last executing test programs: 16m14.556250372s ago: executing program 0 (id=1444): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000004c0)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000500)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 16m14.307760458s ago: executing program 0 (id=1448): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd}, 0x1c) r1 = socket(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x2, 0x0, 0x0, 0xc, 0x7, 0x9}, 0x20) 16m14.146751912s ago: executing program 0 (id=1449): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000100)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000140)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="c3", 0x1, 0x40811, 0x0, 0x0) write(r1, &(0x7f0000000240)="b4dbb0", 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 16m14.145901122s ago: executing program 2 (id=1450): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts={{0x2c, 0x29, 0x32, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x2c}}], 0x2, 0x0) 16m14.121778303s ago: executing program 3 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706afe00000000000000000000000000500010006000000"], 0x1c}}, 0x0) 16m13.969019746s ago: executing program 3 (id=1452): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/247, 0x7ffff000}], 0x1, &(0x7f0000001700)=[{&(0x7f0000001740)=""/231, 0xffffff4e}], 0x23a, 0x0) 16m13.919769508s ago: executing program 2 (id=1453): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x23, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e21, 0xfe, @mcast1}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 16m13.895217218s ago: executing program 0 (id=1454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000008c0)=0xb27, 0x4) connect$inet(r0, &(0x7f0000000900)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="2213d3ae303f049be5e169931e92dee61d15238c574a8505d2c6fb75bd2f21b52206f3fc8231dae59d2a3c80dd1cf71df19c3994e65be6ee47379df730f69b6ad5e2fbb25d067d8b7675bed674ff6c823b033239b51b19d8684ba2398a58ae", 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c", 0x5e}], 0x1}}], 0x2, 0x4080) 16m8.575545118s ago: executing program 0 (id=1455): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x3f, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 16m8.446741312s ago: executing program 3 (id=1456): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000004c0)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000500)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 16m8.305311325s ago: executing program 2 (id=1457): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = socket(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x2, 0x0, 0x0, 0xc, 0x7, 0x9}, 0x20) 16m8.179093218s ago: executing program 3 (id=1459): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0xff, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000140)=0x84) 16m7.991796143s ago: executing program 2 (id=1460): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706afe00000000000000000000000000500010006000000"], 0x1c}}, 0x0) 16m7.935636254s ago: executing program 3 (id=1461): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 16m7.816299347s ago: executing program 0 (id=1462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000100)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000140)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="c3", 0x1, 0x40811, 0x0, 0x0) write(r1, &(0x7f0000000240)="b4dbb0", 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 16m7.756589098s ago: executing program 2 (id=1464): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000180)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) 16m4.486776538s ago: executing program 3 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 16m4.478629559s ago: executing program 2 (id=1467): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000500)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 15m47.101964424s ago: executing program 32 (id=1462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000100)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000140)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="c3", 0x1, 0x40811, 0x0, 0x0) write(r1, &(0x7f0000000240)="b4dbb0", 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 15m45.558952281s ago: executing program 33 (id=1467): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000500)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 15m45.349714457s ago: executing program 34 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 4.993547598s ago: executing program 6 (id=4995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl(r2, 0x4048aecb, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.763382053s ago: executing program 1 (id=4997): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 4.521361449s ago: executing program 6 (id=4999): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0xfffffffd, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="5800000014001923", 0x8}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.517436719s ago: executing program 1 (id=5000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/mtrr\x00', 0x2, 0x30) write(r0, &(0x7f0000000300), 0x0) 4.272789785s ago: executing program 1 (id=5002): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x129241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x16f) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x801) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000340)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000400)=0xfff) 4.10560814s ago: executing program 4 (id=5003): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 4.024302682s ago: executing program 4 (id=5004): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\vE', 0x2}], 0x1}}], 0x1, 0x20048815) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000580)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x143102) writev(r2, &(0x7f0000000880)=[{&(0x7f00000008c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000a80)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000ac0)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b00)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b40)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b80)=0xef) getrlimit(0xf, &(0x7f0000000180)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d80)=0x7e) write(0xffffffffffffffff, &(0x7f0000000dc0)='33554432\x00', 0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.978967772s ago: executing program 6 (id=5005): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="dd950d1df66887159a5b8c78e7284b8e367eafd5f234955292c25651bbc945f3651852f46cad7b0fc91efcb99dc012c03392261dd9fe28672d49ec45e2ca161afb54965271c91b046a17f170fd60bc14490507443bf9ec8abe3980e61b47272de2adea602059a31a2ce80ca13e78c74f5b7690833a05959dea0d9600b0c08472bf6a811c3dc60d9c488fc5b27a", 0x8d}], 0x1) 3.355847918s ago: executing program 5 (id=5006): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys_sec\x00', &(0x7f0000000280)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3.355606338s ago: executing program 6 (id=5007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl(r2, 0x4048aecb, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.332006879s ago: executing program 1 (id=5008): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 3.040236756s ago: executing program 4 (id=5009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.906705489s ago: executing program 1 (id=5010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/mtrr\x00', 0x2, 0x30) write(r0, &(0x7f0000000300), 0x0) 2.835664411s ago: executing program 5 (id=5011): openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) removexattr(&(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)=@random={'user.', 'devtmpfs\x00'}) 2.767370272s ago: executing program 6 (id=5012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0x9, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000700)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.723143893s ago: executing program 1 (id=5013): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYBLOB], 0x84}}, 0x11) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x8, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xaa, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x208, 0x1, 0x7f, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.698670564s ago: executing program 4 (id=5014): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.618241876s ago: executing program 5 (id=5015): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000004fc0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000005040)={0x1, [{0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0xfffffffc, 0x0}, {0x1, 0x18, 0xbda, &(0x7f0000005200)="4e843d"}, {0xb87392a8c0a4475f, 0x0, 0x6, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2629538a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa5000000, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xfffffffc, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.419669421s ago: executing program 5 (id=5016): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="dd950d1df66887159a5b8c78e7284b8e367eafd5f234955292c25651bbc945f3651852f46cad7b0fc91efcb99dc012c03392261dd9fe28672d49ec45e2ca161afb54965271c91b046a17f170fd60bc14490507443bf9ec8abe3980e61b47272de2adea602059a31a2ce80ca13e78c74f5b7690833a05959dea0d9600b0c08472bf6a811c3dc60d9c488fc5b27a", 0x8d}, {0x0}], 0x2) 2.283203334s ago: executing program 5 (id=5017): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\vE', 0x2}], 0x1}}], 0x1, 0x20048815) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000580)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x143102) writev(r2, &(0x7f0000000880)=[{&(0x7f00000008c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000a80)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000ac0)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b00)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b40)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b80)=0xef) getrlimit(0xf, &(0x7f0000000180)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d80)=0x7e) write(0xffffffffffffffff, &(0x7f0000000dc0)='33554432\x00', 0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 540.736426ms ago: executing program 4 (id=5018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 395.61766ms ago: executing program 5 (id=5019): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000800000000000000080000006b11b80000000000950000000000000039d6"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000000a06050600000000000000000200000005000100070000000900020073797a3000000000240007800c00018008000140ac1414bb0c000280080001400000800008000a40"], 0x4c}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001880)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000018c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000001900)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/user\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{r2}, 0x0, 0x4, @unused=[0x8, 0xffffffffffffff69, 0x3, 0x9], @subvolid=0x3}) 265.061163ms ago: executing program 4 (id=5020): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb0806000800400001000009000000ac1414aa000000000000e0000001979205006815f26020e1cacaacd9298a0a0c25b8c24f9829ea3b268fe197a79a9c3d44e1c12d990faaf4d687029c67b7473174ec36ca5d752f4b58601a820e6bb8a01919395b8accb200c37a90309e91e77a5244012f0000"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00070400000800"/21], 0x40) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) 0s ago: executing program 6 (id=5021): r0 = socket$netlink(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x602240, 0x195) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') lseek(r1, 0x8001, 0x4) r2 = io_uring_setup(0x585f, &(0x7f0000000140)={0x0, 0x2c28, 0x10080, 0x0, 0xffffffd}) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f00000001c0)={0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000200), 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='/dev/zram0,65', 0xd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) kernel console output (not intermixed with test programs): usb 5-1: USB disconnect, device number 64 [ 815.576100][T19205] syz.4.4170 (19205) used greatest stack depth: 20104 bytes left [ 815.625476][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4177'. [ 815.651433][T19232] bond0: entered promiscuous mode [ 815.672626][T19232] bond_slave_0: entered promiscuous mode [ 815.692833][T19232] bond_slave_1: entered promiscuous mode [ 815.821667][T19232] gretap0: entered promiscuous mode [ 815.853767][T19232] hsr1: entered promiscuous mode [ 819.392955][T19292] syzkaller0: entered promiscuous mode [ 819.407306][T19292] syzkaller0: entered allmulticast mode [ 820.012880][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4189'. [ 823.604833][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4204'. [ 823.822836][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'. [ 823.942613][ T5765] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 824.103069][ T27] audit: type=1326 audit(1792045659.825:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19345 comm="syz.4.4209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 824.137871][ T5765] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 824.292530][ T5765] usb 6-1: config 0 has no interface number 0 [ 824.298744][ T5765] usb 6-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 824.309906][ T5765] usb 6-1: config 0 interface 41 has no altsetting 0 [ 824.320312][ T5765] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 824.331452][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.344751][ T5765] usb 6-1: Product: syz [ 824.351246][ T5765] usb 6-1: Manufacturer: syz [ 824.358232][ T5765] usb 6-1: SerialNumber: syz [ 824.411998][ T5765] usb 6-1: config 0 descriptor?? [ 824.447700][ T5765] CoreChips: probe of 6-1:0.41 failed with error -22 [ 825.088275][T19366] syzkaller0: entered promiscuous mode [ 825.102517][T19366] syzkaller0: entered allmulticast mode [ 825.532789][ T27] audit: type=1326 audit(1792045661.255:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.4216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4037f9e559 code=0x0 [ 825.592680][ T5855] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 825.796075][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.807785][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.819785][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 825.832427][ T5855] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.841509][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.854443][ T5855] usb 5-1: config 0 descriptor?? [ 826.277997][ T5855] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 826.295427][ T5855] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 826.306379][ T5855] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 826.320579][ T5855] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 826.330509][ T5855] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 826.346261][ T5855] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 826.701144][ T9733] usb 6-1: USB disconnect, device number 76 [ 826.723961][T16359] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 826.942706][T16359] usb 2-1: Using ep0 maxpacket: 16 [ 826.950507][T16359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 826.959655][T16359] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 826.968122][T16359] usb 2-1: config 9 has no interface number 0 [ 826.974478][T16359] usb 2-1: config 9 interface 57 has no altsetting 0 [ 826.985779][T16359] usb 2-1: string descriptor 0 read error: -22 [ 826.992958][T16359] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 827.002094][T16359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.256579][ T9733] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 827.432764][T16359] video4linux radio48: keene_cmd_main failed (-71) [ 827.441231][T16359] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 827.456838][ T9733] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 827.466578][T16359] usb 2-1: USB disconnect, device number 77 [ 827.476402][ T9733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.499247][ T9733] usb 6-1: Product: syz [ 827.508005][ T9733] usb 6-1: Manufacturer: syz [ 827.518347][ T9733] usb 6-1: SerialNumber: syz [ 827.544638][ T9733] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 827.573144][ T9733] scsi host1: usb-storage 6-1:1.0 [ 828.179798][T19436] syzkaller0: entered promiscuous mode [ 828.185512][T19436] syzkaller0: entered allmulticast mode [ 828.320614][ T27] audit: type=1326 audit(1792045664.045:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.6.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 828.423889][T17271] usb 5-1: USB disconnect, device number 65 [ 828.912629][T17271] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 829.094704][T17271] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 829.103217][T17271] usb 5-1: config 0 has no interface number 0 [ 829.109534][T17271] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 829.126603][T17271] usb 5-1: config 0 interface 41 has no altsetting 0 [ 829.141838][T17271] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 829.151156][T17271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.160785][T17271] usb 5-1: Product: syz [ 829.167211][T17271] usb 5-1: Manufacturer: syz [ 829.172782][T17271] usb 5-1: SerialNumber: syz [ 829.181221][T17271] usb 5-1: config 0 descriptor?? [ 829.191189][T17271] CoreChips: probe of 5-1:0.41 failed with error -22 [ 829.319714][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4229'. [ 829.785703][ T8] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 829.985166][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.996343][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.006691][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 830.017961][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.027192][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.037701][ T8] usb 2-1: config 0 descriptor?? [ 830.360627][T19468] syzkaller0: entered promiscuous mode [ 830.367305][T19468] syzkaller0: entered allmulticast mode [ 830.453430][ T8] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.472016][ T8] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.481747][ T8] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.494934][ T8] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 830.510725][ T8] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 830.533223][ T8] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 830.566106][ T27] audit: type=1326 audit(1792045666.295:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.6.4236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 831.539175][ T9729] usb 5-1: USB disconnect, device number 66 [ 832.062767][ T9729] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 832.253215][ T9729] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 832.284070][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.331534][ T9729] usb 5-1: config 0 has no interfaces? [ 832.370813][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.384393][ T9729] usb 5-1: config 0 has no interfaces? [ 832.394265][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.404665][ T9729] usb 5-1: config 0 has no interfaces? [ 832.414556][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.432722][ T9729] usb 5-1: config 0 has no interfaces? [ 832.470616][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.518089][ T9729] usb 5-1: config 0 has no interfaces? [ 832.597453][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.608848][ T9729] usb 5-1: config 0 has no interfaces? [ 832.610733][ T8] usb 2-1: USB disconnect, device number 78 [ 832.616366][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.641646][ T9729] usb 5-1: config 0 has no interfaces? [ 832.747192][ T9729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.761142][ T9729] usb 5-1: config 0 has no interfaces? [ 832.791483][ T9729] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 832.819717][ T9729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.871885][ T9729] usb 5-1: config 0 descriptor?? [ 834.134510][T19498] zram: Cannot change disksize for initialized device [ 834.919211][T16359] usb 5-1: USB disconnect, device number 67 [ 835.025806][ T9733] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 835.052768][ T9733] usb 6-1: USB disconnect, device number 77 [ 835.076149][ T27] audit: type=1326 audit(1792045670.795:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.1.4245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4037f9e559 code=0x0 [ 835.452668][ T9733] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 835.653333][ T9733] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 835.669554][ T9733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.691188][ T9733] usb 6-1: Product: syz [ 835.700974][ T9733] usb 6-1: Manufacturer: syz [ 835.711587][ T9733] usb 6-1: SerialNumber: syz [ 835.736041][ T9733] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 835.769236][ T9733] scsi host1: usb-storage 6-1:1.0 [ 835.997120][T19512] UDC core: g1: couldn't find an available UDC or it's busy [ 837.842522][T16359] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 838.059868][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.092447][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.120298][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 838.156625][T16359] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.182872][T16359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.219094][T16359] usb 2-1: config 0 descriptor?? [ 838.383197][T19527] syzkaller0: entered promiscuous mode [ 838.388909][T19527] syzkaller0: entered allmulticast mode [ 838.715158][T16359] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 838.728202][T16359] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 838.736962][T16359] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 838.745034][T16359] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 838.754034][T16359] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 838.795690][T16359] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 838.811508][ T27] audit: type=1326 audit(1792045674.535:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19530 comm="syz.4.4256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 839.459826][T19539] UDC core: g1: couldn't find an available UDC or it's busy [ 839.782531][T16359] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 839.962662][T16359] usb 5-1: Using ep0 maxpacket: 32 [ 839.974732][T16359] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 839.983976][T16359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.993133][T16359] usb 5-1: Product: syz [ 839.997327][T16359] usb 5-1: Manufacturer: syz [ 840.002033][T16359] usb 5-1: SerialNumber: syz [ 840.008664][T16359] usb 5-1: config 0 descriptor?? [ 840.017162][T16359] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 840.832486][ T5765] usb 2-1: reset high-speed USB device number 79 using dummy_hcd [ 841.026415][ T5765] usb 2-1: device firmware changed [ 841.033007][ T5853] usb 2-1: USB disconnect, device number 79 [ 841.204205][ T5853] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 841.406729][ T5853] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 841.417184][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 841.430209][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 841.440411][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 841.441532][T16359] gspca_topro: reg_r err -71 [ 841.450575][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 841.459842][T16359] gspca_topro: Sensor soi763a [ 841.473431][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 841.491232][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 841.501610][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 841.512661][T16359] usb 5-1: USB disconnect, device number 68 [ 841.522287][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 841.544167][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 841.559957][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 841.586039][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 841.602680][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 841.679560][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 841.872539][ T5853] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 841.889451][ T5853] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 841.898629][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.907000][ T5853] usb 2-1: Product: syz [ 841.911265][ T5853] usb 2-1: Manufacturer: syz [ 841.915995][ T5853] usb 2-1: SerialNumber: syz [ 841.924733][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.932935][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.940865][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.948352][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.956451][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.964389][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.971810][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.979222][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.986684][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 841.994147][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 842.001433][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 842.009052][T19544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 842.018883][ T5853] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 842.032688][ T5853] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 842.045281][ T5853] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 842.064110][ T5853] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 842.074486][ T5853] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 842.106691][ T9733] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 842.137568][ T9733] usb 6-1: USB disconnect, device number 78 [ 842.247127][ T5853] usb 2-1: USB disconnect, device number 80 [ 842.357650][T19559] zram: Cannot change disksize for initialized device [ 842.413571][ T5853] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 842.759456][ T9733] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 843.078213][ T5853] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 843.089516][ T5853] keyspan 2-1:1.0: device disconnected [ 843.227802][T19564] syzkaller0: entered promiscuous mode [ 843.233451][T19564] syzkaller0: entered allmulticast mode [ 843.249828][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4269'. [ 843.254827][ T9733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.270369][ T9733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.280320][ T9733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 843.281755][T19567] bond0: entered promiscuous mode [ 843.291386][ T9733] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.301564][T19567] bond_slave_0: entered promiscuous mode [ 843.305989][ T9733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.312035][T19567] bond_slave_1: entered promiscuous mode [ 843.322064][ T9733] usb 6-1: config 0 descriptor?? [ 843.337717][T19567] gretap0: entered promiscuous mode [ 843.346122][T19567] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 843.358541][T19567] Cannot create hsr debugfs directory [ 843.365282][T19567] hsr1: entered promiscuous mode [ 843.373690][T19564] tipc: Enabled bearer , priority 0 [ 843.393375][T19564] tipc: Resetting bearer [ 843.401800][T19563] tipc: Resetting bearer [ 843.446424][T19563] tipc: Disabling bearer [ 843.662484][ T5853] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 843.802509][ T9733] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 843.812575][ T9733] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 843.824019][ T9733] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 843.831619][ T9733] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 843.840382][ T9733] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 843.859274][ T9733] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 843.986386][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.998315][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.014095][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 844.025447][ T5853] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 844.034692][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.045434][ T5853] usb 2-1: config 0 descriptor?? [ 844.265249][T19584] UDC core: g1: couldn't find an available UDC or it's busy [ 844.339164][T19586] vlan1: entered allmulticast mode [ 844.346266][T19586] veth0_vlan: entered allmulticast mode [ 844.471062][ T5853] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 844.478772][ T5853] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 844.487702][ T5853] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 844.495817][ T5853] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 844.505493][ T5853] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 844.518172][ T5853] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 845.148289][ T5853] usb 2-1: USB disconnect, device number 81 [ 845.512624][T16360] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 845.657270][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4278'. [ 845.711441][T16360] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 845.723341][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 845.736419][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 845.747038][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 845.757586][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 845.771748][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 845.782723][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 845.793440][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 845.804118][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 845.814369][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 845.841797][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 845.869791][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 845.892547][T16360] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 845.917505][T16360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 845.917542][T16360] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 845.920204][T16360] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 845.960143][T16359] usb 6-1: USB disconnect, device number 79 [ 845.982584][T16360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.982614][T16360] usb 5-1: Product: syz [ 845.982630][T16360] usb 5-1: Manufacturer: syz [ 845.982643][T16360] usb 5-1: SerialNumber: syz [ 846.000004][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000154][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000293][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000445][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000576][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000717][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000856][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.000994][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.001132][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.001270][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.001418][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.001557][T19590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.006978][T16360] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 846.008526][T16360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 846.014155][T16360] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 846.015285][T16360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 846.016221][T16360] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 846.415365][T19606] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 846.580169][ T9736] usb 5-1: USB disconnect, device number 69 [ 846.612020][ T9736] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 846.629287][ T9736] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 846.641758][ T9736] keyspan 5-1:1.0: device disconnected [ 847.077696][T19615] UDC core: g1: couldn't find an available UDC or it's busy [ 847.352895][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4284'. [ 848.210711][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4288'. [ 848.392820][ T5853] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 848.678853][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.690106][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.414449][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 849.698060][T19636] autofs4:pid:19636:autofs_fill_super: called with bogus options [ 849.722542][ T5853] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 849.752636][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.782354][ T5853] usb 6-1: config 0 descriptor?? [ 850.230445][T19642] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 850.273300][ T5853] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 850.293969][ T5853] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 850.313554][ T5853] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 850.332297][ T5853] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 850.353675][ T5853] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 850.384261][ T5853] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 851.086540][T19654] UDC core: g1: couldn't find an available UDC or it's busy [ 851.722583][T16359] usb 6-1: reset high-speed USB device number 80 using dummy_hcd [ 852.116784][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 852.878194][T19663] autofs4:pid:19663:autofs_fill_super: called with bogus options [ 853.089281][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4299'. [ 853.112704][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'. [ 853.125387][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4299'. [ 853.240004][T19672] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4299'. [ 853.376577][T19675] UDC core: g1: couldn't find an available UDC or it's busy [ 853.473910][ T9736] usb 6-1: USB disconnect, device number 80 [ 853.907949][T19684] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 854.132494][ T9736] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 854.356108][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.386170][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.414470][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 854.440448][ T9736] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 854.462630][ T9736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.473802][ T9736] usb 6-1: config 0 descriptor?? [ 854.927560][ T9736] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 854.939411][ T9736] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 854.950252][ T9736] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 854.961485][ T9736] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 854.988898][ T9736] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 855.019599][ T9736] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 856.058023][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.070741][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.080051][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.093702][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.103147][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 856.110716][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 856.319878][T19704] rxe_eth0 speed is unknown, defaulting to 1000 [ 856.950697][ T27] audit: type=1804 audit(1792045692.675:1926): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4313" name="/newroot/68/file1" dev="fuse" ino=1 res=1 errno=0 [ 857.049032][T19350] tipc: Left network mode [ 857.063773][ T5853] usb 6-1: USB disconnect, device number 81 [ 857.279516][T19717] fuse: Unknown parameter 'grou00000000000000000000' [ 857.325279][T19718] zram: Cannot change disksize for initialized device [ 858.198192][T19704] chnl_net:caif_netlink_parms(): no params data found [ 858.210137][ T5787] Bluetooth: hci3: command tx timeout [ 859.868256][T19704] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.935104][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.960368][T19704] bridge_slave_0: entered allmulticast mode [ 859.991997][T19704] bridge_slave_0: entered promiscuous mode [ 860.000782][ T27] audit: type=1326 audit(1792045695.725:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.5.4322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 860.035438][T19704] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.051030][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.059171][T19704] bridge_slave_1: entered allmulticast mode [ 860.073534][T19704] bridge_slave_1: entered promiscuous mode [ 860.280148][ T27] audit: type=1804 audit(1792045696.005:1928): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4323" name="/newroot/152/file1" dev="fuse" ino=1 res=1 errno=0 [ 860.305893][T19704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.332682][ T5787] Bluetooth: hci3: command tx timeout [ 860.479954][T19350] batman_adv: batadv0: Removing interface: gretap1 [ 860.536900][T19704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.585436][T19765] fuse: Unknown parameter 'grou00000000000000000000' [ 860.741243][T19704] team0: Port device team_slave_0 added [ 860.868127][T19704] team0: Port device team_slave_1 added [ 861.017220][T19704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.057173][T19704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.141183][T19704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.189940][ T9736] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 861.203639][T19704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.221052][T19704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.258897][T19704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.466187][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.522492][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.570908][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 861.603469][T19704] hsr_slave_0: entered promiscuous mode [ 861.613152][T19704] hsr_slave_1: entered promiscuous mode [ 861.641166][T19704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.647292][ T9736] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.672277][T19704] Cannot create hsr debugfs directory [ 861.692435][ T9736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.767979][ T9736] usb 6-1: config 0 descriptor?? [ 862.148635][T19350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.189662][T19350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.215749][T19350] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.252329][T19350] bridge_slave_0: left allmulticast mode [ 862.262806][T19350] bridge_slave_0: left promiscuous mode [ 862.303953][ T9736] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 862.311781][T19350] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.335565][ T9736] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 862.362988][ T5787] Bluetooth: hci3: command tx timeout [ 862.369056][ T9736] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 862.389225][ T9736] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 862.403303][ T9736] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 862.458893][ T9736] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 864.462763][ T5787] Bluetooth: hci3: command tx timeout [ 865.066478][ T9729] usb 6-1: USB disconnect, device number 82 [ 865.078672][ T27] audit: type=1326 audit(1792045700.795:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.5.4332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 865.609515][T19350] team0 (unregistering): Port device team_slave_1 removed [ 865.677562][T19350] team0 (unregistering): Port device team_slave_0 removed [ 865.734716][T19350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.747453][ T27] audit: type=1804 audit(1792045701.475:1930): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4331" name="/newroot/63/file1" dev="fuse" ino=1 res=1 errno=0 [ 865.869396][T19350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.883013][T19815] fuse: Unknown parameter 'grou00000000000000000000' [ 865.944262][T19817] fuse: Bad value for 'group_id' [ 866.619273][T19350] bond0 (unregistering): Released all slaves [ 867.045276][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 868.507986][ T27] audit: type=1804 audit(1792045704.235:1931): pid=19857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4340" name="/newroot/160/file1" dev="fuse" ino=1 res=1 errno=0 [ 868.863231][T19865] fuse: Unknown parameter 'group_i00000000000000000000' [ 868.992501][T19704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 869.036339][T19704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 869.045554][T19867] fuse: Bad value for 'group_id' [ 869.064282][T19704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.128074][T19704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 869.293615][T19869] syzkaller0: entered promiscuous mode [ 869.312553][T19869] syzkaller0: entered allmulticast mode [ 869.631500][T19704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.700926][T19704] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.784039][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.791242][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.817606][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.825057][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.080894][ T27] audit: type=1804 audit(1792045705.805:1932): pid=19888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4349" name="/newroot/165/file1" dev="fuse" ino=1 res=1 errno=0 [ 870.145134][ T27] audit: type=1326 audit(1792045705.845:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.5.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 870.997403][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.005850][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.146175][T19900] fuse: Unknown parameter 'group_i00000000000000000000' [ 871.257245][T19704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.429140][T19704] veth0_vlan: entered promiscuous mode [ 871.489932][T19704] veth1_vlan: entered promiscuous mode [ 871.550059][T19704] veth0_macvtap: entered promiscuous mode [ 871.577921][T19704] veth1_macvtap: entered promiscuous mode [ 871.635064][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.658302][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.678570][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.702411][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.722759][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.733447][ T5765] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 871.756703][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.778551][T19704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.805711][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.833266][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.866889][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.887661][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.907910][T19704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.932437][T19704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.957434][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.970114][T19704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.983005][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.015571][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 872.035386][T19704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.065762][ T5765] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.082536][T19704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.091317][T19704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.111261][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.128564][T19704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.138682][ T5765] usb 6-1: config 0 descriptor?? [ 872.208472][T19929] syzkaller0: entered promiscuous mode [ 872.233746][T19929] syzkaller0: entered allmulticast mode [ 872.427931][T12814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.458687][T12814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.528847][T19350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.560952][T19350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.582053][ T5765] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 872.612715][ T5765] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 872.642588][ T5765] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 872.650421][ T5765] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 872.710352][ T5765] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 872.750460][ T5765] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 872.964131][ T27] audit: type=1804 audit(1792045708.685:1934): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4357" name="/newroot/171/file1" dev="fuse" ino=1 res=1 errno=0 [ 873.163258][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4358'. [ 873.474265][ T5853] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 873.747219][T16360] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 874.234837][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.268291][ T5853] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 874.283065][T16360] usb 5-1: device descriptor read/64, error -71 [ 874.301916][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.323853][ T5853] usb 2-1: Product: syz [ 874.328092][ T5853] usb 2-1: Manufacturer: syz [ 874.345029][ T5853] usb 2-1: SerialNumber: syz [ 874.355136][ T5853] usb 2-1: config 0 descriptor?? [ 874.378177][ T5853] usb 2-1: ucan: probing device on interface #0 [ 874.389843][ T5853] usb 2-1: ucan: invalid EP count (0) [ 875.697618][ T5853] usb 2-1: ucan: probe failed; try to update the device firmware [ 875.756716][ T5853] usb 2-1: USB disconnect, device number 82 [ 875.822521][T16360] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 875.992810][T16360] usb 5-1: device descriptor read/64, error -71 [ 876.123850][T16360] usb usb5-port1: attempt power cycle [ 876.172592][T19440] usb 6-1: reset high-speed USB device number 83 using dummy_hcd [ 876.687468][T20007] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 877.135061][ T27] audit: type=1804 audit(1792045712.865:1935): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4367" name="/newroot/3/file1" dev="fuse" ino=1 res=1 errno=0 [ 878.002574][T16360] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 878.114737][T20040] syzkaller0: entered promiscuous mode [ 878.126516][T20040] syzkaller0: entered allmulticast mode [ 878.214546][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.251853][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.297813][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 878.335352][T16360] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.366682][T16360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.389729][T16360] usb 2-1: config 0 descriptor?? [ 878.622618][ T9729] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 878.803628][ T9729] usb 5-1: device descriptor read/64, error -71 [ 878.828397][T16360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 878.837241][T16360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 878.857973][T16360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 878.875873][T16360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 878.902409][T16360] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 878.937281][T16360] plantronics 0003:047F:FFFF.002B: hiddev1,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 879.093305][ T9729] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 879.272802][ T9729] usb 5-1: device descriptor read/64, error -71 [ 879.392787][ T9729] usb usb5-port1: attempt power cycle [ 879.900159][ T9729] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 879.933478][ T9729] usb 5-1: device descriptor read/8, error -71 [ 880.021860][T20060] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 880.332535][ T9729] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 880.384286][ T9729] usb 5-1: device descriptor read/8, error -71 [ 880.516686][ T9729] usb usb5-port1: unable to enumerate USB device [ 881.840258][T20072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4381'. [ 881.888586][T20073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4381'. [ 883.013101][T16360] usb 2-1: USB disconnect, device number 83 [ 883.223918][ T9729] usb 6-1: USB disconnect, device number 83 [ 884.846388][T20088] zram: Cannot change disksize for initialized device [ 885.071456][ T27] audit: type=1326 audit(1792045720.795:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.6.4385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 885.315403][ T27] audit: type=1804 audit(1792045721.045:1937): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4387" name="/newroot/179/file1" dev="fuse" ino=1 res=1 errno=0 [ 885.362666][T20093] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 885.590707][T20104] syzkaller0: entered promiscuous mode [ 885.596718][T20104] syzkaller0: entered allmulticast mode [ 887.154299][T20118] zram: Cannot change disksize for initialized device [ 888.022570][T17271] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 888.261429][T17271] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 888.285161][T17271] usb 6-1: config 0 has no interface number 0 [ 888.308479][T17271] usb 6-1: config 0 interface 41 has no altsetting 0 [ 888.339715][T17271] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 888.396492][ T27] audit: type=1804 audit(1792045724.125:1938): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4398" name="/newroot/11/file1" dev="fuse" ino=1 res=1 errno=0 [ 888.432008][T17271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.454214][T17271] usb 6-1: Product: syz [ 888.458446][T17271] usb 6-1: Manufacturer: syz [ 888.488551][T17271] usb 6-1: SerialNumber: syz [ 888.514902][T17271] usb 6-1: config 0 descriptor?? [ 889.117794][T20132] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 889.288450][T17271] CoreChips: probe of 6-1:0.41 failed with error -22 [ 889.412483][T19440] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 889.592620][ T27] audit: type=1326 audit(1792045725.315:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20136 comm="syz.4.4396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 889.686327][T19440] usb 2-1: config 0 has no interfaces? [ 889.698658][T19440] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 889.788630][T19440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.799738][T19440] usb 2-1: Product: syz [ 889.810712][T19440] usb 2-1: Manufacturer: syz [ 889.816577][T19440] usb 2-1: SerialNumber: syz [ 889.839592][T19440] usb 2-1: config 0 descriptor?? [ 890.907468][T19440] usb 2-1: USB disconnect, device number 84 [ 891.119631][T16360] usb 6-1: USB disconnect, device number 84 [ 891.148010][T20150] syzkaller0: entered promiscuous mode [ 891.159726][T20150] syzkaller0: entered allmulticast mode [ 891.853210][T20166] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 892.030098][T20169] zram: Cannot change disksize for initialized device [ 893.004849][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 893.021454][ T27] audit: type=1326 audit(1792045728.745:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20177 comm="syz.6.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 893.097852][T20183] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4417'. [ 893.214834][T20186] syzkaller0: entered promiscuous mode [ 893.230442][T20186] syzkaller0: entered allmulticast mode [ 893.319831][T20190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4419'. [ 893.558808][T20196] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 893.609840][T20199] zram: Cannot change disksize for initialized device [ 894.868614][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4431'. [ 894.944360][T20224] fuse: Bad value for 'fd' [ 895.151955][ T27] audit: type=1326 audit(1792045730.875:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20227 comm="syz.6.4434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 896.066714][T20236] zram: Cannot change disksize for initialized device [ 897.027748][ T27] audit: type=1326 audit(1792045732.755:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20237 comm="syz.5.4436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 897.290021][T20248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4440'. [ 897.362121][T20253] fuse: Bad value for 'fd' [ 898.592516][T16359] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 898.852914][ T27] audit: type=1326 audit(1792045734.335:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.5.4446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 898.911894][T20271] vlan1: entered allmulticast mode [ 898.917427][T20271] veth0_vlan: entered allmulticast mode [ 899.024392][T20274] zram: Cannot change disksize for initialized device [ 899.108360][T16359] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 899.150599][T16359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.196961][T16359] usb 5-1: Product: syz [ 899.221499][T16359] usb 5-1: Manufacturer: syz [ 899.244079][T16359] usb 5-1: SerialNumber: syz [ 899.381837][T16359] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 900.889930][ T27] audit: type=1326 audit(1792045736.525:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.6.4453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 901.023544][T16360] usb 5-1: USB disconnect, device number 77 [ 901.310945][ T27] audit: type=1326 audit(1792045737.035:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.4.4456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 902.206516][T20302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4457'. [ 902.316392][T20305] zram: Cannot change disksize for initialized device [ 903.171335][T20313] tipc: Enabled bearer , priority 0 [ 903.186446][T20313] syzkaller0: entered promiscuous mode [ 903.191970][T20313] syzkaller0: entered allmulticast mode [ 903.219492][T20313] tipc: Resetting bearer [ 903.229493][T20311] tipc: Resetting bearer [ 903.277313][T20311] tipc: Disabling bearer [ 903.392746][T16359] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 903.432597][T16360] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 903.592938][ T27] audit: type=1326 audit(1792045739.295:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 903.634479][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.645988][T16360] usb 6-1: Using ep0 maxpacket: 32 [ 903.651170][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.665369][T16360] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 903.683626][T16359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 903.711184][T16360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.725203][T16360] usb 6-1: Product: syz [ 903.729453][T16359] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.749398][T16360] usb 6-1: Manufacturer: syz [ 903.759797][T16360] usb 6-1: SerialNumber: syz [ 903.767251][T16359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.778576][T16360] usb 6-1: config 0 descriptor?? [ 903.801483][T16360] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 903.816771][T16359] usb 2-1: config 0 descriptor?? [ 903.975454][T20323] autofs4:pid:20323:autofs_fill_super: called with bogus options [ 904.251143][T16359] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 904.271534][T16359] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 904.289978][T16359] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 904.305010][T16359] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 904.325140][T16359] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 904.350048][T16359] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 904.611306][ T27] audit: type=1326 audit(1792045740.335:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.4.4467" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 905.393326][T16360] gspca_topro: reg_w err -110 [ 905.472476][T16360] gspca_topro: Sensor soi763a [ 905.568778][T20334] fuse: Bad value for 'fd' [ 905.897296][T20343] zram: Cannot change disksize for initialized device [ 906.383489][T16360] usb 2-1: USB disconnect, device number 85 [ 906.762326][ T5765] usb 6-1: USB disconnect, device number 85 [ 906.972413][T20350] syzkaller1: entered promiscuous mode [ 907.007881][T20350] syzkaller1: entered allmulticast mode [ 907.131015][ T27] audit: type=1326 audit(1792045742.855:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20352 comm="syz.6.4475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 907.382299][T20358] fuse: Bad value for 'fd' [ 908.105778][T20363] autofs4:pid:20363:autofs_fill_super: called with bogus options [ 909.539286][ C1] hrtimer: interrupt took 112081 ns [ 910.462560][ T5765] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 910.964717][T20369] FAULT_INJECTION: forcing a failure. [ 910.964717][T20369] name failslab, interval 1, probability 0, space 0, times 0 [ 911.135238][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.427390][T20369] CPU: 1 PID: 20369 Comm: syz.4.4483 Not tainted syzkaller #0 [ 911.434934][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 911.445033][T20369] Call Trace: [ 911.448334][T20369] [ 911.451289][T20369] dump_stack_lvl+0x18c/0x250 [ 911.456011][T20369] ? show_regs_print_info+0x20/0x20 [ 911.461247][T20369] ? load_image+0x420/0x420 [ 911.465796][T20369] ? __lock_acquire+0x7eb0/0x7eb0 [ 911.470949][T20369] ? __lock_acquire+0x135d/0x7eb0 [ 911.476287][T20369] should_fail_ex+0x394/0x4c0 [ 911.481011][T20369] should_failslab+0x9/0x20 [ 911.485565][T20369] slab_pre_alloc_hook+0x59/0x300 [ 911.490690][T20369] kmem_cache_alloc_lru+0x4d/0x2b0 [ 911.498518][T20369] ? __d_alloc+0x31/0x710 [ 911.502930][T20369] __d_alloc+0x31/0x710 [ 911.507123][T20369] d_alloc_parallel+0xe0/0x1590 [ 911.512016][T20369] ? mark_lock+0x94/0x320 [ 911.516404][T20369] ? lockdep_softirqs_off+0x440/0x440 [ 911.521827][T20369] ? lockdep_softirqs_off+0x440/0x440 [ 911.527240][T20369] ? d_hash_and_lookup+0x1b0/0x1b0 [ 911.532436][T20369] ? __init_waitqueue_head+0xa8/0x140 [ 911.537903][T20369] __lookup_slow+0x138/0x400 [ 911.542540][T20369] ? lookup_one_len+0x2e0/0x2e0 [ 911.547448][T20369] lookup_one_len+0x1a1/0x2e0 [ 911.552160][T20369] ? lookup_one_common+0x450/0x450 [ 911.557304][T20369] ? down_write+0x16e/0x200 [ 911.561943][T20369] ? down_read_killable+0x340/0x340 [ 911.567176][T20369] ? mntput+0x65/0xc0 [ 911.571192][T20369] start_creating+0x184/0x310 [ 911.576103][T20369] debugfs_create_dir+0x25/0x4b0 [ 911.581197][T20369] blk_mq_debugfs_register_sched+0x109/0x2b0 [ 911.587266][T20369] blk_mq_init_sched+0x3bc/0x780 [ 911.592287][T20369] ? blk_mq_sched_try_insert_merge+0x160/0x160 [ 911.598506][T20369] ? blk_mq_quiesce_queue+0xfe/0x190 [ 911.604095][T20369] elevator_switch+0x1ee/0x5b0 [ 911.608912][T20369] elv_iosched_store+0x3b9/0x4b0 [ 911.613893][T20369] ? kernfs_fop_write_iter+0x1dc/0x520 [ 911.619529][T20369] ? elevator_disable+0x4f0/0x4f0 [ 911.624778][T20369] queue_attr_store+0x9e/0xd0 [ 911.629687][T20369] ? sysfs_kf_read+0x360/0x360 [ 911.634494][T20369] kernfs_fop_write_iter+0x3a4/0x520 [ 911.639827][T20369] vfs_write+0x474/0x9a0 [ 911.644199][T20369] ? file_end_write+0x250/0x250 [ 911.649086][T20369] ? __fget_files+0x3fc/0x460 [ 911.653813][T20369] ? __fdget_pos+0x2a3/0x330 [ 911.658449][T20369] ? ksys_write+0x74/0x260 [ 911.662913][T20369] ksys_write+0x151/0x260 [ 911.667324][T20369] ? __ia32_sys_read+0x90/0x90 [ 911.672128][T20369] ? lockdep_hardirqs_on+0x98/0x150 [ 911.677366][T20369] do_syscall_64+0x55/0xb0 [ 911.681804][T20369] ? clear_bhb_loop+0x40/0x90 [ 911.686521][T20369] ? clear_bhb_loop+0x40/0x90 [ 911.691282][T20369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.697221][T20369] RIP: 0033:0x7fda80f9e559 [ 911.701752][T20369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.721422][T20369] RSP: 002b:00007fda81eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.729862][T20369] RAX: ffffffffffffffda RBX: 00007fda81225fa0 RCX: 00007fda80f9e559 [ 911.737877][T20369] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000005 [ 911.745891][T20369] RBP: 00007fda810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 911.753978][T20369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.761983][T20369] R13: 00007fda81226038 R14: 00007fda81225fa0 R15: 00007ffe653fe808 [ 911.770022][T20369] [ 912.604989][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.614849][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 912.625837][ T5765] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 912.634997][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.749684][ T5765] usb 2-1: config 0 descriptor?? [ 913.231938][ T5765] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 913.275909][T20379] zram: Cannot change disksize for initialized device [ 913.290452][ T5765] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 913.368350][ T5765] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 913.445679][ T5765] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 913.703868][ T5765] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 913.932675][ T5765] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 914.092884][ T5765] usb 2-1: USB disconnect, device number 86 [ 914.286039][T20385] fido_id[20385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 914.330293][T20389] fuse: Invalid rootmode [ 914.341061][T20387] syzkaller1: entered promiscuous mode [ 914.348218][T20387] syzkaller1: entered allmulticast mode [ 917.198875][ T27] audit: type=1326 audit(1792045750.395:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20390 comm="syz.1.4488" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b79e559 code=0x0 [ 917.298466][ T27] audit: type=1326 audit(1792045752.985:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.4.4489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 919.442606][ T5765] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 920.472402][T20416] comedi comedi1: reset error (fatal) [ 921.083259][ T5765] usb 5-1: Using ep0 maxpacket: 32 [ 921.523286][ T9736] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 922.200497][ T5765] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 922.273293][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.288597][ T5765] usb 5-1: Product: syz [ 922.316866][ T5765] usb 5-1: Manufacturer: syz [ 922.337694][ T5765] usb 5-1: SerialNumber: syz [ 922.375907][ T5765] usb 5-1: config 0 descriptor?? [ 922.394701][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.418219][ T5765] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 922.464964][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.492776][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 922.538353][ T9736] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.588200][ T9736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.621726][ T9736] usb 2-1: config 0 descriptor?? [ 922.638099][ T5765] gspca_topro: reg_w err -71 [ 922.712458][ T5765] gspca_topro: Sensor soi763a [ 922.752934][ T5765] usb 5-1: USB disconnect, device number 78 [ 923.114590][ T9736] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 923.153222][ T9736] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 923.160846][ T9736] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 924.312635][ T27] audit: type=1326 audit(1792045760.035:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz.5.4499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 924.551124][ T9736] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 924.563290][ T9736] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 924.614853][ T9736] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 924.631499][ T9736] usb 2-1: USB disconnect, device number 87 [ 924.914993][T20436] fido_id[20436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 925.456345][T20439] zram: Cannot change disksize for initialized device [ 926.415058][T20442] syzkaller1: entered promiscuous mode [ 926.479719][T20442] syzkaller1: entered allmulticast mode [ 927.021639][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4503'. [ 930.396567][T20463] binder: 20460:20463 ioctl c0306201 2000000000c0 returned -14 [ 930.428316][T20463] binder: 20460:20463 unknown command 1074553619 [ 930.452759][T20463] binder: 20460:20463 ioctl c0306201 200000000a80 returned -22 [ 930.999444][T20468] tipc: Enabled bearer , priority 0 [ 931.034865][T20468] syzkaller0: entered promiscuous mode [ 931.060852][T20468] syzkaller0: entered allmulticast mode [ 931.188326][T20471] tipc: Resetting bearer [ 931.327951][T20466] tipc: Resetting bearer [ 931.423538][T20466] tipc: Disabling bearer [ 931.892300][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.900360][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.774371][T20485] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 932.811989][ T27] audit: type=1326 audit(1792045768.535:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20483 comm="syz.6.4514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 933.434625][T20482] kvm: pic: non byte read [ 933.514192][T20482] kvm: pic: level sensitive irq not supported [ 933.514564][T20482] kvm: pic: non byte read [ 933.526911][T20482] kvm: pic: level sensitive irq not supported [ 933.526960][T20482] kvm: pic: non byte read [ 933.540800][T20482] kvm: pic: level sensitive irq not supported [ 933.540990][T20482] kvm: pic: non byte read [ 935.812437][T16360] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 936.048369][T16360] usb 5-1: Using ep0 maxpacket: 8 [ 936.073693][T16360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 936.093279][T16360] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 936.101438][T16360] usb 5-1: config 0 has no interface number 0 [ 936.128890][T20499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4519'. [ 936.152497][T16360] usb 5-1: config 0 interface 88 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 936.182463][T16360] usb 5-1: config 0 interface 88 has no altsetting 0 [ 936.193118][T16360] usb 5-1: string descriptor 0 read error: -22 [ 936.199464][T16360] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 936.253937][T16360] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 936.284874][T16360] usb 5-1: config 0 descriptor?? [ 936.605046][ T9736] usb 5-1: USB disconnect, device number 79 [ 937.139363][ T9729] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 937.403850][ T9729] usb 6-1: Using ep0 maxpacket: 8 [ 937.480167][ T9729] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 937.510667][ T9729] usb 6-1: config 179 has no interface number 0 [ 937.553948][ T9729] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 937.612618][ T9729] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 937.663053][ T9729] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 937.727602][ T9729] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 937.822988][ T9729] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 937.893541][ T9729] usb 6-1: config 179 interface 65 has no altsetting 0 [ 937.942658][ T9729] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 937.984418][ T9729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.131850][ T9729] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input34 [ 938.214549][ T5127] input input34: unable to receive magic message: -110 [ 938.354931][ T5127] input input34: unable to receive magic message: -32 [ 938.437352][ T5127] input input34: unable to receive magic message: -32 [ 938.459122][ T9736] usb 6-1: USB disconnect, device number 86 [ 938.459152][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 938.474725][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 938.483999][ T9736] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 940.122651][ T5787] Bluetooth: hci3: command tx timeout [ 942.232584][ T5765] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 942.522726][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4528'. [ 942.615720][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.669775][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.747365][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 942.791050][ T5765] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.825459][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.868141][ T5765] usb 2-1: config 0 descriptor?? [ 943.295314][ T5765] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 943.342487][ T5765] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 943.349971][ T5765] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 943.412468][ T5765] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 943.450445][ T5765] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 943.553950][ T5765] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 943.667383][ T5765] usb 2-1: USB disconnect, device number 88 [ 943.870173][T20529] fido_id[20529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 943.992704][ T9729] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 944.222549][ T9729] usb 5-1: Using ep0 maxpacket: 8 [ 944.230904][ T9729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.267900][ T9729] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 944.282750][ T9729] usb 5-1: config 0 has no interface number 0 [ 944.309577][ T9729] usb 5-1: config 0 interface 88 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 944.358371][ T9729] usb 5-1: config 0 interface 88 has no altsetting 0 [ 944.397989][ T9729] usb 5-1: string descriptor 0 read error: -22 [ 944.412869][ T9729] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 944.432633][ T9729] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 944.468408][ T9729] usb 5-1: config 0 descriptor?? [ 944.883129][T17271] usb 5-1: USB disconnect, device number 80 [ 947.904245][T20553] zram: Cannot change disksize for initialized device [ 948.547952][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 949.302556][ T5765] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 950.127784][ T27] audit: type=1326 audit(1792045785.335:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.1.4541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b79e559 code=0x0 [ 950.401099][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.442457][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.452263][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 950.512462][ T5765] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.562427][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.691984][ T5765] usb 5-1: config 0 descriptor?? [ 951.144538][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'. [ 951.194230][ T5765] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 951.210857][ T5765] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 951.234661][ T5765] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 951.242241][ T5765] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 951.287864][ T5765] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 951.344879][ T5765] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 951.515059][T17271] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 951.718548][T17271] usb 2-1: Using ep0 maxpacket: 8 [ 951.772813][T17271] usb 2-1: unable to get BOS descriptor or descriptor too short [ 951.785144][T17271] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 951.795346][T17271] usb 2-1: config 0 has no interface number 0 [ 951.803486][T17271] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 951.833336][T17271] usb 2-1: config 0 interface 88 has no altsetting 0 [ 952.689566][T17271] usb 2-1: string descriptor 0 read error: -22 [ 952.697323][T17271] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 952.708463][T17271] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 952.728879][T17271] usb 2-1: config 0 descriptor?? [ 952.812585][T16359] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 952.965246][T17271] usb 2-1: USB disconnect, device number 89 [ 953.667233][ T9736] usb 5-1: USB disconnect, device number 81 [ 954.597835][T20597] zram: Cannot change disksize for initialized device [ 957.582485][ T9736] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 957.612710][ T9733] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 957.790189][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.803848][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.817007][ T9736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 957.829113][ T9733] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 957.831919][ T9736] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.852788][ T9736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.862608][ T9733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.871718][ T9733] usb 2-1: Product: syz [ 957.883904][ T9736] usb 6-1: config 0 descriptor?? [ 957.902882][ T9733] usb 2-1: Manufacturer: syz [ 957.908479][ T9733] usb 2-1: SerialNumber: syz [ 957.944889][ T9733] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 957.982707][ T9733] scsi host1: usb-storage 2-1:1.0 [ 958.958175][ T9736] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 959.016711][ T9736] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 959.042658][ T9736] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 959.071097][ T9733] ums_eneub6250: probe of 2-1:1.0 failed with error 3 [ 959.078173][ T9736] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 959.079946][ T9736] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 959.120103][ T9736] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 959.178510][ T9733] usb 2-1: USB disconnect, device number 90 [ 959.249393][ T9736] usb 6-1: USB disconnect, device number 87 [ 959.329830][T20631] fido_id[20631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 959.453217][T20634] zram: Cannot change disksize for initialized device [ 963.015851][T20657] autofs4:pid:20657:autofs_fill_super: called with bogus options [ 964.892475][T16359] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 965.038180][T20662] zram: Cannot change disksize for initialized device [ 965.196865][T16359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.289626][T16359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.383288][T16359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 965.550991][T16359] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 965.750101][T16359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.893953][T16359] usb 6-1: config 0 descriptor?? [ 965.928520][T16359] usb 6-1: can't set config #0, error -71 [ 965.984186][T16359] usb 6-1: USB disconnect, device number 88 [ 968.632618][ T9736] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 969.875746][ T9736] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 969.902476][ T9736] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 969.910720][ T9736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.935774][ T9736] usb 2-1: config 0 has no interface number 0 [ 969.960929][ T9736] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 969.981555][ T9736] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 970.016906][ T9736] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 970.037993][ T9736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.069566][ T9736] usb 2-1: config 0 descriptor?? [ 970.139794][ T9736] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 970.312999][ T9736] usb 2-1: USB disconnect, device number 91 [ 970.325317][T19351] usb 2-1: Failed to submit usb control message: -71 [ 970.357137][T19351] usb 2-1: unable to send the bmi data to the device: -71 [ 970.367723][T19351] usb 2-1: unable to get target info from device [ 970.378080][T19351] usb 2-1: could not get target info (-71) [ 970.387359][T19351] usb 2-1: could not probe fw (-71) [ 970.975563][T20692] autofs4:pid:20692:autofs_fill_super: called with bogus options [ 972.997976][T20699] UDC core: g1: couldn't find an available UDC or it's busy [ 973.322609][ T9736] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 973.372442][T16359] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 974.127416][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.582086][T16359] usb 6-1: Using ep0 maxpacket: 8 [ 976.927865][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.938122][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 976.949287][ T9736] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.958616][ T9736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.970089][ T9736] usb 2-1: config 0 descriptor?? [ 977.062140][T16359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 977.126119][ T9736] usb 2-1: can't set config #0, error -71 [ 977.156517][T16359] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 977.180988][ T9736] usb 2-1: USB disconnect, device number 92 [ 977.197174][T16359] usb 6-1: can't read configurations, error -71 [ 978.045655][T20715] autofs4:pid:20715:autofs_fill_super: called with bogus options [ 979.833131][T16359] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 980.054695][T16359] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 980.071822][T20721] fuse: Invalid rootmode [ 980.089564][T16359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.122423][T16359] usb 6-1: Product: syz [ 980.126707][T16359] usb 6-1: Manufacturer: syz [ 980.151786][T16359] usb 6-1: SerialNumber: syz [ 980.184527][T16359] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 980.243878][T16359] scsi host1: usb-storage 6-1:1.0 [ 980.421055][T16359] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 980.477394][T16359] usb 6-1: USB disconnect, device number 90 [ 980.539411][T20728] UDC core: g1: couldn't find an available UDC or it's busy [ 980.871283][ T9733] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 981.522531][T16359] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 981.720425][ T9733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.733836][ T9733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.736477][T16359] usb 6-1: Using ep0 maxpacket: 8 [ 981.745455][ T9733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 981.762362][ T9733] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.773482][ T9733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.786845][T16359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 981.801756][ T9733] usb 5-1: config 0 descriptor?? [ 981.806245][T16359] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 981.808186][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 981.825935][T16359] usb 6-1: can't read configurations, error -71 [ 982.265301][ T9733] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 982.280834][ T9733] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 982.289695][ T9733] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 982.298562][ T9733] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 982.309053][ T9733] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 982.334651][ T9733] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 982.390729][T20746] fuse: Invalid rootmode [ 982.867784][T20758] UDC core: g1: couldn't find an available UDC or it's busy [ 982.982473][T16359] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 983.039888][T20762] FAULT_INJECTION: forcing a failure. [ 983.039888][T20762] name fail_futex, interval 1, probability 0, space 0, times 0 [ 983.054479][T20762] CPU: 0 PID: 20762 Comm: syz.1.4608 Not tainted syzkaller #0 [ 983.062127][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 983.072304][T20762] Call Trace: [ 983.075702][T20762] [ 983.078656][T20762] dump_stack_lvl+0x18c/0x250 [ 983.083463][T20762] ? show_regs_print_info+0x20/0x20 [ 983.088791][T20762] ? load_image+0x420/0x420 [ 983.093558][T20762] ? stack_trace_save+0xaa/0x100 [ 983.098556][T20762] should_fail_ex+0x394/0x4c0 [ 983.103291][T20762] get_futex_key+0x136/0x1030 [ 983.108019][T20762] ? futex_setup_timer+0xc0/0xc0 [ 983.113095][T20762] futex_wake+0x127/0x4f0 [ 983.117499][T20762] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 983.123644][T20762] ? futex_wake_mark+0x150/0x150 [ 983.128629][T20762] ? lockdep_hardirqs_on+0x98/0x150 [ 983.133872][T20762] do_futex+0x35d/0x3e0 [ 983.138068][T20762] ? __ia32_sys_get_robust_list+0x110/0x110 [ 983.144103][T20762] __se_sys_futex+0x3a9/0x440 [ 983.148832][T20762] ? __x64_sys_futex+0xf0/0xf0 [ 983.153976][T20762] ? __x64_sys_futex+0x21/0xf0 [ 983.158782][T20762] do_syscall_64+0x55/0xb0 [ 983.163224][T20762] ? clear_bhb_loop+0x40/0x90 [ 983.167932][T20762] ? clear_bhb_loop+0x40/0x90 [ 983.172645][T20762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.178576][T20762] RIP: 0033:0x7ff32b79e559 [ 983.183562][T20762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.203408][T20762] RSP: 002b:00007ff32c6610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 983.211861][T20762] RAX: ffffffffffffffda RBX: 00007ff32ba25fa8 RCX: 00007ff32b79e559 [ 983.219855][T20762] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff32ba25fac [ 983.227930][T20762] RBP: 00007ff32ba25fa0 R08: 00000000007459fa R09: 0000000000000000 [ 983.235919][T20762] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 983.243915][T20762] R13: 00007ff32ba26038 R14: 00007ffc67b55fd0 R15: 00007ffc67b560b8 [ 983.252189][T20762] [ 983.370151][T16359] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 983.382089][T16359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.390459][T16359] usb 6-1: Product: syz [ 983.394919][T16359] usb 6-1: Manufacturer: syz [ 983.399595][T16359] usb 6-1: SerialNumber: syz [ 983.414149][T16359] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 983.441964][T16359] scsi host1: usb-storage 6-1:1.0 [ 983.943036][T16359] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 984.279904][T19440] usb 6-1: USB disconnect, device number 92 [ 986.172935][ T5765] usb 5-1: reset high-speed USB device number 82 using dummy_hcd [ 986.181634][ T5765] usb 5-1: device reset changed ep0 maxpacket size! [ 986.213806][ T9729] usb 5-1: USB disconnect, device number 82 [ 988.662671][ T9729] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 989.387573][T20787] UDC core: g1: couldn't find an available UDC or it's busy [ 990.527030][T19440] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 993.482832][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.502748][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.612646][T19440] usb 6-1: device descriptor read/all, error -71 [ 999.102602][ T5765] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 999.322499][ T5765] usb 5-1: Using ep0 maxpacket: 8 [ 999.339040][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 999.361765][ T5765] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 999.381657][ T5765] usb 5-1: config 0 has no interface number 0 [ 999.393322][ T5765] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 999.428065][ T5765] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 999.457759][ T5765] usb 5-1: config 0 interface 88 has no altsetting 0 [ 999.475451][ T5765] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 999.490604][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 999.508010][ T5765] usb 5-1: Product: syz [ 999.517266][ T5765] usb 5-1: Manufacturer: syz [ 999.534882][ T5765] usb 5-1: SerialNumber: syz [ 999.562078][ T5765] usb 5-1: config 0 descriptor?? [ 999.604285][ T5765] usb 5-1: can't set config #0, error -71 [ 999.643500][ T5765] usb 5-1: USB disconnect, device number 84 [ 999.798672][T20822] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4623'. [ 1000.474706][T20832] UDC core: g1: couldn't find an available UDC or it's busy [ 1000.512623][T19440] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1000.928848][T19440] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1000.939242][T19440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.948548][T19440] usb 2-1: Product: syz [ 1000.953531][T19440] usb 2-1: Manufacturer: syz [ 1000.958567][T19440] usb 2-1: SerialNumber: syz [ 1000.968991][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4632'. [ 1000.983152][T19440] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 1001.001853][T19440] scsi host1: usb-storage 2-1:1.0 [ 1001.467324][T19440] ums_eneub6250: probe of 2-1:1.0 failed with error 3 [ 1001.624870][T20847] tipc: Enabled bearer , priority 0 [ 1001.641768][T20847] tipc: Resetting bearer [ 1001.659308][T20846] tipc: Disabling bearer [ 1001.815166][T16359] usb 2-1: USB disconnect, device number 93 [ 1001.922404][ T5765] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1002.102396][ T5765] usb 6-1: Using ep0 maxpacket: 8 [ 1002.111661][ T5765] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1002.129970][ T5765] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1002.138488][ T5765] usb 6-1: config 0 has no interface number 0 [ 1002.149391][ T5765] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1002.160575][ T5765] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1002.170571][ T5765] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1002.180345][ T5765] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1002.189688][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1002.200017][ T5765] usb 6-1: Product: syz [ 1002.205758][ T5765] usb 6-1: Manufacturer: syz [ 1002.210474][ T5765] usb 6-1: SerialNumber: syz [ 1002.218176][ T5765] usb 6-1: config 0 descriptor?? [ 1002.456304][ T5765] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input35 [ 1002.486230][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1002.495820][ T5765] usb 6-1: USB disconnect, device number 95 [ 1002.529553][T20853] bond0: entered promiscuous mode [ 1002.555545][T20853] bond_slave_0: entered promiscuous mode [ 1002.561521][T20853] bond_slave_1: entered promiscuous mode [ 1002.584680][T20853] gretap0: entered promiscuous mode [ 1002.593334][T20853] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1002.601047][T20853] Cannot create hsr debugfs directory [ 1002.638898][T20853] hsr1: entered promiscuous mode [ 1002.939972][T20863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4642'. [ 1002.949900][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4642'. [ 1007.165111][T20876] zram: Cannot change disksize for initialized device [ 1007.351406][T20878] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4648'. [ 1009.648048][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4652'. [ 1009.659391][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4652'. [ 1010.032413][ T5765] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1010.665632][T20901] autofs4:pid:20901:autofs_fill_super: called with bogus options [ 1012.494321][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.512388][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.522209][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1012.568039][ T5765] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1012.592355][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.617882][ T5765] usb 6-1: config 0 descriptor?? [ 1012.862500][ T5765] usbhid 6-1:0.0: can't add hid device: -71 [ 1012.868644][ T5765] usbhid: probe of 6-1:0.0 failed with error -71 [ 1012.929325][ T5765] usb 6-1: USB disconnect, device number 96 [ 1014.392509][T16359] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1014.594678][T16359] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1014.631142][T16359] usb 5-1: config 0 has no interface number 0 [ 1014.655967][T16359] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1014.691136][T20927] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1014.735538][T16359] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1014.782401][T16359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.844884][T16359] usb 5-1: Product: syz [ 1014.867366][T16359] usb 5-1: Manufacturer: syz [ 1014.902511][T16359] usb 5-1: SerialNumber: syz [ 1014.920887][T16359] usb 5-1: config 0 descriptor?? [ 1014.964946][T16359] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1014.996078][T20931] fuse: Unknown parameter 'use00000000000000000000' [ 1015.217143][T17271] usb 5-1: USB disconnect, device number 85 [ 1015.247719][T17271] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1016.555748][T20943] autofs4:pid:20943:autofs_fill_super: called with bogus options [ 1018.402827][T16360] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1018.551648][T20950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1018.601691][T20952] tipc: Started in network mode [ 1018.617741][T20952] tipc: Node identity b2615b8dd5ab, cluster identity 4711 [ 1018.642885][T20952] tipc: Enabled bearer , priority 0 [ 1018.668190][T20952] tipc: Resetting bearer [ 1018.714313][T20951] tipc: Disabling bearer [ 1019.090840][T20961] netlink: 'syz.1.4674': attribute type 8 has an invalid length. [ 1019.122617][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4674'. [ 1019.353510][T20965] fuse: Unknown parameter 'use00000000000000000000' [ 1020.755589][T20976] autofs4:pid:20976:autofs_fill_super: called with bogus options [ 1022.633319][T16360] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1022.686731][T20980] tipc: Enabled bearer , priority 0 [ 1022.720481][T20980] tipc: Resetting bearer [ 1022.775237][T20979] tipc: Disabling bearer [ 1022.835542][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.852425][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.872851][T16360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1022.922830][T16360] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.957721][T16360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.988141][T16360] usb 2-1: config 0 descriptor?? [ 1023.197027][T16360] usbhid 2-1:0.0: can't add hid device: -71 [ 1023.234077][T16360] usbhid: probe of 2-1:0.0 failed with error -71 [ 1023.359021][T16360] usb 2-1: USB disconnect, device number 94 [ 1023.698584][T20992] tipc: Enabled bearer , priority 0 [ 1023.903240][T20989] tipc: Resetting bearer [ 1024.144699][T20987] tipc: Disabling bearer [ 1024.489779][T21001] fuse: Unknown parameter 'user_i00000000000000000000' [ 1024.572486][ T5765] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1024.752127][T21008] vlan1: entered allmulticast mode [ 1024.767687][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 1024.783739][T21008] veth0_vlan: entered allmulticast mode [ 1024.797918][ T5765] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1024.847527][ T5765] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1024.882044][ T5765] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1024.914564][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.946465][ T5765] usb 2-1: Product: syz [ 1024.950713][ T5765] usb 2-1: Manufacturer: syz [ 1024.979145][ T5765] usb 2-1: SerialNumber: syz [ 1025.023574][ T5765] usb 2-1: config 0 descriptor?? [ 1025.737634][ T5765] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 1026.156612][T21020] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1026.172676][ T5765] rc_core: IR keymap rc-imon-pad not found [ 1026.204634][ T5765] Registered IR keymap rc-empty [ 1026.209654][ T5765] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1026.261614][ T5765] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1026.314809][ T5765] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1026.345523][ T5765] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 1026.356869][ T9736] infiniband s`z1: ib_query_port failed (-19) [ 1026.382182][ T5765] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:95> initialized [ 1026.401267][T21020] siw: device registration error -19 [ 1026.640247][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1026.654374][ T5765] usb 2-1: USB disconnect, device number 95 [ 1026.872878][T17271] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1027.065689][T17271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.090719][T17271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.102264][T17271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1027.115106][T17271] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1027.125961][T17271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.147906][T17271] usb 5-1: config 0 descriptor?? [ 1027.187067][T21029] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4693'. [ 1027.408286][T21032] tipc: Enabled bearer , priority 0 [ 1027.447965][T21032] syzkaller0: entered promiscuous mode [ 1027.454201][T21032] syzkaller0: entered allmulticast mode [ 1027.494100][T21031] tipc: Resetting bearer [ 1027.595919][T21031] tipc: Disabling bearer [ 1027.624685][T17271] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1027.636817][T17271] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1027.646382][T17271] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1027.655925][T17271] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1027.665964][T17271] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 1027.687466][T17271] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1028.063904][T21037] fuse: Unknown parameter 'user_i00000000000000000000' [ 1029.676727][ T27] audit: type=1326 audit(1792045865.395:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.5.4698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1029.793627][ T8] usb 5-1: USB disconnect, device number 86 [ 1031.686213][T21065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1031.727064][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1031.750690][T21068] tipc: Enabled bearer , priority 0 [ 1031.795086][T21068] syzkaller0: entered promiscuous mode [ 1031.826565][T21068] syzkaller0: entered allmulticast mode [ 1031.871123][T21067] tipc: Resetting bearer [ 1032.011997][T21067] tipc: Disabling bearer [ 1032.038315][T21072] fuse: Unknown parameter '0x0000000000000003' [ 1032.288764][T21074] fuse: Unknown parameter 'user_i00000000000000000000' [ 1032.861145][ T27] audit: type=1326 audit(1792045868.585:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.5.4712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1032.868946][T19440] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1033.875128][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1033.884531][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1033.997142][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.998328][T21095] fuse: Unknown parameter '0x0000000000000003' [ 1034.012388][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.036875][T21096] tipc: Enabled bearer , priority 0 [ 1034.038532][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1034.066080][T21096] syzkaller0: entered promiscuous mode [ 1034.069543][T19440] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1034.074701][T21096] syzkaller0: entered allmulticast mode [ 1034.099055][T19440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.111628][T21099] netlink: 'syz.4.4716': attribute type 8 has an invalid length. [ 1034.124842][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4716'. [ 1034.137788][T19440] usb 2-1: config 0 descriptor?? [ 1034.177391][T21093] tipc: Resetting bearer [ 1034.233957][T21093] tipc: Disabling bearer [ 1034.297560][T21101] fuse: Unknown parameter 'user_id00000000000000000000' [ 1034.583999][T19440] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1034.600365][T19440] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1034.609752][T19440] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1034.627654][T19440] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1034.708307][T19440] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 1034.772073][T19440] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1035.182363][ T27] audit: type=1326 audit(1792045870.905:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="syz.5.4722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1036.296789][T21121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4723'. [ 1036.604442][T21125] fuse: Unknown parameter '0x0000000000000003' [ 1036.816727][ T9736] usb 2-1: USB disconnect, device number 96 [ 1042.218230][ T27] audit: type=1326 audit(1792045877.945:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21145 comm="syz.4.4731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 1043.272979][T21154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1043.342760][T21131] netlink: 'syz.5.4727': attribute type 8 has an invalid length. [ 1043.351086][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4727'. [ 1043.462769][ T9736] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1043.530377][T21160] fuse: Unknown parameter 'fd0x0000000000000003' [ 1043.674399][ T9736] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 1045.406666][ T9736] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1045.425030][ T9736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.435503][ T9736] usb 2-1: config 0 has no interface number 0 [ 1045.441777][ T9736] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1045.452120][ T9736] usb 2-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1045.463565][ T9736] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1045.517687][ T9736] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1045.531882][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4736'. [ 1045.557856][ T9736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.881807][ T9736] usb 2-1: config 0 descriptor?? [ 1048.047019][ T9736] usb 2-1: can't set config #0, error -71 [ 1048.091722][ T9736] usb 2-1: USB disconnect, device number 97 [ 1048.412385][T21183] zram: Cannot change disksize for initialized device [ 1048.572770][ T9736] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1048.786811][ T9736] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1048.812478][ T9736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.820546][ T9736] usb 2-1: Product: syz [ 1048.842180][ T9736] usb 2-1: Manufacturer: syz [ 1048.847399][ T9736] usb 2-1: SerialNumber: syz [ 1048.868434][ T9736] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 1048.940754][ T9736] scsi host1: usb-storage 2-1:1.0 [ 1049.106732][T21193] netlink: 'syz.6.4744': attribute type 8 has an invalid length. [ 1049.115733][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4744'. [ 1049.136837][ T27] audit: type=1326 audit(1792045884.865:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.4.4740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 1049.537668][T21199] fuse: Unknown parameter 'fd0x0000000000000003' [ 1049.774979][ T9736] ums_eneub6250: probe of 2-1:1.0 failed with error 3 [ 1049.811796][ T9736] usb 2-1: USB disconnect, device number 98 [ 1049.981878][T21204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1049.995443][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1050.625507][T21207] autofs4:pid:21207:autofs_fill_super: called with bogus options [ 1052.636731][T21212] zram: Cannot change disksize for initialized device [ 1055.060499][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.068085][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.436503][ T27] audit: type=1326 audit(1792045891.155:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21220 comm="syz.1.4756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b79e559 code=0x0 [ 1056.327510][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1056.352744][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1056.361769][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1057.031750][T21240] fuse: Unknown parameter 'fd0x0000000000000003' [ 1057.116815][T21244] netlink: 'syz.4.4761': attribute type 8 has an invalid length. [ 1057.127785][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1059.909002][T21256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4766'. [ 1059.931634][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4766'. [ 1069.188789][ T27] audit: type=1326 audit(1792045904.915:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21292 comm="syz.1.4778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b79e559 code=0x0 [ 1076.099636][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4789'. [ 1076.703347][T21320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.711071][T21320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.357389][ T27] audit: type=1326 audit(1792045918.085:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.5.4793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1082.661748][T21320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.756936][T21320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.130767][T21320] vlan1: left allmulticast mode [ 1083.155262][T21320] veth0_vlan: left allmulticast mode [ 1084.007046][T21320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.067664][T21320] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.088727][T21320] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.118655][T21320] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.413565][T21320] hsr1: left promiscuous mode [ 1087.377688][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1087.891541][T21377] rxe_eth0 speed is unknown, defaulting to 1000 [ 1087.983556][ T9729] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1088.182531][ T9729] usb 6-1: Using ep0 maxpacket: 8 [ 1088.215565][ T9729] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1088.241947][ T9729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1088.252520][ T9729] usb 6-1: Product: syz [ 1088.271728][ T9729] usb 6-1: Manufacturer: syz [ 1088.286503][ T9729] usb 6-1: SerialNumber: syz [ 1088.315022][ T9729] usb 6-1: config 0 descriptor?? [ 1088.340571][ T9729] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1088.763259][ T9729] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1088.792884][ T9729] sq905: probe of 6-1:0.0 failed with error -71 [ 1088.833265][ T9729] usb 6-1: USB disconnect, device number 98 [ 1091.512218][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 1091.787311][ T27] audit: type=1326 audit(1792045927.515:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21406 comm="syz.6.4811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26f99e559 code=0x0 [ 1092.365491][T21410] autofs4:pid:21410:autofs_fill_super: called with bogus options [ 1098.381837][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1098.672611][T19440] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1098.877376][T19440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.902543][T19440] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1098.938691][T19440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.980963][T19440] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1099.003205][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1099.029033][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1099.047487][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1099.062823][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1099.085075][T19440] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1099.135101][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1099.163356][T19440] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1099.213170][T19440] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1099.377600][T21454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1099.456411][T21457] IPVS: Scheduler module ip_vs_mh not found [ 1099.466255][T21459] IPVS: length: 4096 != 24 [ 1099.472629][T19440] usb 2-1: USB disconnect, device number 99 [ 1099.496389][T19440] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1099.541178][T19440] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1099.604432][T19440] keyspan 2-1:1.0: device disconnected [ 1104.117804][T21490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1104.620112][T21496] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1111.710778][T21532] vlan1: entered allmulticast mode [ 1111.716088][T21532] veth0_vlan: entered allmulticast mode [ 1116.212995][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.220521][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.067011][T21559] autofs4:pid:21559:autofs_fill_super: called with bogus options [ 1118.637636][T21569] IPVS: length: 4096 != 24 [ 1120.721103][T21592] autofs4:pid:21592:autofs_fill_super: called with bogus options [ 1126.272349][ T27] audit: type=1326 audit(1792045961.962:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21614 comm="syz.4.4871" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 1127.182886][T21625] autofs4:pid:21625:autofs_fill_super: called with bogus options [ 1130.507381][T17271] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1130.605955][T17271] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1130.832580][ T9729] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1131.042663][ T9729] usb 6-1: Using ep0 maxpacket: 16 [ 1131.061665][ T9729] usb 6-1: config 0 has no interfaces? [ 1131.081291][ T9729] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1131.112558][ T9729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1131.122551][ T9729] usb 6-1: SerialNumber: syz [ 1131.158563][ T9729] usb 6-1: config 0 descriptor?? [ 1132.433696][T21655] zram: Cannot change disksize for initialized device [ 1133.327191][ T9865] usb 6-1: USB disconnect, device number 99 [ 1133.562712][ T27] audit: type=1326 audit(1792045969.282:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.4.4889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 1133.846898][T21671] autofs4:pid:21671:autofs_fill_super: called with bogus options [ 1137.317719][T21686] netlink: 'syz.6.4894': attribute type 8 has an invalid length. [ 1137.327144][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1138.154249][T21695] zram: Cannot change disksize for initialized device [ 1140.473960][T21701] autofs4:pid:21701:autofs_fill_super: called with bogus options [ 1143.148576][T21718] netlink: 'syz.1.4904': attribute type 5 has an invalid length. [ 1143.708686][T21729] netlink: 'syz.1.4906': attribute type 8 has an invalid length. [ 1143.736841][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4906'. [ 1143.832532][T17271] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1144.066173][T17271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.092646][T17271] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1144.128470][T17271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.150812][T17271] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1144.193548][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1144.224284][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1144.269137][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1144.293155][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1144.355944][T17271] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1144.426067][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1144.482530][T17271] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1144.516120][T17271] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1144.552556][T17271] usb 5-1: USB disconnect, device number 87 [ 1144.587665][T17271] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1144.674230][T17271] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1144.728228][T17271] keyspan 5-1:1.0: device disconnected [ 1144.763858][T16360] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1148.624702][T21768] sctp: [Deprecated]: syz.1.4916 (pid 21768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.624702][T21768] Use struct sctp_sack_info instead [ 1150.312692][ T9733] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1151.322787][T21784] autofs4:pid:21784:autofs_fill_super: called with bogus options [ 1152.056655][ T9733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.095518][ T9733] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1152.108224][ T9733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.132612][ T9733] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1152.141792][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1152.173121][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1152.189234][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1152.228626][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1152.230182][T21791] syzkaller0: entered promiscuous mode [ 1152.262517][ T9733] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1152.295870][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1152.306720][T21791] syzkaller0: entered allmulticast mode [ 1152.344270][T21793] tipc: Enabled bearer , priority 0 [ 1152.349809][ T9733] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1152.381885][ T9733] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1152.402556][ T9733] usb 2-1: USB disconnect, device number 101 [ 1152.443535][ T9733] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1152.495787][T21791] tipc: Resetting bearer [ 1152.536916][ T9733] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1152.560385][ T9733] keyspan 2-1:1.0: device disconnected [ 1152.571035][T21790] tipc: Resetting bearer [ 1152.705643][T21790] tipc: Disabling bearer [ 1155.312752][T21818] autofs4:pid:21818:autofs_fill_super: called with bogus options [ 1155.804435][ T9736] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1156.248551][ T9736] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 1156.260150][ T9736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.273610][ T9736] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1156.286322][ T9736] usb 5-1: config 1 has no interface number 2 [ 1156.293999][ T9736] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1156.781292][ T9736] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1156.992625][ T9736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.052521][ T9736] usb 5-1: Product: syz [ 1157.077134][ T9736] usb 5-1: Manufacturer: syz [ 1157.081795][ T9736] usb 5-1: SerialNumber: syz [ 1157.210569][ T9736] usb 5-1: can't set config #1, error -71 [ 1157.260145][ T9736] usb 5-1: USB disconnect, device number 88 [ 1157.269408][T21831] syzkaller0: entered promiscuous mode [ 1157.307766][T21831] syzkaller0: entered allmulticast mode [ 1157.368601][T21831] tipc: Enabled bearer , priority 0 [ 1157.486211][T21833] tipc: Resetting bearer [ 1157.556440][T21829] tipc: Resetting bearer [ 1157.648126][T21829] tipc: Disabling bearer [ 1158.022483][ T27] audit: type=1326 audit(1792045993.742:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21838 comm="syz.5.4937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1159.262396][T21328] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1159.469322][T21328] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1159.485567][T21328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.508512][T21328] usb 6-1: Product: syz [ 1159.515916][T21328] usb 6-1: Manufacturer: syz [ 1159.525514][T21328] usb 6-1: SerialNumber: syz [ 1159.558265][T21328] ums-karma 6-1:1.0: USB Mass Storage device detected [ 1159.588388][T21328] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1159.588388][T21328] Please send a copy of this message to and [ 1159.832756][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1160.044146][T21328] scsi host1: usb-storage 6-1:1.0 [ 1160.053815][T21869] syzkaller0: entered promiscuous mode [ 1160.059403][T21869] syzkaller0: entered allmulticast mode [ 1160.118447][T21869] tipc: Enabled bearer , priority 0 [ 1162.574216][T21879] tipc: Resetting bearer [ 1162.643875][T16360] tipc: Node number set to 3112458515 [ 1162.673792][T21868] tipc: Resetting bearer [ 1162.722027][T21868] tipc: Disabling bearer [ 1162.799310][ T27] audit: type=1326 audit(1792045998.522:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21882 comm="syz.1.4952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b79e559 code=0x0 [ 1163.182586][T21870] usb 6-1: reset high-speed USB device number 100 using dummy_hcd [ 1164.109841][T21870] usb 6-1: device firmware changed [ 1164.130964][ T9865] usb 6-1: USB disconnect, device number 100 [ 1166.908141][ T9865] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1167.164074][T21906] IPVS: length: 4096 != 24 [ 1170.452707][ T27] audit: type=1326 audit(1792046006.172:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21916 comm="syz.4.4962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda80f9e559 code=0x0 [ 1170.992813][ T9865] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1171.208934][ T9865] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1171.245833][ T9865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.302660][ T9865] usb 6-1: Product: syz [ 1171.317570][ T9865] usb 6-1: Manufacturer: syz [ 1171.343446][ T9865] usb 6-1: SerialNumber: syz [ 1171.814343][ T9865] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1172.095550][T21937] syzkaller0: entered promiscuous mode [ 1172.103012][T21937] syzkaller0: entered allmulticast mode [ 1172.121339][T21937] tipc: Enabled bearer , priority 0 [ 1172.243471][T21941] tipc: Resetting bearer [ 1172.308138][T21933] tipc: Resetting bearer [ 1172.351477][T21933] tipc: Disabling bearer [ 1176.101217][T21328] usb 6-1: USB disconnect, device number 102 [ 1176.184605][T21914] usblp0: removed [ 1176.453454][ T27] audit: type=1326 audit(1792046012.182:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21958 comm="syz.5.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5719e559 code=0x0 [ 1177.124139][T21969] syzkaller0: entered promiscuous mode [ 1177.136821][T21969] syzkaller0: entered allmulticast mode [ 1177.226317][T21969] tipc: Enabled bearer , priority 0 [ 1177.379435][T21970] tipc: Resetting bearer [ 1177.720712][T21977] zram: Cannot change disksize for initialized device [ 1177.853145][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.859531][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.909005][T21968] tipc: Resetting bearer [ 1178.645180][T21968] tipc: Disabling bearer [ 1178.659722][T17271] tipc: Node number set to 3243351032 [ 1181.953316][T21985] netlink: 'syz.6.4982': attribute type 8 has an invalid length. [ 1182.002735][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4982'. [ 1183.341481][T22009] syzkaller0: entered promiscuous mode [ 1183.347995][T22009] syzkaller0: entered allmulticast mode [ 1183.361248][T22009] tipc: Enabled bearer , priority 0 [ 1183.413994][T22009] tipc: Resetting bearer [ 1183.434102][T22008] tipc: Resetting bearer [ 1183.524496][T22012] zram: Cannot change disksize for initialized device [ 1183.550750][T22008] tipc: Disabling bearer [ 1184.849623][T22035] syzkaller0: entered promiscuous mode [ 1184.856907][T22035] syzkaller0: entered allmulticast mode [ 1184.900487][T22035] tipc: Enabled bearer , priority 0 [ 1184.976424][T22035] tipc: Resetting bearer [ 1185.033070][T22034] tipc: Resetting bearer [ 1185.077569][T22034] tipc: Disabling bearer [ 1186.602876][T22066] syzkaller0: entered promiscuous mode [ 1186.609913][T22066] syzkaller0: entered allmulticast mode [ 1186.642920][T22066] tipc: Enabled bearer , priority 0 [ 1186.660099][T22068] netlink: 'syz.4.5014': attribute type 10 has an invalid length. [ 1186.728152][T22068] bridge_slave_0: left allmulticast mode [ 1186.758910][T22068] bridge_slave_0: left promiscuous mode [ 1186.768316][T22068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.980765][T19440] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1187.534232][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.594003][T19440] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1187.676814][T19440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.337402][T22068] bridge_slave_1: left allmulticast mode [ 1188.343257][T22068] bridge_slave_1: left promiscuous mode [ 1188.349626][T22068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.351718][T19440] usb 2-1: config 0 descriptor?? [ 1188.372613][T22068] bond0: (slave bond_slave_0): Releasing backup interface [ 1188.391846][T22068] bond_slave_0: left promiscuous mode [ 1188.419758][T22068] bond0: (slave bond_slave_1): Releasing backup interface [ 1188.430018][T22068] bond_slave_1: left promiscuous mode [ 1188.444732][T22068] team_slave_0: left promiscuous mode [ 1188.517174][T22068] team0: Port device team_slave_0 removed [ 1188.526629][T22068] team_slave_1: left promiscuous mode [ 1188.545054][T22068] team0: Port device team_slave_1 removed [ 1188.558501][T22068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.568291][T22068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.578264][T22068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.586885][T22068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.617376][T19440] usbhid 2-1:0.0: can't add hid device: -71 [ 1188.618626][T22066] tipc: Resetting bearer [ 1188.626124][T19440] usbhid: probe of 2-1:0.0 failed with error -71 [ 1188.645362][T19440] usb 2-1: USB disconnect, device number 102 [ 1188.724315][T22065] tipc: Resetting bearer [ 1188.844363][T22065] tipc: Disabling bearer [ 1189.284283][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5019'. [ 1189.292875][T19440] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1189.557652][T22098] block2mtd: erasesize must be a divisor of device size [ 1189.653540][T22098] ------------[ cut here ]------------ [ 1189.660542][T22098] WARNING: CPU: 0 PID: 22098 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 1189.670141][T22098] Modules linked in: [ 1189.674341][T22098] CPU: 0 PID: 22098 Comm: syz.6.5021 Not tainted syzkaller #0 [ 1189.681844][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.693198][T22098] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 1189.699161][T22098] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 1189.720600][T22098] RSP: 0018:ffffc9000e757970 EFLAGS: 00010283 [ 1189.729912][T22098] RAX: ffffffff8414df7c RBX: ffff88814885af00 RCX: 0000000000080000 [ 1189.739036][T22098] RDX: ffffc9000fed9000 RSI: 000000000001120a RDI: 000000000001120b [ 1189.747620][T22098] RBP: 0000000000000002 R08: ffff88814885af3b R09: 1ffff1102910b5e7 [ 1189.756170][T22098] R10: dffffc0000000000 R11: ffffed102910b5e8 R12: dffffc0000000000 [ 1189.764788][T22098] R13: dffffc0000000000 R14: ffff88814885b034 R15: ffff88814885af38 [ 1189.773494][T22098] FS: 00007ff2708a86c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1189.783753][T22098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1189.791353][T22098] CR2: 00007f85f25cff50 CR3: 000000005e73f000 CR4: 00000000003506f0 [ 1189.801014][T22098] Call Trace: [ 1189.804434][T22098] [ 1189.807410][T22098] ? blkdev_put+0x492/0x7a0 [ 1189.812060][T22098] blkdev_put+0x49a/0x7a0 [ 1189.816601][T22098] block2mtd_setup2+0x98f/0xe30 [ 1189.821815][T22098] ? block2mtd_setup+0xd0/0xd0 [ 1189.826747][T22098] ? rcu_is_watching+0x15/0xb0 [ 1189.832201][T22098] ? mutex_lock_nested+0x20/0x20 [ 1189.837535][T22098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1189.843728][T22098] block2mtd_setup+0x27/0xd0 [ 1189.848373][T22098] param_attr_store+0x20e/0x300 [ 1189.853759][T22098] ? param_attr_show+0x170/0x170 [ 1189.853947][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.858732][T22098] ? sysfs_kf_read+0x360/0x360 [ 1189.858839][T22098] module_attr_store+0x5f/0x80 [ 1189.858870][T22098] kernfs_fop_write_iter+0x3a4/0x520 [ 1189.858902][T22098] vfs_write+0x474/0x9a0 [ 1189.858942][T22098] ? file_end_write+0x250/0x250 [ 1189.858986][T22098] ? __fget_files+0x3fc/0x460 [ 1189.859028][T22098] ? __fdget_pos+0x2a3/0x330 [ 1189.859057][T22098] ? ksys_write+0x74/0x260 [ 1189.859091][T22098] ksys_write+0x151/0x260 [ 1189.859126][T22098] ? __ia32_sys_read+0x90/0x90 [ 1189.859164][T22098] ? lockdep_hardirqs_on+0x98/0x150 [ 1189.859198][T22098] do_syscall_64+0x55/0xb0 [ 1189.859218][T22098] ? clear_bhb_loop+0x40/0x90 [ 1189.859241][T22098] ? clear_bhb_loop+0x40/0x90 [ 1189.859267][T22098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.859300][T22098] RIP: 0033:0x7ff26f99e559 [ 1189.859324][T22098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.859344][T22098] RSP: 002b:00007ff2708a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.859372][T22098] RAX: ffffffffffffffda RBX: 00007ff26fc26090 RCX: 00007ff26f99e559 [ 1189.859391][T22098] RDX: 000000000000000d RSI: 0000200000000380 RDI: 0000000000000007 [ 1189.859408][T22098] RBP: 00007ff26fa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.859424][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.859439][T22098] R13: 00007ff26fc26128 R14: 00007ff26fc26090 R15: 00007fff51a996e8 [ 1189.859480][T22098] [ 1189.859493][T22098] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1189.859505][T22098] CPU: 0 PID: 22098 Comm: syz.6.5021 Not tainted syzkaller #0 [ 1189.859525][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.859538][T22098] Call Trace: [ 1189.859547][T22098] [ 1189.859555][T22098] dump_stack_lvl+0x18c/0x250 [ 1189.859580][T22098] ? show_regs_print_info+0x20/0x20 [ 1189.859601][T22098] ? load_image+0x420/0x420 [ 1189.859643][T22098] panic+0x2ca/0x720 [ 1189.859670][T22098] ? bpf_jit_dump+0xd0/0xd0 [ 1189.859706][T22098] __warn+0x2e0/0x470 [ 1189.859726][T22098] ? blkdev_flush_mapping+0xac/0x290 [ 1189.859753][T22098] ? blkdev_flush_mapping+0xac/0x290 [ 1189.859776][T22098] report_bug+0x2be/0x4f0 [ 1189.859895][T22098] ? blkdev_flush_mapping+0xac/0x290 [ 1189.859920][T22098] ? blkdev_flush_mapping+0xac/0x290 [ 1189.859943][T22098] ? blkdev_flush_mapping+0xae/0x290 [ 1189.859966][T22098] handle_bug+0xcf/0x120 [ 1189.859996][T22098] exc_invalid_op+0x1a/0x50 [ 1189.860017][T22098] asm_exc_invalid_op+0x1a/0x20 [ 1189.860035][T22098] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 1189.860059][T22098] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 1189.860076][T22098] RSP: 0018:ffffc9000e757970 EFLAGS: 00010283 [ 1189.860095][T22098] RAX: ffffffff8414df7c RBX: ffff88814885af00 RCX: 0000000000080000 [ 1189.860109][T22098] RDX: ffffc9000fed9000 RSI: 000000000001120a RDI: 000000000001120b [ 1189.860123][T22098] RBP: 0000000000000002 R08: ffff88814885af3b R09: 1ffff1102910b5e7 [ 1189.860137][T22098] R10: dffffc0000000000 R11: ffffed102910b5e8 R12: dffffc0000000000 [ 1189.860152][T22098] R13: dffffc0000000000 R14: ffff88814885b034 R15: ffff88814885af38 [ 1189.860176][T22098] ? blkdev_flush_mapping+0xac/0x290 [ 1189.860206][T22098] ? blkdev_put+0x492/0x7a0 [ 1189.860231][T22098] blkdev_put+0x49a/0x7a0 [ 1189.860258][T22098] block2mtd_setup2+0x98f/0xe30 [ 1189.860289][T22098] ? block2mtd_setup+0xd0/0xd0 [ 1189.860311][T22098] ? rcu_is_watching+0x15/0xb0 [ 1189.860357][T22098] ? mutex_lock_nested+0x20/0x20 [ 1189.860382][T22098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1189.860416][T22098] block2mtd_setup+0x27/0xd0 [ 1189.860438][T22098] param_attr_store+0x20e/0x300 [ 1189.860461][T22098] ? param_attr_show+0x170/0x170 [ 1189.860479][T22098] ? sysfs_kf_read+0x360/0x360 [ 1189.860498][T22098] module_attr_store+0x5f/0x80 [ 1189.860520][T22098] kernfs_fop_write_iter+0x3a4/0x520 [ 1189.860546][T22098] vfs_write+0x474/0x9a0 [ 1189.860579][T22098] ? file_end_write+0x250/0x250 [ 1189.860620][T22098] ? __fget_files+0x3fc/0x460 [ 1189.860662][T22098] ? __fdget_pos+0x2a3/0x330 [ 1189.860686][T22098] ? ksys_write+0x74/0x260 [ 1189.860716][T22098] ksys_write+0x151/0x260 [ 1189.860745][T22098] ? __ia32_sys_read+0x90/0x90 [ 1189.860777][T22098] ? lockdep_hardirqs_on+0x98/0x150 [ 1189.860803][T22098] do_syscall_64+0x55/0xb0 [ 1189.860821][T22098] ? clear_bhb_loop+0x40/0x90 [ 1189.860839][T22098] ? clear_bhb_loop+0x40/0x90 [ 1189.860861][T22098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.860889][T22098] RIP: 0033:0x7ff26f99e559 [ 1189.860907][T22098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.860923][T22098] RSP: 002b:00007ff2708a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.860943][T22098] RAX: ffffffffffffffda RBX: 00007ff26fc26090 RCX: 00007ff26f99e559 [ 1189.860958][T22098] RDX: 000000000000000d RSI: 0000200000000380 RDI: 0000000000000007 [ 1189.860977][T22098] RBP: 00007ff26fa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.860990][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.861002][T22098] R13: 00007ff26fc26128 R14: 00007ff26fc26090 R15: 00007fff51a996e8 [ 1189.861034][T22098] [ 1189.871042][T22098] Kernel Offset: disabled