [ 285.096598][ T3686] Read of size 4 at addr ffff888025c96164 by task kworker/1:2/3686 [ 285.104487][ T3686] [ 285.106808][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 285.106836][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 285.106850][ T3686] Workqueue: events atkbd_event_work [ 285.106871][ T3686] Call Trace: [ 285.106879][ T3686] [ 285.106887][ T3686] dump_stack_lvl+0xe8/0x150 [ 285.106920][ T3686] print_address_description+0x55/0x1e0 [ 285.106954][ T3686] ? atkbd_event_work+0x592/0x650 [ 285.106976][ T3686] print_report+0x58/0x70 [ 285.107007][ T3686] kasan_report+0x117/0x150 [ 285.107026][ T3686] ? atkbd_event_work+0x592/0x650 [ 285.107048][ T3686] atkbd_event_work+0x592/0x650 [ 285.107077][ T3686] ? __pfx_atkbd_event_work+0x10/0x10 [ 285.107103][ T3686] ? rcu_is_watching+0x16/0xb0 [ 285.107127][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.107154][ T3686] ? process_scheduled_works+0x97a/0x1630 [ 285.107177][ T3686] process_scheduled_works+0xc3d/0x1630 [ 285.107198][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.107245][ T3686] ? __pfx_process_scheduled_works+0x10/0x10 [ 285.107277][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.107303][ T3686] ? assign_work+0x3cf/0x5d0 [ 285.107325][ T3686] worker_thread+0xa47/0xfb0 [ 285.107364][ T3686] kthread+0x38b/0x480 [ 285.107400][ T3686] ? __pfx_worker_thread+0x10/0x10 [ 285.107427][ T3686] ? __pfx_kthread+0x10/0x10 [ 285.107457][ T3686] ret_from_fork+0x514/0xb70 [ 285.107486][ T3686] ? __pfx_ret_from_fork+0x10/0x10 [ 285.107517][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.107546][ T3686] ? __switch_to+0xc89/0x1420 [ 285.107576][ T3686] ? __pfx_kthread+0x10/0x10 [ 285.107607][ T3686] ret_from_fork_asm+0x1a/0x30 [ 285.107644][ T3686] [ 285.107650][ T3686] [ 285.262608][ T2207] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 285.263839][ T3686] Allocated by task 5621: [ 285.263854][ T3686] kasan_save_track+0x3e/0x80 [ 285.290357][ T3686] __kasan_kmalloc+0x93/0xb0 [ 285.294971][ T3686] __kmalloc_cache_noprof+0x321/0x600 [ 285.300353][ T3686] input_allocate_device+0x4e/0x2a0 [ 285.305576][ T3686] atkbd_connect+0xb1/0x9c0 [ 285.310085][ T3686] serio_driver_probe+0x82/0xa0 [ 285.314941][ T3686] really_probe+0x254/0xae0 [ 285.319445][ T3686] __driver_probe_device+0x1e8/0x360 [ 285.324724][ T3686] driver_probe_device+0x4f/0x240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.329736][ T3686] __device_attach_driver+0x270/0x410 [ 285.335102][ T3686] bus_for_each_drv+0x258/0x2f0 [ 285.339961][ T3686] __device_attach+0x2c4/0x450 [ 285.344726][ T3686] device_initial_probe+0xa1/0xd0 [ 285.349740][ T3686] bus_probe_device+0x12a/0x220 [ 285.354588][ T3686] device_add+0x7d7/0xb80 [ 285.358919][ T3686] serio_handle_event+0x9f2/0xd20 [ 285.363962][ T3686] process_scheduled_works+0xc3d/0x1630 [ 285.369505][ T3686] worker_thread+0xa47/0xfb0 [ 285.374092][ T3686] kthread+0x38b/0x480 [ 285.378160][ T3686] ret_from_fork+0x514/0xb70 [ 285.382752][ T3686] ret_from_fork_asm+0x1a/0x30 [ 285.387526][ T3686] [ 285.389836][ T3686] Freed by task 8139: [ 285.393797][ T3686] kasan_save_track+0x3e/0x80 [ 285.398477][ T3686] kasan_save_free_info+0x40/0x50 [ 285.403543][ T3686] __kasan_slab_free+0x5c/0x80 [ 285.408309][ T3686] kfree+0x1c5/0x650 [ 285.412206][ T3686] input_dev_release+0xab/0xc0 [ 285.416987][ T3686] device_release+0xc4/0x1f0 [ 285.421573][ T3686] kobject_put+0x222/0x550 [ 285.425978][ T3686] atkbd_disconnect+0xb5/0x110 [ 285.430734][ T3686] serio_driver_remove+0x85/0xa0 [ 285.435676][ T3686] device_release_driver_internal+0x48b/0x880 [ 285.441740][ T3686] serio_unregister_port+0x128/0x150 [ 285.442547][ T2207] usb 5-1: device descriptor read/64, error -71 [ 285.447027][ T3686] userio_char_release+0x80/0xc0 [ 285.447056][ T3686] __fput+0x418/0xa50 [ 285.447080][ T3686] task_work_run+0x1d9/0x270 [ 285.466710][ T3686] exit_to_user_mode_loop+0x204/0x770 [ 285.472357][ T3686] do_syscall_64+0x328/0x520 [ 285.476949][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.482839][ T3686] [ 285.485147][ T3686] The buggy address belongs to the object at ffff888025c96000 [ 285.485147][ T3686] which belongs to the cache kmalloc-4k of size 4096 [ 285.499215][ T3686] The buggy address is located 356 bytes inside of [ 285.499215][ T3686] freed 4096-byte region [ffff888025c96000, ffff888025c97000) [ 285.513098][ T3686] [ 285.515411][ T3686] The buggy address belongs to the physical page: [ 285.521819][ T3686] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25c90 [ 285.530571][ T3686] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 285.539063][ T3686] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 285.546607][ T3686] page_type: f5(slab) [ 285.550588][ T3686] raw: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 285.559176][ T3686] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 285.568408][ T3686] head: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 285.577087][ T3686] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 285.585758][ T3686] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 285.594526][ T3686] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 285.598995][ T2207] usb usb5-port1: attempt power cycle [ 285.603189][ T3686] page dumped because: kasan: bad access detected [ 285.603207][ T3686] page_owner tracks the page as allocated [ 285.603217][ T3686] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4978, tgid 4978 (udevd), ts 44140195112 [ 285.603258][ T3686] post_alloc_hook+0x1f9/0x250 [ 285.643990][ T3686] get_page_from_freelist+0x2209/0x2280 [ 285.649550][ T3686] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 285.655460][ T3686] allocate_slab+0x7d/0x620 [ 285.659965][ T3686] refill_objects+0x2d5/0x350 [ 285.664644][ T3686] __pcs_replace_empty_main+0x2c8/0x6c0 [ 285.670220][ T3686] __kmalloc_noprof+0x47b/0x720 [ 285.675070][ T3686] tomoyo_realpath_from_path+0xef/0x640 [ 285.680618][ T3686] tomoyo_check_open_permission+0x229/0x470 [ 285.686509][ T3686] security_file_open+0xa9/0x240 [ 285.691450][ T3686] do_dentry_open+0x4a0/0x1380 [ 285.696226][ T3686] vfs_open+0x3b/0x340 [ 285.700311][ T3686] path_openat+0x1443/0x1d60 [ 285.704912][ T3686] do_file_open+0x23e/0x4a0 [ 285.709471][ T3686] do_sys_openat2+0x115/0x200 [ 285.714148][ T3686] __x64_sys_openat+0x138/0x170 [ 285.719003][ T3686] page last free pid 4981 tgid 4981 ts 44132500299 stack trace: [ 285.726636][ T3686] __free_frozen_pages+0xc93/0xd90 [ 285.731769][ T3686] __slab_free+0x274/0x2c0 [ 285.736211][ T3686] qlist_free_all+0x99/0x100 [ 285.740829][ T3686] kasan_quarantine_reduce+0x148/0x160 [ 285.746362][ T3686] __kasan_slab_alloc+0x22/0x80 [ 285.751319][ T3686] __kmalloc_cache_noprof+0x29f/0x600 [ 285.756702][ T3686] kernfs_iop_get_link+0x66/0x6c0 [ 285.761723][ T3686] vfs_readlink+0x24a/0x540 [ 285.766219][ T3686] do_readlinkat+0x218/0x510 [ 285.770811][ T3686] __x64_sys_readlink+0x7f/0x90 [ 285.775660][ T3686] do_syscall_64+0x166/0x520 [ 285.780256][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.786143][ T3686] [ 285.788450][ T3686] Memory state around the buggy address: [ 285.794067][ T3686] ffff888025c96000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.802165][ T3686] ffff888025c96080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.810223][ T3686] >ffff888025c96100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.818274][ T3686] ^ [ 285.825458][ T3686] ffff888025c96180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.833517][ T3686] ffff888025c96200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.841574][ T3686] ================================================================== [ 286.258064][ T3686] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.265314][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 286.274692][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.284761][ T3686] Workqueue: events atkbd_event_work [ 286.290068][ T3686] Call Trace: [ 286.293349][ T3686] [ 286.296278][ T3686] vpanic+0x56d/0xa60 [ 286.300279][ T3686] ? __pfx_vpanic+0x10/0x10 [ 286.304804][ T3686] panic+0xc5/0xd0 [ 286.308547][ T3686] ? __pfx_panic+0x10/0x10 [ 286.312981][ T3686] ? preempt_schedule_thunk+0x16/0x40 [ 286.318362][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324004][ T3686] ? preempt_schedule_thunk+0x16/0x40 [ 286.329384][ T3686] ? atkbd_event_work+0x592/0x650 [ 286.334410][ T3686] check_panic_on_warn+0x89/0xb0 [ 286.339379][ T3686] ? atkbd_event_work+0x592/0x650 [ 286.344403][ T3686] end_report+0x73/0x170 [ 286.348645][ T3686] ? atkbd_event_work+0x592/0x650 [ 286.353668][ T3686] kasan_report+0x128/0x150 [ 286.358180][ T3686] ? atkbd_event_work+0x592/0x650 [ 286.363210][ T3686] atkbd_event_work+0x592/0x650 [ 286.368067][ T3686] ? __pfx_atkbd_event_work+0x10/0x10 [ 286.373440][ T3686] ? rcu_is_watching+0x16/0xb0 [ 286.378208][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.383855][ T3686] ? process_scheduled_works+0x97a/0x1630 [ 286.389581][ T3686] process_scheduled_works+0xc3d/0x1630 [ 286.395124][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.400770][ T3686] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.406750][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.412388][ T3686] ? assign_work+0x3cf/0x5d0 [ 286.416979][ T3686] worker_thread+0xa47/0xfb0 [ 286.421589][ T3686] kthread+0x38b/0x480 [ 286.425665][ T3686] ? __pfx_worker_thread+0x10/0x10 [ 286.430773][ T3686] ? __pfx_kthread+0x10/0x10 [ 286.435371][ T3686] ret_from_fork+0x514/0xb70 [ 286.439976][ T3686] ? __pfx_ret_from_fork+0x10/0x10 [ 286.445095][ T3686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.450726][ T3686] ? __switch_to+0xc89/0x1420 [ 286.455440][ T3686] ? __pfx_kthread+0x10/0x10 [ 286.460039][ T3686] ret_from_fork_asm+0x1a/0x30 [ 286.464817][ T3686] [ 286.468052][ T3686] Kernel Offset: disabled [ 286.472363][ T3686] Rebooting in 86400 seconds..