last executing test programs: 11m16.321501583s ago: executing program 1 (id=520): keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x208011, 0x0) 11m16.20773254s ago: executing program 1 (id=522): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000b06010200000000e0ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m15.571032794s ago: executing program 1 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 11m15.322204103s ago: executing program 1 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000000000000100"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000b06010200000000e0ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m14.970777906s ago: executing program 1 (id=533): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) (async) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='\x00', 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x18d002, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) (async) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r3, 0x3b, &(0x7f0000000140)={0x3b, 0x7fb, 0x1}, 0x0) syz_usb_connect(0x2, 0x601, &(0x7f00000006c0)={{0x12, 0x1, 0x510, 0x96, 0x21, 0xb8, 0x20, 0x1b3d, 0x10a, 0x22ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ef, 0x2, 0x7, 0x2, 0xf0, 0x40, "", [{{0x9, 0x4, 0x43, 0x3, 0xa, 0x5b, 0xb0, 0x44, 0x6, [], [{{0x9, 0x5, 0x8, 0x23, 0x8, 0x1, 0x0, 0xf}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0xc5, 0x1, 0x4, [@generic={0x4f, 0x7, "ed0bac4efd1ffa004241271763b9071b081d4752acfede5880b301eeea3ebace148c30afa01352fbb361721cc0662c3b217a5fb917c9f398f49c2c3e480fac3f3e0edd8fa2bb3d4088f9b011e4"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x400, 0xa9, 0x12, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @generic={0xf7, 0x2, "bec6d0ca816e48ad9cc655bbb2c30e6a4919ffdb7f4eeb5441f77e762ab11bfe3b7cfffb716ded51de74a97ceadca50d16451d3d7062a058489e4ab123e440a06a601fdf329846adcee25384bb45ddf52118088ea6315222802eff16d3a9666f022ffa10549e6ead8cf364d0c00dc71fdb0c9213576af1e6b23abbd7a1e6672a9bac779e49fb8e06cc2319dff92ee4c351573ffe15ed6fcba31d1febcd53de9726f98a5b8dc55e4b2f0248c1c76804a2a4fc3ba8f956b05acc03a9ca93813cb0ad16758c70332d5a06911d4591b3ad7ffcb14c152451cf8f072c361c46cff22a4ca6b43b5927750f4a7c6e26f2e5e2de2f8271ecad"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xc3, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}, @generic={0x2d, 0x7, "475f5562646d31a9d314f147dfc0d9f085d2706ec35c00ea027904f2ca03fd98ee98c413ae3dc20143d1bb"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xfe, 0x81, 0x80}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xb, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe2cd}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x74, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x6, 0x9, [@generic={0x7d, 0x30, "f55a406dc34204152b128dcf68eb60ac6eeb8daa5a9b6880d2750e8d82b11a68e8e887d9f87e72a26d90bf1c6d676b20a47274ee35f7b9fd565d5d8e0e592c2d32e2f9c10e8327ebc12026070820c40c1da087ec06fd6e74b27764c6f8f71a5e890e19a2982d8fddfa9d693b699fb7a858b7a0489ce62758455e8e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0x34, 0x3, 0x5, 0x38, 0xf1, 0xf0, 0xca, [@generic={0x69, 0x4, "ab9e7105854b6b962b1c22b4cf568c0d3c3f5cf0d8e37b91f6daa0e6ee48ae318728f71f96d1def6fdfcd93ea802be82016d33e944a3d57fa4376dc94211dd69a9b5ff2ce339a04f658d6ee5a159eaef653438d63a2342ddd9e3d3f0e9d7f09cb4c3ca20e86d20"}, @generic={0x71, 0xc, "abfab3e4e49f8d25b34350b0ffcf2c7f9fd88231f7801265a5c9f155885ed676c1b0e83b652d604de8d83671fc074aef804a9dd2bb4d8b5a1d6a870631a2ffa00ced0cd27e947ef2eb47c10a28810c128e0f1a397685cb111cb27578a798b4443d91a655d306d051069d3b8c82ba35"}], [{{0x9, 0x5, 0xc, 0x8, 0x0, 0x9, 0x7, 0x7, [@generic={0xcb, 0xa, "478020cbc3840721ddb02fdb0274bc8e8b3448c97b5ab66d25f0f7d9df901a552d16ae6e0998b1c027ab260216d4bccd1dc1926e2252926c8e5f879db5e1caa5e064330419e21b03fd651dedcc4343bef058c1cf411cb3b61465321a47d603e3f30d2b6a3fc87334f323f364445540cf2f154c119133f93cc51f5beb861da16ab9d7341964077d6e8447ab80218eafdecfa381bfd3b8ea507b41c79a6e5da3be347ec36adc8fb6e0ec89068dc7217694b436dc449359f82bb1ae1c111cb3eddba496662d7a96c19893"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x4, 0x7, [@generic={0x45, 0x4, "576514670ad4879a5894d56838ef6084d335256a2e029bcf6520a7b8ca8175968f2793a2fb6bd7ed1443616c1487464a1f8e6014492fd2fd85cd4fb6a57ed8196d0ab5"}, @generic={0x2a, 0x23, "25ddb9cc6226edaa51c552488871449fde6677b5edf2a232d5a9144b409cf732d4c7681f4c3f8154"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x2, 0x40, 0xff, [@generic={0x28, 0x1, "edbb456802a9ab53ee287f1849639f8d47795881ebb7f28a9fe0cf358010b78ead99b3fc4016"}, @generic={0xbd, 0x22, "f8663068f9a6647cc618e807858da55e3659869f494b121a24e74cd66daed460a093819103ab9446a6779316d5e64962d1cf73cd15617eadad9f604cf507596044d9a6a04476cf0c8238bc03df6c460a0a749488656654fdb6e24bcc95404eeb3a142adf7f5a1e3d9593914804a03b3ab0af147fbb983472e5d94ce85b1ae2cf7e32049c568f359c417fe1d045062f7a13ccb23627f2c35d76cce16189138c28899ac8a83c0723e68755651ccea5a692389f7f8866728c8b348d10"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x7, 0x9, [@generic={0xe, 0x5, "61d116f5d401c421bf5e4a1e"}, @generic={0x25, 0xc, "2190e608489a9d9f6d06f0d1fb160c83f4aa9bd904f2c4b34aa51cb12ab12fbd81277c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x1, 0x4, 0x1c}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x200, 0x6, 0x2, 0x3, 0x40, 0x6a}, 0xb8, &(0x7f0000000d40)={0x5, 0xf, 0xb8, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x1, 0x76ff, 0xe3}, @generic={0xa8, 0x10, 0xb, "f5d4d9a9af1587133bd9d747e5ad100401ae25470c902ab3befb9f1786f3428ec459ffe950f4d1a55b1de48cb070a0116926b3c3e9d28714d17fad9ea42dab14bb68e074ee54fb9ee5f13fa4a10bba0e085b3c78eb493e5090f7ba2564b296693d5c7208c09ec4c2d3999b5b3eebf570d8622ddd3b1d6105beba467225ca2c3914e5dae8605f0970a21090194575e4cdac82deb9c0aab3e036eb4f54781d3bcba7b6aa7623"}]}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1004}}, {0x64, &(0x7f0000000e80)=@string={0x64, 0x3, "5609360187913054fb7bce9f02327908a32d4c609641576e2136256008294a5497e0203b6c66ba59568d6c4e5446c9fb21fce2206df7758653f64e859950108b93a7bff84c09516a6d64609af19b16e893254ba58fea9e1358a59b741d207e210a4b"}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000580)={0x48, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x0, 0x21, 0x60, {0x60, 0xe, "57cf8b514c4c57ac40dea71849ae2e6faa321eda700feb969ce1c20180d7a7215a4dcd4499557279a637e98e67ffe7aa97918b72df9d0903192de962ffbad875adadcd337b7ac6d3b6f7e75e953089a0d1ae9ff65c74a49f8fc4e04beced"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x35, @string={0x35, 0x3, "456463339272dd3fd8bcd21f10561c36ddb999d90b519a2c05f17b7da6859ab9f9bfd0eb8d32253c3b484497319745721dd415"}}, &(0x7f0000001000)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x8000}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x62, 0x0, 0xab, 0x0, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x7fff000, 0xf00, 0x2, [0xc000, 0x30, 0x3f00, 0xffc000, 0x180f0, 0x30]}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x81, 0x9, "e2c274b0", "4c5bd75e"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf3, 0x60, 0x1, 0x3, 0x5, 0x1ff, 0x8}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x20, 0x3, 0x5f, "a950d470f70034f3b719c9e56f896f8f645476688578d415740c19c225ec6655541181dee70e271f92b5e322f7719f490ecb3570dc2dc1409e6d077f7b8b66b1c73a1f2a9f0e0d8e549c68e6f12c4043390db744fa7e1a67bd1c668fe7c183"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001340)={0x40, 0xb, 0x2, "0c94"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0xbf}, &(0x7f00000013c0)={0x40, 0x13, 0x6}, &(0x7f0000001400)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x19, 0x2, "2989"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000014c0)={0x40, 0x1c, 0x1}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x20, r4, 0x10, 0x0, 0xfffffffd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x200c084) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000002}) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0xff, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0xef, 0x0, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x2, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x3, 0x3c, 0xc4}, [@input_terminal={0x10, 0x24, 0x2, 0x4, 0x203, 0x5, 0x87, 0x9, 0x7, 0x6, 0x10, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x4, "be"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x403, 0x5, 0x6, 0xb, 0x81, 0x1, 0xbc}, @source_unit={0x8, 0x24, 0xa, 0x6, 0x1, 0x8f, 0x9, 0x1}, @selector_unit={0x5, 0x24, 0xb, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x0, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x7f, 0x4, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf9, 0x1, 0x81, {0x8, 0x25, 0x1, 0x80, 0x30, 0x80, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xfffb, 0x6, "ff0802fe67"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x10}, @as_header={0x10, 0x24, 0x1, 0x8, 0x0, 0x0, 0x1, 0x50, 0x6a3, 0x80}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0xd, 0xc, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x6, 0x9, {0x8, 0x25, 0x1, 0x80, 0x1, 0x8, 0x10}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x4, 0x0, 0x8, 0x8, 0x5}, 0x1a, &(0x7f0000000380)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x0, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x7, 0xd, 0x2}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x1d, &(0x7f0000000500)=@string={0x1d, 0x3, "3fb2f40dc3719872ccfa3edcfb5771ed857b8de448e654abfaa550"}}]}) (async) r8 = syz_usb_connect$uac2(0x1, 0xff, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0xef, 0x0, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x2, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x3, 0x3c, 0xc4}, [@input_terminal={0x10, 0x24, 0x2, 0x4, 0x203, 0x5, 0x87, 0x9, 0x7, 0x6, 0x10, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x4, "be"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x403, 0x5, 0x6, 0xb, 0x81, 0x1, 0xbc}, @source_unit={0x8, 0x24, 0xa, 0x6, 0x1, 0x8f, 0x9, 0x1}, @selector_unit={0x5, 0x24, 0xb, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x0, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x7f, 0x4, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf9, 0x1, 0x81, {0x8, 0x25, 0x1, 0x80, 0x30, 0x80, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xfffb, 0x6, "ff0802fe67"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x10}, @as_header={0x10, 0x24, 0x1, 0x8, 0x0, 0x0, 0x1, 0x50, 0x6a3, 0x80}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0xd, 0xc, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x6, 0x9, {0x8, 0x25, 0x1, 0x80, 0x1, 0x8, 0x10}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x4, 0x0, 0x8, 0x8, 0x5}, 0x1a, &(0x7f0000000380)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x0, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x7, 0xd, 0x2}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x1d, &(0x7f0000000500)=@string={0x1d, 0x3, "3fb2f40dc3719872ccfa3edcfb5771ed857b8de448e654abfaa550"}}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}]}) syz_usb_control_io$uac2(r8, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m14.68699161s ago: executing program 1 (id=535): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x8000000f, 0xe, 0x4, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fcntl$dupfd(r7, 0x406, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m59.638531162s ago: executing program 32 (id=535): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x8000000f, 0xe, 0x4, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fcntl$dupfd(r7, 0x406, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m10.100791191s ago: executing program 4 (id=2772): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xfd) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, &(0x7f00000001c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x1000) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/del2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000240)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f", 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) write(r1, &(0x7f00000002c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b", 0x3c) close(r1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r2, &(0x7f00000003c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) write(r2, &(0x7f0000000400), 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000480)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) write(r2, &(0x7f00000004c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/del3\x00', 0x0) 4m9.622480384s ago: executing program 4 (id=2774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000680)=0xaf00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 4m7.453670052s ago: executing program 4 (id=2779): symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r0) read$FUSE(r3, 0x0, 0x2000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffc, 0x0, 0xe9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0}) 4m2.752492565s ago: executing program 4 (id=2785): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 4m0.0966518s ago: executing program 4 (id=2788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x17d4}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 3m57.734615386s ago: executing program 4 (id=2790): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 3m42.387032562s ago: executing program 33 (id=2790): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 9.094206396s ago: executing program 2 (id=3764): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 7.742767164s ago: executing program 2 (id=3769): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="3082055530820551a00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba", 0x246, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.457521649s ago: executing program 2 (id=3788): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000000c0)='F', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, 0x0) 4.356464531s ago: executing program 3 (id=3789): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040cb06f5730000000000010902240001000080010904a8fe01030003000956a800fdc3f31e04b680b1218100870122280009058103", @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x5fd8a426428707f3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.286812988s ago: executing program 2 (id=3796): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") 3.198862233s ago: executing program 2 (id=3797): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.681970558s ago: executing program 3 (id=3800): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) 2.625790765s ago: executing program 0 (id=3802): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4080848) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) 2.425578901s ago: executing program 3 (id=3804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.258324657s ago: executing program 0 (id=3805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") 2.249947992s ago: executing program 0 (id=3806): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.629567903s ago: executing program 0 (id=3807): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r2, 0xf4240) close(r2) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='file0', 0x5) close(r4) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r5) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0) close(r6) write(r1, &(0x7f0000000300), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) 1.4101296s ago: executing program 3 (id=3808): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x5fd8a426428707f3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 854.61034ms ago: executing program 5 (id=3811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000500)='10', 0x2) 785.133625ms ago: executing program 3 (id=3812): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) 776.750841ms ago: executing program 0 (id=3813): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4080848) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) 539.490295ms ago: executing program 5 (id=3814): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") 504.061346ms ago: executing program 3 (id=3815): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 396.325575ms ago: executing program 5 (id=3816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 286.391869ms ago: executing program 0 (id=3817): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 285.827147ms ago: executing program 5 (id=3818): r0 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 224.773906ms ago: executing program 5 (id=3819): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 160.014498ms ago: executing program 5 (id=3820): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x5fd8a426428707f3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 2 (id=3821): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r2, 0xf4240) close(r2) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='file0', 0x5) close(r4) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r5) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0) close(r6) write(r1, &(0x7f0000000300), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) kernel console output (not intermixed with test programs): =collect_data cause=failed comm="syz.3.2988" name="idProduct" dev="configfs" ino=77782 res=0 errno=0 [ 720.917403][ T5769] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 721.078461][ T5769] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 721.088209][T13699] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 721.097440][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 721.097699][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 721.098207][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.258232][T13699] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 721.274167][T13699] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 721.274285][T13699] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 721.274320][T13699] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.288644][T13699] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 721.288789][T13699] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 721.288865][T13699] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.294973][T13699] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 721.295123][T13699] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 721.295199][T13699] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.021880][ T5769] pegasus 6-1:1.0: probe with driver pegasus failed with error -32 [ 722.043083][ T32] audit: type=1800 audit(1787247309.069:511): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2997" name="idProduct" dev="configfs" ino=77872 res=0 errno=0 [ 723.577102][T13743] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 723.723196][T13744] usb 6-1: USB disconnect, device number 13 [ 723.736705][T13743] usb 3-1: Using ep0 maxpacket: 8 [ 723.746150][T13743] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 723.775000][T13743] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 723.783738][T13743] usb 3-1: config 0 has no interface number 0 [ 723.790528][T13743] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 723.802014][T13743] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 723.802243][T13743] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 723.802276][T13743] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 723.802328][T13743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.939015][T13743] usb 3-1: config 0 descriptor?? [ 724.015310][T14652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.040764][T13743] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 724.277709][T13699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.381279][T13699] usb 4-1: can't set config #168, error -71 [ 724.431525][T13699] usb 4-1: USB disconnect, device number 56 [ 724.438102][ T5713] usb 3-1: USB disconnect, device number 35 [ 724.522410][ T5713] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 725.105133][ T32] audit: type=1800 audit(1787247312.129:512): pid=14685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3006" name="idProduct" dev="configfs" ino=77913 res=0 errno=0 [ 726.546849][ T5713] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 726.707866][ T5713] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 726.722863][ T5713] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 726.722930][ T5713] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.722966][ T5713] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.760273][ T5713] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 726.760360][ T5713] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.760410][ T5713] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.799479][ T5713] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 726.807397][ T5713] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.818832][ T5713] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.843970][ T5713] usb 6-1: string descriptor 0 read error: -22 [ 726.850706][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.875400][ T5713] adutux 6-1:168.0: interrupt endpoints not found [ 727.077854][T13744] usb 6-1: USB disconnect, device number 14 [ 727.216739][ T5713] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 727.376748][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 727.384397][ T5713] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 727.398119][ T5713] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 727.398177][ T5713] usb 3-1: config 0 has no interface number 0 [ 727.398243][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 727.398273][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 727.398307][ T5713] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.398336][ T5713] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 727.398491][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.421709][ T5713] usb 3-1: config 0 descriptor?? [ 727.485729][ T5713] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 727.700862][ T5713] usb 3-1: USB disconnect, device number 36 [ 727.724336][ T5713] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 729.416912][T14695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.833236][T14723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3019'. [ 731.019463][T13743] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 731.314940][T13743] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 731.473077][T13743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 731.482602][T13743] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 731.495240][T13743] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.614523][T13743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 731.624288][T13743] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 731.624379][T13743] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.745634][T13743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 731.754878][T13743] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 731.754923][T13743] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.094595][T13743] usb 4-1: string descriptor 0 read error: -22 [ 732.105020][T13743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.497472][T13743] adutux 4-1:168.0: interrupt endpoints not found [ 732.695150][ T25] usb 4-1: USB disconnect, device number 57 [ 732.737316][T14733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.748612][T14733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.792481][T14734] No source specified [ 734.839765][T14762] No source specified [ 735.339114][T14770] MTD: Couldn't look up './dev/mtdblock0': -2 [ 737.267192][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.267674][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.602779][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 737.837410][ T32] audit: type=1800 audit(1787247324.859:513): pid=14786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3043" name="idVendor" dev="configfs" ino=79080 res=0 errno=0 [ 738.193580][T12171] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 739.449751][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 739.943850][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 740.009010][ T10] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 740.009062][ T10] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 740.009104][ T10] usb 4-1: config 0 has no interface number 0 [ 740.009223][ T10] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.009260][ T10] usb 4-1: config 0 interface 168 has no altsetting 0 [ 740.009302][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.112301][ T10] usb 4-1: config 0 descriptor?? [ 740.166195][ T10] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 740.446115][T10185] IPVS: starting estimator thread 0... [ 740.525520][ T5720] usb 4-1: USB disconnect, device number 58 [ 740.550021][T14806] IPVS: using max 27 ests per chain, 64800 per kthread [ 740.943560][ T32] audit: type=1800 audit(1787247327.969:514): pid=14816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3055" name="idVendor" dev="configfs" ino=79149 res=0 errno=0 [ 741.043862][ T5720] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 741.231532][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 741.237126][ T5720] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 741.247554][ T5720] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 741.247611][ T5720] usb 6-1: config 0 has no interface number 0 [ 741.247667][ T5720] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 741.247698][ T5720] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 741.247730][ T5720] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 741.247762][ T5720] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.247862][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.289310][ T5720] usb 6-1: config 0 descriptor?? [ 741.379310][ T5720] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 743.579595][ T32] audit: type=1800 audit(1787247330.609:515): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3064" name="idVendor" dev="configfs" ino=79200 res=0 errno=0 [ 743.907566][ T32] audit: type=1800 audit(1787247330.939:516): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3066" name="file" dev="configfs" ino=78088 res=0 errno=0 [ 744.169974][T13743] usb 6-1: USB disconnect, device number 15 [ 744.208264][T13743] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 744.428764][ T32] audit: type=1800 audit(1787247331.459:517): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3069" name="idProduct" dev="configfs" ino=78099 res=0 errno=0 [ 744.647110][ T5713] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 745.387384][ T5713] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 745.397181][ T5713] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 745.397215][ T5713] usb 3-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 745.397237][ T5713] usb 3-1: config 0 has no interface number 0 [ 745.397278][ T5713] usb 3-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.397310][ T5713] usb 3-1: config 0 interface 168 has no altsetting 0 [ 745.397345][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.449911][ T5713] usb 3-1: config 0 descriptor?? [ 745.534682][ T5713] usbhid 3-1:0.168: couldn't find an input interrupt endpoint [ 745.808034][ T3377] IPVS: starting estimator thread 0... [ 745.858374][ T5713] usb 3-1: USB disconnect, device number 37 [ 745.897026][T14863] IPVS: using max 25 ests per chain, 60000 per kthread [ 745.951114][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.965804][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.077284][ T32] audit: type=1800 audit(1787247333.099:518): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3074" name="idVendor" dev="configfs" ino=79257 res=0 errno=0 [ 746.189787][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.199746][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.410741][ T5713] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 746.579244][ T5713] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 746.591881][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 746.591935][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 746.591992][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.893156][ T32] audit: type=1800 audit(1787247333.919:519): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3078" name="idProduct" dev="configfs" ino=78133 res=0 errno=0 [ 746.972575][ T5769] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 747.147404][ T5769] usb 3-1: Using ep0 maxpacket: 8 [ 747.158216][ T5769] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 747.180732][ T5769] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 747.180893][ T5769] usb 3-1: config 0 has no interface number 0 [ 747.180962][ T5769] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 747.180992][ T5769] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 747.181076][ T5769] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.181109][ T5769] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.181157][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.256003][ T5769] usb 3-1: config 0 descriptor?? [ 747.276046][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.276137][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.315412][T14879] fuse: Bad value for 'fd' [ 747.339914][ T5769] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 747.895182][ T5713] pegasus 4-1:1.0: probe with driver pegasus failed with error -32 [ 749.584196][ T5713] usb 4-1: USB disconnect, device number 59 [ 750.019408][ T5705] usb 3-1: USB disconnect, device number 38 [ 750.117267][ T5705] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 750.200471][ T32] audit: type=1800 audit(1787247337.229:520): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3083" name="idVendor" dev="configfs" ino=79314 res=0 errno=0 [ 750.463897][T12171] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 750.670433][T14908] fuse: Bad value for 'fd' [ 750.777284][ T5705] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 750.958759][ T5705] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 750.973751][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.973822][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.974000][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.016180][ T5705] usb 3-1: config 0 descriptor?? [ 751.037141][ T5705] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 751.278980][ T5713] usb 3-1: USB disconnect, device number 39 [ 751.355428][ T32] audit: type=1800 audit(1787247338.379:521): pid=14922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3094" name="idVendor" dev="configfs" ino=78185 res=0 errno=0 [ 751.695735][T12171] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 751.748811][ T5713] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 751.897941][ T5713] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 751.923922][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.925084][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.925215][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.965481][ T5713] usb 3-1: config 0 descriptor?? [ 752.014379][ T5713] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 752.025789][ T5713] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 752.332364][T14934] fuse: Bad value for 'fd' [ 754.186651][ T5713] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 754.341733][ T5713] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 754.391801][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.391856][ T5713] usb 6-1: Product: syz [ 754.391890][ T5713] usb 6-1: Manufacturer: syz [ 754.391912][ T5713] usb 6-1: SerialNumber: syz [ 754.417478][ T5713] usb 6-1: config 0 descriptor?? [ 754.671907][ T5713] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 755.012105][T13699] usb 3-1: USB disconnect, device number 40 [ 755.290895][ T5713] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 755.380260][ T32] audit: type=1800 audit(1787247342.409:522): pid=14974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3114" name="addr_traddr" dev="configfs" ino=79498 res=0 errno=0 [ 755.717539][T14983] netlink: Unknown nat attribute (0) [ 755.717600][T14983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.798699][T13699] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 755.957518][T13699] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 755.978889][T13699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.978946][T13699] usb 4-1: Product: syz [ 755.980070][T13699] usb 4-1: Manufacturer: syz [ 755.980122][T13699] usb 4-1: SerialNumber: syz [ 756.475000][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 756.475097][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 757.194167][ T5720] usb 6-1: USB disconnect, device number 16 [ 757.751471][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 757.764368][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 758.186954][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 758.187038][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 758.195844][T13699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 758.250956][T13699] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 758.289472][T13699] usb 4-1: USB disconnect, device number 60 [ 759.085143][T15029] netlink: Unknown nat attribute (0) [ 759.085210][T15029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.286874][ T5713] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 759.438506][ T5713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 759.453868][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.453932][ T5713] usb 4-1: Product: syz [ 759.453968][ T5713] usb 4-1: Manufacturer: syz [ 759.454028][ T5713] usb 4-1: SerialNumber: syz [ 759.489410][ T5713] usb 4-1: config 0 descriptor?? [ 759.737059][ T5713] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 760.369585][ T5713] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 761.756806][ T5713] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 761.930529][ T5713] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 761.946095][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.946152][ T5713] usb 6-1: Product: syz [ 761.946190][ T5713] usb 6-1: Manufacturer: syz [ 761.946211][ T5713] usb 6-1: SerialNumber: syz [ 762.099068][ T5720] usb 4-1: USB disconnect, device number 61 [ 762.262482][T15035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.451243][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 762.451343][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 762.566711][T15062] netlink: NAT attribute has 8 unknown bytes [ 762.573560][T15062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.089500][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 764.089582][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 764.090678][ T5713] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 764.124087][ T5713] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 764.465227][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.482374][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.192417][T15090] netlink: NAT attribute has 8 unknown bytes [ 765.192525][T15090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.241871][ T25] usb 6-1: USB disconnect, device number 17 [ 767.186500][T13052] Bluetooth: hci4: command 0xfc11 tx timeout [ 767.198758][T12171] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 768.866740][ T5713] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 768.887220][T13743] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 769.060576][T13743] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 769.078466][T13743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.089715][T13743] usb 6-1: Product: syz [ 769.094159][T13743] usb 6-1: Manufacturer: syz [ 769.099927][T13743] usb 6-1: SerialNumber: syz [ 769.236685][ T5713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 769.259054][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.259103][ T5713] usb 4-1: Product: syz [ 769.259131][ T5713] usb 4-1: Manufacturer: syz [ 769.259151][ T5713] usb 4-1: SerialNumber: syz [ 769.278205][ T5713] usb 4-1: config 0 descriptor?? [ 769.755958][ T5713] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 770.149480][T13743] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 770.149567][T13743] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 770.317987][ T5705] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 770.394682][ T5713] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 770.496614][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 770.503875][ T5705] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 770.524648][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.533705][ T5705] usb 3-1: Product: syz [ 770.540794][ T5705] usb 3-1: Manufacturer: syz [ 770.541032][ T5705] usb 3-1: SerialNumber: syz [ 770.568300][ T5705] usb 3-1: config 0 descriptor?? [ 770.605843][ T5705] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 770.910849][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.916189][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.134112][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.135459][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.601414][ T5713] usb 4-1: USB disconnect, device number 62 [ 771.700552][T13743] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 771.700837][T13743] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 771.702969][T13743] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 771.752144][T13743] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 772.039323][ T5705] gspca_sonixj: i2c_w8 err -71 [ 772.117176][ T5705] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 772.131110][T15152] jffs2: notice: (15152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 772.158136][ T5705] usb 3-1: USB disconnect, device number 41 [ 772.833927][ T5705] usb 6-1: USB disconnect, device number 18 [ 772.892072][T13699] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 773.058632][T13699] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 773.070185][T13699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.070265][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 773.070295][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 773.070372][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 773.070457][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 773.070539][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 773.070613][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 773.070678][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 773.070749][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 773.070815][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 773.070878][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 773.070945][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 773.071012][T13699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.071074][T13699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.071138][T13699] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 773.095523][T13699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.095554][T13699] usb 4-1: Product: syz [ 773.095570][T13699] usb 4-1: Manufacturer: syz [ 773.095587][T13699] usb 4-1: SerialNumber: syz [ 773.172381][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.217888][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.218237][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.218598][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.219915][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.319190][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.319652][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.320033][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.320406][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.320789][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.366137][T15161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.415625][T13699] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 773.427206][T13699] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 773.435611][ T5705] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 773.454755][T13699] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 773.468442][T13699] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 773.482805][T13699] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 773.519721][T15167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.535700][T15167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.602042][ T5705] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.629771][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.629844][ T5705] usb 6-1: Product: syz [ 773.629887][ T5705] usb 6-1: Manufacturer: syz [ 773.629909][ T5705] usb 6-1: SerialNumber: syz [ 773.672868][ T5705] usb 6-1: config 0 descriptor?? [ 773.772864][T15167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.774098][T15167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.855194][T13699] usb 4-1: USB disconnect, device number 63 [ 773.899604][T13699] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 773.921087][ T5705] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 773.942444][T13699] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 773.955768][T13699] keyspan 4-1:1.0: device disconnected [ 774.388528][T15172] jffs2: notice: (15172) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 774.645487][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.660752][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.006862][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 775.162407][ T5705] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 775.177270][ T5705] usb 6-1: USB disconnect, device number 19 [ 775.183393][ T25] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 775.219887][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.219942][ T25] usb 3-1: Product: syz [ 775.219978][ T25] usb 3-1: Manufacturer: syz [ 775.220038][ T25] usb 3-1: SerialNumber: syz [ 775.686061][ T25] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 775.698331][ T25] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 776.436993][T13699] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 776.598194][T13699] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 776.612106][T13699] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.623566][T13699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.653298][T13699] usb 4-1: config 0 descriptor?? [ 776.687285][T13699] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 776.918698][T13699] usb 4-1: USB disconnect, device number 64 [ 776.933491][T15201] jffs2: notice: (15201) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 777.503737][ T25] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 777.503818][ T25] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 777.504580][ T25] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 777.561385][ T25] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 778.016909][T13699] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 778.301524][T13699] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 778.315873][T13699] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.315950][T13699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.342302][T13699] usb 4-1: config 0 descriptor?? [ 778.360464][T13699] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 778.369959][T13699] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 778.470778][T13743] usb 3-1: USB disconnect, device number 42 [ 779.995408][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.014903][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.645284][T15227] Process accounting resumed [ 780.664655][T13743] usb 4-1: USB disconnect, device number 65 [ 781.517793][ T5705] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 781.677341][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 781.687137][ T5705] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 781.699108][ T5705] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.699173][ T5705] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.699202][ T5705] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 781.699804][ T5705] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 781.699872][ T5705] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 781.700433][ T5705] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.701074][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.081032][ T5705] usb 4-1: GET_CAPABILITIES returned 0 [ 782.081386][ T5705] usbtmc 4-1:16.0: can't read capabilities [ 782.285654][ T25] usb 4-1: USB disconnect, device number 66 [ 782.295966][ T32] audit: type=1800 audit(1787247369.309:523): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3227" name="cdrom" dev="configfs" ino=81093 res=0 errno=0 [ 782.296034][ T32] audit: type=1800 audit(1787247369.319:524): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3227" name="file" dev="configfs" ino=81094 res=0 errno=0 [ 782.617301][T15266] Process accounting resumed [ 786.162115][T12171] Bluetooth: hci1: unexpected event for opcode 0x6f2f [ 786.245787][ T32] audit: type=1800 audit(1787247373.269:525): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3236" name="cdrom" dev="configfs" ino=80865 res=0 errno=0 [ 786.268340][ T32] audit: type=1800 audit(1787247373.299:526): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3236" name="file" dev="configfs" ino=80866 res=0 errno=0 [ 789.660930][T15296] Process accounting resumed [ 789.863564][T15312] jffs2: notice: (15312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 790.761097][ T32] audit: type=1800 audit(1787247377.789:527): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3249" name="cdrom" dev="configfs" ino=81961 res=0 errno=0 [ 790.791331][ T32] audit: type=1800 audit(1787247377.819:528): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3249" name="file" dev="configfs" ino=81962 res=0 errno=0 [ 791.361687][T15333] jffs2: notice: (15333) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 791.497666][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.498213][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.495889][T15350] jffs2: notice: (15350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 792.675596][T15340] Process accounting resumed [ 792.705587][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 792.807496][ T32] audit: type=1800 audit(1787247379.839:529): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3258" name="cdrom" dev="configfs" ino=82030 res=0 errno=0 [ 792.835534][ T32] audit: type=1800 audit(1787247379.859:530): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3258" name="file" dev="configfs" ino=82031 res=0 errno=0 [ 792.865438][T15355] mass_storage.0/lun.0: file too small: file0 [ 792.877009][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 795.497156][T12171] Bluetooth: hci3: command 0x0406 tx timeout [ 795.842643][T15376] jffs2: notice: (15376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 796.496223][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.509097][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.726041][T15375] Process accounting resumed [ 797.057086][ T5698] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 797.181989][T15398] jffs2: notice: (15398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 797.245904][ T5698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 797.245978][ T5698] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 797.266702][ T5698] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 797.288726][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.288776][ T5698] usb 4-1: Product: syz [ 797.288809][ T5698] usb 4-1: Manufacturer: syz [ 797.288830][ T5698] usb 4-1: SerialNumber: syz [ 797.565368][ T5698] usb 4-1: unit 4 not found! [ 797.565417][ T5698] usb 4-1: unit 0 not found! [ 797.905330][ T5698] usb 4-1: USB disconnect, device number 67 [ 797.996688][ T5720] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 798.170470][ T5720] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 798.183265][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.183310][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 798.183377][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.242599][ T5720] usb 6-1: config 0 descriptor?? [ 798.271178][ T5720] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 798.271339][ T5720] dvb-usb: bulk message failed: -22 (3/0) [ 798.307421][ T5720] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 798.329684][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 798.347440][ T5720] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 798.347503][ T5720] usb 6-1: media controller created [ 798.378365][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.447426][ T5720] dvb-usb: bulk message failed: -22 (6/0) [ 798.447551][ T5720] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 798.500495][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input99 [ 798.562133][T15404] dvb-usb: bulk message failed: -22 (2/0) [ 798.661773][ T5720] dvb-usb: schedule remote query interval to 150 msecs. [ 798.678445][ T5720] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 798.820322][ T5720] usb 6-1: USB disconnect, device number 20 [ 798.936074][ T5720] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 799.165485][T15417] Process accounting resumed [ 799.230223][T15423] jffs2: notice: (15423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 799.345784][T15427] jffs2: notice: (15427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 800.401969][T13744] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 800.571172][T13744] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 800.581416][T13744] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 800.581478][T13744] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 800.581529][T13744] usb 6-1: config 0 has no interface number 0 [ 800.581973][T13744] usb 6-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.582356][T13744] usb 6-1: config 0 interface 168 has no altsetting 0 [ 800.582450][T13744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.665143][T13744] usb 6-1: config 0 descriptor?? [ 800.729767][T13744] usbhid 6-1:0.168: couldn't find an input interrupt endpoint [ 801.738942][T15464] jffs2: notice: (15464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 801.859734][ T5698] usb 6-1: USB disconnect, device number 21 [ 802.006138][T15460] Process accounting resumed [ 802.457461][ T5698] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 802.641995][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 802.642068][ T5698] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 802.665558][ T5698] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 802.665624][ T5698] usb 3-1: config 12 has no interface number 0 [ 802.672227][ T5698] usb 3-1: config 12 interface 99 has no altsetting 0 [ 802.704208][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.704270][ T5698] usb 3-1: Product: syz [ 802.704304][ T5698] usb 3-1: Manufacturer: syz [ 802.704325][ T5698] usb 3-1: SerialNumber: syz [ 803.145604][ T5698] usb 3-1: no audio or video endpoints found [ 803.182086][ T5698] usb 3-1: USB disconnect, device number 43 [ 804.532130][T15490] jffs2: notice: (15490) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 805.457985][T13744] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 805.536420][T13699] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 805.700047][T13699] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 805.711937][T13699] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 805.711983][T13699] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 805.712019][T13699] usb 6-1: config 0 has no interface number 0 [ 805.712064][T13699] usb 6-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 805.712098][T13699] usb 6-1: config 0 interface 168 has no altsetting 0 [ 805.712140][T13699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.753402][T13744] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 805.756901][T13744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.757424][T13744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.808449][T13699] usb 6-1: config 0 descriptor?? [ 805.824385][T13744] usb 4-1: config 0 descriptor?? [ 805.850110][T13699] usbhid 6-1:0.168: couldn't find an input interrupt endpoint [ 805.982147][T15495] Process accounting resumed [ 806.078136][T13744] usbhid 4-1:0.0: can't add hid device: -71 [ 806.078293][T13744] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 806.095232][T13744] usb 4-1: USB disconnect, device number 68 [ 806.188706][ T5705] usb 6-1: USB disconnect, device number 22 [ 806.569014][T15511] Invalid source name [ 808.254219][ T32] audit: type=1800 audit(1787247395.279:531): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3320" name="zoned" dev="configfs" ino=82390 res=0 errno=0 [ 808.281471][ T32] audit: type=1800 audit(1787247395.309:532): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3320" name="zone_nr_conv" dev="configfs" ino=82391 res=0 errno=0 [ 808.350060][ T32] audit: type=1800 audit(1787247395.379:533): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3320" name="power" dev="configfs" ino=82392 res=0 errno=0 [ 808.537178][T15526] null_blk: nullb1: using native zone append [ 808.719388][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.730473][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.768214][ T32] audit: type=1326 audit(1787247395.799:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.2.3321" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f760799e0d9 code=0x0 [ 808.885115][T15526] null_blk: disk nullb1 created [ 811.296668][ T5698] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 811.479971][ T5698] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.499836][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.513521][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.534915][ T5698] usb 3-1: config 0 descriptor?? [ 811.799344][ T5698] usbhid 3-1:0.0: can't add hid device: -71 [ 811.799477][ T5698] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 811.819435][ T5698] usb 3-1: USB disconnect, device number 44 [ 816.155529][T15569] MTD: Couldn't look up './dev/mtdblock0': -2 [ 817.321380][T15580] kvm: pic: single mode not supported [ 817.322184][T15580] kvm: pic: level sensitive irq not supported [ 817.322334][T15580] kvm: pic: single mode not supported [ 817.322351][T15580] kvm: pic: level sensitive irq not supported [ 817.336044][T15580] kvm: pic: single mode not supported [ 817.336213][T15580] kvm: pic: level sensitive irq not supported [ 817.359584][T15580] kvm: pic: single mode not supported [ 817.359627][T15580] kvm: pic: level sensitive irq not supported [ 817.379356][T15580] kvm: pic: single mode not supported [ 817.379500][T15580] kvm: pic: level sensitive irq not supported [ 817.379621][T15580] kvm: pic: single mode not supported [ 817.379636][T15580] kvm: pic: level sensitive irq not supported [ 817.380596][T15580] kvm: pic: single mode not supported [ 817.432717][T15580] kvm: pic: level sensitive irq not supported [ 817.433136][T15580] kvm: pic: single mode not supported [ 817.433176][T15580] kvm: pic: level sensitive irq not supported [ 817.434528][T15580] kvm: pic: single mode not supported [ 817.434774][T15580] kvm: pic: level sensitive irq not supported [ 817.435018][T15580] kvm: pic: single mode not supported [ 817.435048][T15580] kvm: pic: level sensitive irq not supported [ 817.776448][ T5705] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 817.952131][ T5705] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 817.966222][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.968117][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.023741][ T5705] usb 4-1: config 0 descriptor?? [ 818.218932][T15594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 818.255312][T15594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 818.255535][T15594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 818.255620][T15594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 818.291915][T15594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.301406][T15594] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 818.387584][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 818.389269][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 818.465267][ T5705] usb 4-1: USB disconnect, device number 69 [ 818.936802][ T5705] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 819.035983][T15620] jffs2: notice: (15620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 819.089251][ T5705] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 819.102638][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.103483][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.200560][ T5705] usb 4-1: config 0 descriptor?? [ 819.525303][ T32] audit: type=1800 audit(1787247406.549:535): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3355" name="zoned" dev="configfs" ino=82589 res=0 errno=0 [ 819.550247][ T32] audit: type=1800 audit(1787247406.579:536): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3355" name="zone_nr_conv" dev="configfs" ino=82590 res=0 errno=0 [ 819.589092][ T32] audit: type=1800 audit(1787247406.619:537): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3355" name="power" dev="configfs" ino=82591 res=0 errno=0 [ 820.227776][T13052] Bluetooth: hci1: command 0x0c1a tx timeout [ 820.227835][T13052] Bluetooth: hci0: command 0x041b tx timeout [ 820.306613][T12171] Bluetooth: hci3: command 0x0406 tx timeout [ 820.306698][T12171] Bluetooth: hci2: command 0x0406 tx timeout [ 820.353780][ T32] audit: type=1800 audit(1787247407.379:538): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3364" name="cdrom" dev="configfs" ino=81595 res=0 errno=0 [ 820.378312][ T32] audit: type=1800 audit(1787247407.409:539): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3364" name="file" dev="configfs" ino=82647 res=0 errno=0 [ 820.490406][ T32] audit: type=1800 audit(1787247407.519:540): pid=15649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3365" name="zoned" dev="configfs" ino=82654 res=0 errno=0 [ 820.514592][ T32] audit: type=1800 audit(1787247407.549:541): pid=15649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3365" name="zone_nr_conv" dev="configfs" ino=81598 res=0 errno=0 [ 820.833475][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 820.834684][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 820.932412][ T5705] usb 4-1: USB disconnect, device number 70 [ 821.437969][ T32] audit: type=1800 audit(1787247408.469:542): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3373" name="cdrom" dev="configfs" ino=82704 res=0 errno=0 [ 821.462641][ T32] audit: type=1800 audit(1787247408.499:543): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3373" name="file" dev="configfs" ino=82705 res=0 errno=0 [ 822.016907][ T5698] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 822.136135][ T32] audit: type=1800 audit(1787247409.159:544): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3385" name="cdrom" dev="configfs" ino=82789 res=0 errno=0 [ 822.178177][ T5698] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.192297][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.192381][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.219975][ T5698] usb 6-1: config 0 descriptor?? [ 822.386894][T12171] Bluetooth: hci3: command 0x0406 tx timeout [ 822.393195][T13052] Bluetooth: hci2: command 0x0406 tx timeout [ 822.503666][ T5698] usbhid 6-1:0.0: can't add hid device: -71 [ 822.503809][ T5698] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 822.532049][ T5698] usb 6-1: USB disconnect, device number 23 [ 823.026775][ T5698] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 823.187909][ T5698] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.199075][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.199154][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.229111][ T5698] usb 6-1: config 0 descriptor?? [ 824.699171][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 824.699221][ T32] audit: type=1800 audit(1787247411.719:548): pid=15730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3401" name="zoned" dev="configfs" ino=83007 res=0 errno=0 [ 824.845470][ T5698] usbhid 6-1:0.0: can't add hid device: -71 [ 824.845600][ T5698] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 824.870186][ T5698] usb 6-1: USB disconnect, device number 24 [ 825.056063][ T32] audit: type=1800 audit(1787247412.079:549): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3403" name="cdrom" dev="configfs" ino=83018 res=0 errno=0 [ 825.089023][ T32] audit: type=1800 audit(1787247412.109:550): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3403" name="file" dev="configfs" ino=83019 res=0 errno=0 [ 825.263651][ T32] audit: type=1800 audit(1787247412.289:551): pid=15736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3404" name="zoned" dev="configfs" ino=81732 res=0 errno=0 [ 825.291258][ T32] audit: type=1800 audit(1787247412.319:552): pid=15736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3404" name="zone_nr_conv" dev="configfs" ino=81733 res=0 errno=0 [ 826.346815][ T5720] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 826.518736][ T5720] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 826.531359][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.531425][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.572733][ T5720] usb 4-1: config 0 descriptor?? [ 826.671640][ T32] audit: type=1800 audit(1787247413.699:553): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3414" name="zoned" dev="configfs" ino=81813 res=0 errno=0 [ 826.803394][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 826.809720][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 826.823663][ T5720] usb 4-1: USB disconnect, device number 71 [ 827.242594][ T32] audit: type=1800 audit(1787247414.269:554): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3418" name="zoned" dev="configfs" ino=81821 res=0 errno=0 [ 827.273363][ T32] audit: type=1800 audit(1787247414.299:555): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3418" name="zone_nr_conv" dev="configfs" ino=81822 res=0 errno=0 [ 827.358500][ T5720] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 827.540231][ T5720] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 827.555477][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.555544][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.578917][ T5720] usb 4-1: config 0 descriptor?? [ 828.649349][T15797] MTD: Couldn't look up './dev/mtdblock0': -2 [ 829.223587][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 829.223727][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 829.242183][ T5720] usb 4-1: USB disconnect, device number 72 [ 829.692511][T15816] MTD: Couldn't look up './dev/mtdblock0': -2 [ 829.750472][T15818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.777898][T15818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.196654][T13699] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 830.362162][T13699] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 830.382144][T13699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.382216][T13699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.421085][T13699] usb 6-1: config 0 descriptor?? [ 830.683798][T13699] usbhid 6-1:0.0: can't add hid device: -71 [ 830.683946][T13699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 830.703567][T13699] usb 6-1: USB disconnect, device number 25 [ 831.226548][T13699] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 831.338844][ T32] audit: type=1800 audit(1787247418.369:556): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3454" name="zoned" dev="configfs" ino=84053 res=0 errno=0 [ 831.417943][T13699] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 831.433292][T13699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.433371][T13699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.455718][T13699] usb 6-1: config 0 descriptor?? [ 831.789796][ T5769] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 831.820745][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.822103][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.946628][ T5769] usb 4-1: Using ep0 maxpacket: 8 [ 831.963261][ T5769] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 831.992016][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.992078][ T5769] usb 4-1: Product: syz [ 831.994880][ T5769] usb 4-1: Manufacturer: syz [ 831.994930][ T5769] usb 4-1: SerialNumber: syz [ 832.756446][ T5769] gspca_main: etoms-2.14.0 probing 102c:6151 [ 832.965150][ T5769] usb 4-1: USB disconnect, device number 73 [ 833.721635][T13699] usbhid 6-1:0.0: can't add hid device: -71 [ 833.731234][T13699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 833.886619][T13699] usb 6-1: USB disconnect, device number 26 [ 834.255750][ T32] audit: type=1800 audit(1787247421.279:557): pid=15872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3463" name="zoned" dev="configfs" ino=83774 res=0 errno=0 [ 834.937178][ T5769] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 835.076655][ T5769] usb 3-1: device descriptor read/64, error -71 [ 835.317164][ T5769] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 835.414223][ T32] audit: type=1800 audit(1787247422.439:558): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3474" name="zoned" dev="configfs" ino=83968 res=0 errno=0 [ 835.467394][ T5769] usb 3-1: device descriptor read/64, error -71 [ 835.581202][ T5769] usb usb3-port1: attempt power cycle [ 835.942023][ T5769] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 835.971009][ T5769] usb 3-1: device descriptor read/8, error -71 [ 836.206700][ T5769] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 836.246158][ T5769] usb 3-1: device descriptor read/8, error -71 [ 836.348612][ T5769] usb usb3-port1: unable to enumerate USB device [ 836.629431][T15931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.642886][T15931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.731685][T15947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.744398][T15947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.503751][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3497'. [ 839.503960][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3497'. [ 839.522893][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3497'. [ 839.592169][ T5705] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 839.646583][ T5720] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 839.726808][ T5705] usb 4-1: device descriptor read/64, error -71 [ 839.821380][ T5720] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 839.833348][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.845799][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.859988][ T5720] usb 6-1: config 0 descriptor?? [ 839.998428][ T5705] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 840.082345][ T5720] usbhid 6-1:0.0: can't add hid device: -71 [ 840.088813][ T5720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 840.100783][ T5720] usb 6-1: USB disconnect, device number 27 [ 840.126593][ T5705] usb 4-1: device descriptor read/64, error -71 [ 840.258082][ T5705] usb usb4-port1: attempt power cycle [ 840.616699][ T5720] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 840.798912][ T5720] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 840.809894][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.809959][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.819121][ T5705] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 840.844374][ T5720] usb 6-1: config 0 descriptor?? [ 840.893480][ T5705] usb 4-1: device descriptor read/8, error -71 [ 841.132181][ T5705] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 841.159160][ T5705] usb 4-1: device descriptor read/8, error -71 [ 841.268768][ T5705] usb usb4-port1: unable to enumerate USB device [ 841.320252][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.333179][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.380281][ T5705] usb 1-1: USB disconnect, device number 77 [ 842.459040][ T5720] usbhid 6-1:0.0: can't add hid device: -71 [ 842.459168][ T5720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 842.478010][ T5720] usb 6-1: USB disconnect, device number 28 [ 842.567605][ T32] audit: type=1800 audit(1787247429.599:559): pid=15991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3510" name="zoned" dev="configfs" ino=85292 res=0 errno=0 [ 842.589803][ T32] audit: type=1800 audit(1787247429.619:560): pid=15991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3510" name="zone_nr_conv" dev="configfs" ino=85293 res=0 errno=0 [ 842.721861][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3509'. [ 842.783165][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3509'. [ 843.876696][ T5705] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 843.956596][T13699] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 844.006749][ T5705] usb 6-1: device descriptor read/64, error -71 [ 844.106514][T13699] usb 4-1: Using ep0 maxpacket: 32 [ 844.112593][T13699] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 844.123723][T13699] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.137098][T13699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.137156][T13699] usb 4-1: Product: syz [ 844.137244][T13699] usb 4-1: Manufacturer: syz [ 844.137297][T13699] usb 4-1: SerialNumber: syz [ 844.172983][T13699] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 844.266642][ T5705] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 844.370225][T13699] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 844.406472][ T5705] usb 6-1: device descriptor read/64, error -71 [ 844.427181][T13699] usb 4-1: USB disconnect, device number 78 [ 844.463855][T15601] udevd[15601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.516885][ T5705] usb usb6-port1: attempt power cycle [ 844.566552][ T5720] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 844.718410][ T5720] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 844.721087][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.721164][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.759078][ T5720] usb 1-1: config 0 descriptor?? [ 844.869165][ T5705] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 844.903105][ T5705] usb 6-1: device descriptor read/8, error -71 [ 845.036705][ T5720] usbhid 1-1:0.0: can't add hid device: -71 [ 845.044380][ T5720] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 845.062948][ T5720] usb 1-1: USB disconnect, device number 78 [ 845.178309][ T5705] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 845.198288][ T5705] usb 6-1: device descriptor read/8, error -71 [ 845.338294][ T5705] usb usb6-port1: unable to enumerate USB device [ 845.546741][ T5720] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 845.709363][ T5720] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 845.720748][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.723856][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.738817][ T5720] usb 1-1: config 0 descriptor?? [ 845.844159][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'. [ 845.903654][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'. [ 847.096543][ T5705] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 847.247725][ T5705] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 847.258611][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.258645][ T5705] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.258672][ T5705] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.294675][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 847.294705][ T5705] usb 3-1: Product: syz [ 847.294723][ T5705] usb 3-1: Manufacturer: syz [ 847.294741][ T5705] usb 3-1: SerialNumber: syz [ 847.419854][ T5720] usbhid 1-1:0.0: can't add hid device: -71 [ 847.426618][ T5720] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 847.444078][ T5720] usb 1-1: USB disconnect, device number 79 [ 847.551723][ T5705] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 847.837560][ T5720] usb 3-1: USB disconnect, device number 49 [ 847.861043][T16053] fuse: Bad value for 'fd' [ 847.902544][T16034] usblp0: removed [ 847.940552][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 847.996169][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 848.245711][ T32] audit: type=1800 audit(1787247435.269:561): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3540" name="zoned" dev="configfs" ino=84676 res=0 errno=0 [ 848.272428][ T32] audit: type=1800 audit(1787247435.299:562): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3540" name="zone_nr_conv" dev="configfs" ino=84677 res=0 errno=0 [ 848.532215][T16075] fuse: Bad value for 'fd' [ 848.540532][T16076] ieee802154 phy0 wpan0: encryption failed: -126 [ 848.778238][T16082] netlink: Invalid conntrack helper [ 848.796467][T16082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.881866][ T32] audit: type=1800 audit(1787247435.909:563): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3549" name="zoned" dev="configfs" ino=84730 res=0 errno=0 [ 849.045775][T16092] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 849.047641][T16088] kvm: pic: non byte write [ 849.366648][ T5720] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 849.508301][ T5720] usb 3-1: device descriptor read/64, error -71 [ 849.711514][T16099] fuse: Bad value for 'fd' [ 849.746523][ T5720] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 849.886674][ T5720] usb 3-1: device descriptor read/64, error -71 [ 849.911275][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3557'. [ 849.963681][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3557'. [ 849.997947][ T5720] usb usb3-port1: attempt power cycle [ 850.222450][ T32] audit: type=1800 audit(1787247437.249:564): pid=16115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3561" name="zoned" dev="configfs" ino=84832 res=0 errno=0 [ 850.345992][T16117] kvm: pic: non byte write [ 850.357043][ T5720] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 850.381094][ T5720] usb 3-1: device descriptor read/8, error -71 [ 850.595139][T16124] fuse: Unknown parameter '0x0000000000000003' [ 850.638706][ T5720] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 850.657644][ T5720] usb 3-1: device descriptor read/8, error -71 [ 850.773397][ T5720] usb usb3-port1: unable to enumerate USB device [ 851.187736][T16139] futex_wake_op: syz.3.3568 tries to shift op by -1; fix this program [ 851.645307][T16140] usb usb7: check_ctrlrecip: process 16140 (syz.3.3568) requesting ep 01 but needs 81 [ 851.739386][T16143] kvm: pic: non byte write [ 852.002865][T16148] fuse: Unknown parameter '0x0000000000000003' [ 852.057284][ T32] audit: type=1326 audit(1787247439.089:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16149 comm="syz.5.3575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57179e0d9 code=0x0 [ 852.678076][T16172] fuse: Unknown parameter '0x0000000000000003' [ 853.036500][ T5713] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 853.201432][ T5713] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 853.211744][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 853.211797][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 853.211825][ T5713] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.237098][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 853.237198][ T5713] usb 3-1: Product: syz [ 853.237243][ T5713] usb 3-1: Manufacturer: syz [ 853.237286][ T5713] usb 3-1: SerialNumber: syz [ 853.290499][T16194] fuse: Unknown parameter '0x0000000000000003' [ 853.336779][ T5720] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 853.505631][ T5713] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 853.531605][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 853.544145][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 853.544203][ T5720] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 853.544231][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.594150][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 853.594214][ T5720] usb 1-1: Product: syz [ 853.595373][ T5720] usb 1-1: Manufacturer: syz [ 853.595427][ T5720] usb 1-1: SerialNumber: syz [ 853.805391][ T5713] usb 3-1: USB disconnect, device number 54 [ 853.935204][T16177] usblp0: removed [ 853.965617][ T5720] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 855.066038][T16226] fuse: Unknown parameter '0x0000000000000003' [ 855.426763][ T5713] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 855.556691][ T5713] usb 6-1: device descriptor read/64, error -71 [ 855.676735][ T5769] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 855.806774][ T5713] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 855.836665][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 855.839622][ T5769] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 855.857016][ T5769] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 855.857084][ T5769] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 855.857172][ T5769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 855.857273][ T5769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 855.917281][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.917340][ T5769] usb 3-1: Product: syz [ 855.917375][ T5769] usb 3-1: Manufacturer: syz [ 855.917396][ T5769] usb 3-1: SerialNumber: syz [ 855.942323][ T5769] usb 3-1: config 0 descriptor?? [ 855.956911][ T5713] usb 6-1: device descriptor read/64, error -71 [ 856.067947][ T5713] usb usb6-port1: attempt power cycle [ 856.087674][ T5720] usb 1-1: USB disconnect, device number 80 [ 856.103741][ T5720] usblp0: removed [ 856.187265][ T5769] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 856.196900][ T5769] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 856.236932][ T32] audit: type=1800 audit(1787247443.269:566): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3610" name="cdrom" dev="configfs" ino=85855 res=0 errno=0 [ 856.264526][T16243] mass_storage.0/lun.0: file too small: file0 [ 856.264735][ T32] audit: type=1800 audit(1787247443.289:567): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3610" name="file" dev="configfs" ino=85856 res=0 errno=0 [ 856.296095][ T32] audit: type=1800 audit(1787247443.319:568): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3610" name="UDC" dev="configfs" ino=85857 res=0 errno=0 [ 856.426810][ T5713] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 856.460854][ T5713] usb 6-1: device descriptor read/8, error -71 [ 856.726701][ T5713] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 856.757687][ T5713] usb 6-1: device descriptor read/8, error -71 [ 856.867327][ T5713] usb usb6-port1: unable to enumerate USB device [ 857.016393][ T5769] usb 3-1: USB disconnect, device number 55 [ 858.732889][T16257] fuse: Unknown parameter '0x0000000000000003' [ 859.152342][ T32] audit: type=1800 audit(1787247446.179:569): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3619" name="cdrom" dev="configfs" ino=86148 res=0 errno=0 [ 859.169999][ T32] audit: type=1800 audit(1787247446.199:570): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3619" name="file" dev="configfs" ino=86149 res=0 errno=0 [ 859.200018][T16270] mass_storage.0/lun.0: file too small: file0 [ 859.210260][ T32] audit: type=1800 audit(1787247446.239:571): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3619" name="UDC" dev="configfs" ino=86150 res=0 errno=0 [ 859.806164][T16276] MTD: Couldn't look up './dev/mtdblock0': -2 [ 860.184709][ T5713] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 860.624970][T16285] fuse: Unknown parameter 'fd0x0000000000000003' [ 860.726591][ T5713] usb 3-1: device descriptor read/64, error -71 [ 861.016611][ T5713] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 861.157043][ T5713] usb 3-1: device descriptor read/64, error -71 [ 861.209259][T16295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 861.210285][T16295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 861.237093][T16295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 861.238197][T16295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 861.318102][ T5713] usb usb3-port1: attempt power cycle [ 861.434530][T16303] mass_storage.0/lun.0: file too small: file0 [ 861.446097][ T32] audit: type=1800 audit(1787247448.459:572): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3630" name="cdrom" dev="configfs" ino=85940 res=0 errno=0 [ 861.446181][ T32] audit: type=1800 audit(1787247448.459:573): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3630" name="file" dev="configfs" ino=85941 res=0 errno=0 [ 861.446683][ T32] audit: type=1800 audit(1787247448.469:574): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3630" name="UDC" dev="configfs" ino=85942 res=0 errno=0 [ 861.696408][ T5713] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 861.717331][ T5713] usb 3-1: device descriptor read/8, error -71 [ 861.871483][T16311] MTD: Couldn't look up './dev/mtdblock0': -2 [ 861.967896][ T5713] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 861.989096][T16315] netlink: 884 bytes leftover after parsing attributes in process `syz.0.3633'. [ 862.000895][ T5713] usb 3-1: device descriptor read/8, error -71 [ 862.107110][ T5713] usb usb3-port1: unable to enumerate USB device [ 863.266604][T12171] Bluetooth: hci1: command 0x0c1a tx timeout [ 863.266677][T12171] Bluetooth: hci0: command 0x041b tx timeout [ 863.280341][T13052] Bluetooth: hci3: command 0x0406 tx timeout [ 863.280383][T13052] Bluetooth: hci2: command 0x0406 tx timeout [ 863.321069][T16325] fuse: Unknown parameter 'fd0x0000000000000003' [ 863.539705][ T32] audit: type=1800 audit(1787247450.569:575): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3642" name="cdrom" dev="configfs" ino=85998 res=0 errno=0 [ 863.562931][ T32] audit: type=1800 audit(1787247450.599:576): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3642" name="file" dev="configfs" ino=85999 res=0 errno=0 [ 863.570114][T16336] mass_storage.0/lun.0: file too small: file0 [ 863.592569][ T32] audit: type=1800 audit(1787247450.619:577): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3642" name="UDC" dev="configfs" ino=86000 res=0 errno=0 [ 864.662583][T16347] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3645'. [ 865.006531][ T5713] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 865.041941][T16360] fuse: Unknown parameter 'fd0x0000000000000003' [ 865.152231][ T32] audit: type=1800 audit(1787247452.179:578): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3652" name="cdrom" dev="configfs" ino=86324 res=0 errno=0 [ 865.173227][ T32] audit: type=1800 audit(1787247452.189:579): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3652" name="file" dev="configfs" ino=86325 res=0 errno=0 [ 865.194097][ T5713] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 865.205710][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.216446][ T5713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 865.216490][ T5713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 865.216517][ T5713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 865.216541][ T5713] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.216564][ T5713] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 865.275962][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.276016][ T5713] usb 6-1: Product: syz [ 865.276059][ T5713] usb 6-1: Manufacturer: syz [ 865.276082][ T5713] usb 6-1: SerialNumber: syz [ 865.302963][T16353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.303259][T16353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.303522][T16353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.328553][ T5713] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 865.338216][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 865.346395][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 865.356522][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 865.364422][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 865.372368][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 865.372462][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 865.391049][ T5713] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 865.402519][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 865.410656][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 865.418565][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 865.418649][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 865.418728][ T5713] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 865.450016][ T5713] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 865.700507][ T32] audit: type=1800 audit(1787247452.729:580): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3655" name="cdrom" dev="configfs" ino=87139 res=0 errno=0 [ 865.723410][ T32] audit: type=1800 audit(1787247452.749:581): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3655" name="file" dev="configfs" ino=87140 res=0 errno=0 [ 865.752949][T16372] mass_storage.0/lun.0: file too small: file0 [ 865.819845][ T5713] usb 6-1: USB disconnect, device number 37 [ 866.723232][ T5713] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 866.740633][ T5713] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 866.751763][ T5713] keyspan 6-1:1.0: device disconnected [ 866.808508][T16378] netlink: zone id is out of range [ 866.813915][T16378] netlink: zone id is out of range [ 866.819453][T16378] netlink: zone id is out of range [ 866.824826][T16378] netlink: zone id is out of range [ 866.830179][T16378] netlink: zone id is out of range [ 866.835508][T16378] netlink: zone id is out of range [ 866.841247][T16378] netlink: zone id is out of range [ 866.846871][T16378] netlink: zone id is out of range [ 866.852166][T16378] netlink: zone id is out of range [ 866.857658][T16378] netlink: zone id is out of range [ 866.991685][ T32] kauditd_printk_skb: 1 callbacks suppressed [ 866.991757][ T32] audit: type=1800 audit(1787247454.019:583): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3660" name="zoned" dev="configfs" ino=87157 res=0 errno=0 [ 867.460042][ T32] audit: type=1800 audit(1787247454.489:584): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3667" name="cdrom" dev="configfs" ino=86499 res=0 errno=0 [ 867.481132][ T5713] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 867.497965][ T32] audit: type=1800 audit(1787247454.529:585): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3667" name="file" dev="configfs" ino=86500 res=0 errno=0 [ 867.638723][ T5713] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 867.650992][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.651067][ T5713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 867.651114][ T5713] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.692945][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 867.701429][ T5713] usb 6-1: Product: syz [ 867.701457][ T5713] usb 6-1: Manufacturer: syz [ 867.726184][T16392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 867.739240][ T5713] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 867.780080][ T5713] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 867.950792][ T5698] usb 6-1: USB disconnect, device number 38 [ 867.974935][ T5698] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 867.990349][ T5698] garmin_gps 6-1:1.0: device disconnected [ 868.016702][ T5769] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 868.567273][ T5769] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 868.660040][T16411] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3671'. [ 868.696686][ T5769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.696748][ T5769] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 868.696777][ T5769] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 868.696802][ T5769] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 868.696828][ T5769] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 868.696851][ T5769] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 869.048758][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.048810][ T5769] usb 3-1: Product: syz [ 869.048848][ T5769] usb 3-1: Manufacturer: syz [ 869.048870][ T5769] usb 3-1: SerialNumber: syz [ 869.074116][T16404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 869.074256][T16404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 869.074365][T16404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 869.080035][ T5769] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 869.080607][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 869.080684][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 869.085906][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 869.086122][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 869.086786][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 869.087094][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 869.097621][ T5769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 869.137415][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 869.137653][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 869.138189][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 869.138401][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 869.139049][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 869.172739][ T5769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 869.509310][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3674'. [ 869.596078][ T5713] usb 3-1: USB disconnect, device number 60 [ 869.603059][ T32] audit: type=1800 audit(1787247456.619:586): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3676" name="cdrom" dev="configfs" ino=86537 res=0 errno=0 [ 869.630237][ T32] audit: type=1800 audit(1787247456.649:587): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3676" name="file" dev="configfs" ino=86538 res=0 errno=0 [ 869.662128][ T5713] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 869.689864][ T5713] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 869.700718][ T5713] keyspan 3-1:1.0: device disconnected [ 870.150734][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.157391][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.208497][T13699] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 870.393041][T13699] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 870.437340][T13699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.437387][T13699] usb 6-1: config 0 has no interfaces? [ 870.437438][T13699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.505228][T13699] usb 6-1: config 0 descriptor?? [ 870.966675][ T5713] usb 6-1: USB disconnect, device number 39 [ 871.311072][ T32] audit: type=1326 audit(1787247458.339:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.0.3684" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb09659e0d9 code=0x0 [ 871.446974][ T5769] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 871.612967][ T5769] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 871.626162][ T5769] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.659165][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.659225][ T5769] usb 4-1: Product: syz [ 871.659242][ T5769] usb 4-1: Manufacturer: syz [ 871.659259][ T5769] usb 4-1: SerialNumber: syz [ 871.703625][ T5769] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 871.709182][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 871.709391][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 871.723483][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 871.723733][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 871.723840][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 871.723923][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 871.724001][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 871.724080][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 871.745109][ T5769] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 871.789494][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 871.791573][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 871.793529][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 871.793759][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 871.793980][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 871.794194][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 871.872610][ T5769] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 872.089223][ T5698] usb 4-1: USB disconnect, device number 79 [ 872.108367][ T5698] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 872.125317][ T5698] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 872.129755][ T5713] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 872.142962][ T5698] keyspan 4-1:1.0: device disconnected [ 872.288769][ T5713] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 872.300967][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.301036][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 872.301127][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 872.301200][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 872.301279][ T5713] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.301834][ T5713] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 872.313513][ T5720] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 872.386843][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.386889][ T5713] usb 3-1: Product: syz [ 872.386907][ T5713] usb 3-1: Manufacturer: syz [ 872.386925][ T5713] usb 3-1: SerialNumber: syz [ 872.414698][T16453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 872.428691][T16453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 872.436611][T16453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 872.447643][ T5713] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 872.449111][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 872.449338][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 872.454877][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 872.455099][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 872.455190][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 872.455607][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 872.473847][ T5713] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 872.485321][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 872.485623][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 872.485870][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 872.486070][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 872.494199][ T5713] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 872.556847][ T5720] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 872.570982][ T5720] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 872.571041][ T5720] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 872.571064][ T5720] usb 6-1: config 0 has no interface number 0 [ 872.571975][ T5720] usb 6-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.572068][ T5720] usb 6-1: config 0 interface 168 has no altsetting 0 [ 872.573176][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.576050][ T5713] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 872.637522][ T5720] usb 6-1: config 0 descriptor?? [ 872.664186][ T5720] usbhid 6-1:0.168: couldn't find an input interrupt endpoint [ 872.808159][T16462] No source specified [ 872.857287][ T5769] usb 3-1: USB disconnect, device number 61 [ 872.873871][ T5769] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 872.897296][ T5769] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 872.910742][ T5769] keyspan 3-1:1.0: device disconnected [ 872.972856][ T60] IPVS: starting estimator thread 0... [ 873.015653][T13743] usb 6-1: USB disconnect, device number 40 [ 873.066993][T16467] IPVS: using max 28 ests per chain, 67200 per kthread [ 873.173372][T16471] net_ratelimit: 21 callbacks suppressed [ 873.180593][T16471] netlink: zone id is out of range [ 873.180632][T16471] netlink: zone id is out of range [ 873.180675][T16471] netlink: zone id is out of range [ 873.180689][T16471] netlink: zone id is out of range [ 873.180702][T16471] netlink: zone id is out of range [ 873.180716][T16471] netlink: zone id is out of range [ 873.180729][T16471] netlink: zone id is out of range [ 873.180743][T16471] netlink: zone id is out of range [ 873.181056][T16471] netlink: zone id is out of range [ 873.181072][T16471] netlink: set zone limit has 4 unknown bytes [ 873.516819][T13743] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 873.614382][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3701'. [ 873.678671][T13743] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 873.692937][T13743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.703473][T13743] usb 4-1: config 0 has no interfaces? [ 873.709271][T13743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.721006][T13743] usb 4-1: config 0 descriptor?? [ 873.887903][ T5720] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 873.942551][T13743] usb 4-1: USB disconnect, device number 80 [ 874.042929][ T5720] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 874.052555][ T5720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.052618][ T5720] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 874.052646][ T5720] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.052669][ T5720] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 874.080382][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.080466][ T5720] usb 6-1: Product: syz [ 874.080515][ T5720] usb 6-1: Manufacturer: syz [ 874.080557][ T5720] usb 6-1: SerialNumber: syz [ 874.128281][T16484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 874.140900][ T5720] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 874.141733][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 874.141970][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 874.170745][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 874.170965][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 874.171189][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 874.171402][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 874.171609][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 874.189846][ T5720] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 874.215806][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 874.216049][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 874.219497][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 874.221022][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 874.222222][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 874.222456][ T5720] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 874.234186][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 874.280993][ T5720] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 874.488880][ T5713] usb 6-1: USB disconnect, device number 41 [ 874.514591][ T5713] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 874.539818][ T5713] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 874.554558][ T5713] keyspan 6-1:1.0: device disconnected [ 875.387470][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 875.436603][T13743] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 875.588631][T13743] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 875.603743][T13743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.603800][T13743] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 875.603840][T13743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.633090][T13743] usb 1-1: config 0 descriptor?? [ 875.649374][ T32] audit: type=1800 audit(1787247462.669:589): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3727" name="zoned" dev="configfs" ino=87647 res=0 errno=0 [ 875.854048][ T5713] usb 1-1: USB disconnect, device number 81 [ 875.967628][T13743] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 876.127799][T13743] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 876.138509][T13743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.138591][T13743] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 876.138626][T13743] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 876.138654][T13743] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 876.189273][T13743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.189325][T13743] usb 4-1: Product: syz [ 876.189361][T13743] usb 4-1: Manufacturer: syz [ 876.189383][T13743] usb 4-1: SerialNumber: syz [ 876.222776][T16547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 876.234468][T13743] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 876.242482][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 876.251462][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 876.261480][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 876.269885][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 876.277771][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 876.285595][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 876.294354][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 876.304453][T13743] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 876.315590][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 876.323653][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 876.331564][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 876.339510][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 876.347373][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 876.347467][T13743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 876.365232][T13743] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 876.724371][T13743] usb 4-1: USB disconnect, device number 81 [ 876.739748][T13743] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 876.764539][T13743] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 876.778721][T13743] keyspan 4-1:1.0: device disconnected [ 877.415484][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 877.679067][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3742'. [ 877.890340][ T32] audit: type=1800 audit(1787247464.919:590): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3744" name="cdrom" dev="configfs" ino=86861 res=0 errno=0 [ 877.913168][ T32] audit: type=1800 audit(1787247464.939:591): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3744" name="file" dev="configfs" ino=86862 res=0 errno=0 [ 878.076814][ T9] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 878.176599][ T5720] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 878.240433][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 878.253414][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.253463][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 878.253521][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.285399][ T9] usb 6-1: config 0 descriptor?? [ 878.349451][ T5720] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 878.365123][ T5720] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 878.365192][ T5720] usb 1-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 878.365277][ T5720] usb 1-1: config 0 has no interface number 0 [ 878.365399][ T5720] usb 1-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.365495][ T5720] usb 1-1: config 0 interface 168 has no altsetting 0 [ 878.365593][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.374182][ T5720] usb 1-1: config 0 descriptor?? [ 878.433924][ T5720] usbhid 1-1:0.168: couldn't find an input interrupt endpoint [ 878.499914][T13743] usb 6-1: USB disconnect, device number 42 [ 878.672066][ T60] IPVS: starting estimator thread 0... [ 878.682910][T13743] usb 1-1: USB disconnect, device number 82 [ 878.766662][T16600] IPVS: using max 29 ests per chain, 69600 per kthread [ 878.816730][ T5769] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 878.967062][ T5769] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 878.972019][ T5769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.972145][ T5769] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 878.972217][ T5769] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.972282][ T5769] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 879.023183][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.023246][ T5769] usb 3-1: Product: syz [ 879.023266][ T5769] usb 3-1: Manufacturer: syz [ 879.023321][ T5769] usb 3-1: SerialNumber: syz [ 879.049061][T16598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.068675][ T5769] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 879.071859][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 879.074083][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 879.093122][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 879.093312][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 879.093542][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 879.093768][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 879.095982][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 879.116170][ T5769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 879.149112][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 879.149294][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 879.155879][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 879.156140][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 879.164647][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 879.164784][ T5769] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 879.215755][ T5769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 879.363358][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3751'. [ 879.596977][ T5769] usb 3-1: USB disconnect, device number 62 [ 879.621264][ T5769] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 879.645267][ T5769] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 879.671365][ T5769] keyspan 3-1:1.0: device disconnected [ 880.301178][ T32] audit: type=1800 audit(1787247467.329:592): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3758" name="zoned" dev="configfs" ino=87797 res=0 errno=0 [ 880.476543][ T5713] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 880.627565][ T5713] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 880.639147][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.639216][ T5713] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 880.639290][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.657002][ T5713] usb 1-1: config 0 descriptor?? [ 880.667960][ T5769] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 880.828603][ T5769] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 880.841206][ T5769] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 880.850174][ T5769] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 880.850204][ T5769] usb 6-1: config 0 has no interface number 0 [ 880.850248][ T5769] usb 6-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.850278][ T5769] usb 6-1: config 0 interface 168 has no altsetting 0 [ 880.850316][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.883426][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'. [ 880.911952][ T5769] usb 6-1: config 0 descriptor?? [ 880.933402][ T5769] usbhid 6-1:0.168: couldn't find an input interrupt endpoint [ 880.945698][ T5713] usb 1-1: USB disconnect, device number 83 [ 881.218984][ T5713] usb 6-1: USB disconnect, device number 43 [ 881.588805][ T5769] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 881.757747][ T5769] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 881.771356][ T5769] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.781983][ T5769] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 881.782022][ T5769] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 881.782049][ T5769] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 881.782073][ T5769] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 881.835815][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.835864][ T5769] usb 4-1: Product: syz [ 881.835902][ T5769] usb 4-1: Manufacturer: syz [ 881.835923][ T5769] usb 4-1: SerialNumber: syz [ 881.867714][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.875904][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.886017][ T5769] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 881.894227][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 881.902408][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 881.913046][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 881.921140][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 881.929592][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 881.929686][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 881.949183][ T5769] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 881.967963][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 881.976522][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 881.984525][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 881.984641][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 881.984727][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 881.984812][ T5769] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 882.020983][ T5769] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 882.448412][ T5698] usb 4-1: USB disconnect, device number 82 [ 882.483783][ T5698] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 882.508532][ T5698] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 882.518585][ T5698] keyspan 4-1:1.0: device disconnected [ 882.763136][ T32] audit: type=1800 audit(1787247469.789:593): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3773" name="zoned" dev="configfs" ino=86956 res=0 errno=0 [ 882.848454][ T5705] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 883.009771][ T5705] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 883.022164][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.034152][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.050136][ T5705] usb 3-1: config 0 descriptor?? [ 883.056701][ T5769] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 883.219816][ T5769] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 883.233723][ T5769] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.246574][ T5769] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 883.256970][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.264759][ T32] audit: type=1800 audit(1787247470.289:594): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3776" name="cdrom" dev="configfs" ino=87859 res=0 errno=0 [ 883.270030][ T32] audit: type=1800 audit(1787247470.299:595): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3776" name="file" dev="configfs" ino=87860 res=0 errno=0 [ 883.275966][ T32] audit: type=1800 audit(1787247470.299:596): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3776" name="UDC" dev="configfs" ino=87861 res=0 errno=0 [ 883.333529][ T5705] usbhid 3-1:0.0: can't add hid device: -71 [ 883.333834][ T5705] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 883.341423][ T5698] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 883.348123][ T5769] usb 1-1: config 0 descriptor?? [ 883.385269][ T5705] usb 3-1: USB disconnect, device number 63 [ 883.528503][ T5698] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 883.538749][ T5698] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 883.538800][ T5698] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 883.538834][ T5698] usb 4-1: config 0 has no interface number 0 [ 883.538880][ T5698] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.538990][ T5698] usb 4-1: config 0 interface 168 has no altsetting 0 [ 883.539086][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.567399][ T5698] usb 4-1: config 0 descriptor?? [ 883.616160][ T5698] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 883.632114][ T5698] usb 1-1: USB disconnect, device number 84 [ 883.820090][ T5705] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 883.900773][ T5698] usb 4-1: USB disconnect, device number 83 [ 883.977196][ T5705] usb 3-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 883.987916][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.000351][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.012967][ T5705] usb 3-1: config 0 descriptor?? [ 884.604972][T16692] jffs2: notice: (16692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 884.939820][ T32] audit: type=1800 audit(1787247471.969:597): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3785" name="cdrom" dev="configfs" ino=87915 res=0 errno=0 [ 884.944857][ T32] audit: type=1800 audit(1787247471.969:598): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3785" name="file" dev="configfs" ino=87916 res=0 errno=0 [ 884.955690][ T32] audit: type=1800 audit(1787247471.969:599): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3785" name="UDC" dev="configfs" ino=87917 res=0 errno=0 [ 885.637084][ T5698] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 885.684406][ T5705] usbhid 3-1:0.0: can't add hid device: -71 [ 885.691554][ T5705] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 885.704331][ T5705] usb 3-1: USB disconnect, device number 64 [ 885.802969][ T5698] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 885.855533][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.855599][ T5698] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 885.858039][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.898937][ T5698] usb 1-1: config 0 descriptor?? [ 886.033326][ T32] audit: type=1326 audit(1787247473.059:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16710 comm="syz.2.3788" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f760799e0d9 code=0x0 [ 886.196773][ T5705] usb 1-1: USB disconnect, device number 85 [ 886.272261][ T32] audit: type=1800 audit(1787247473.299:601): pid=16718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3791" name="cdrom" dev="configfs" ino=87946 res=0 errno=0 [ 886.279556][ T32] audit: type=1800 audit(1787247473.299:602): pid=16718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3791" name="file" dev="configfs" ino=87005 res=0 errno=0 [ 886.326607][T13699] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 886.488271][T13699] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 886.499055][T13699] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 886.499107][T13699] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 886.499144][T13699] usb 4-1: config 0 has no interface number 0 [ 886.499189][T13699] usb 4-1: config 0 interface 168 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 886.499223][T13699] usb 4-1: config 0 interface 168 has no altsetting 0 [ 886.499264][T13699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.571476][T13699] usb 4-1: config 0 descriptor?? [ 886.614330][T13699] usbhid 4-1:0.168: couldn't find an input interrupt endpoint [ 886.846567][T13743] usb 4-1: USB disconnect, device number 84 [ 887.196665][ T5713] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 887.348812][ T5713] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 887.368635][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.368716][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.401914][ T5713] usb 3-1: config 0 descriptor?? [ 887.644471][ T5713] usbhid 3-1:0.0: can't add hid device: -71 [ 887.644603][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 887.655523][ T5713] usb 3-1: USB disconnect, device number 65 [ 888.056765][ T5698] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 888.166449][ T5713] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 888.217430][ T5698] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 888.230065][ T5698] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.230112][ T5698] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 888.230177][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.249749][ T5698] usb 6-1: config 0 descriptor?? [ 888.317772][ T5713] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 888.323074][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.323228][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.349740][ T5713] usb 3-1: config 0 descriptor?? [ 888.474394][T13743] usb 6-1: USB disconnect, device number 44 [ 888.604718][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 888.606170][ T32] audit: type=1800 audit(1787247475.629:608): pid=16767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3807" name="cdrom" dev="configfs" ino=88096 res=0 errno=0 [ 888.636986][ T32] audit: type=1800 audit(1787247475.669:609): pid=16767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3807" name="file" dev="configfs" ino=88097 res=0 errno=0 [ 888.669404][ T32] audit: type=1800 audit(1787247475.699:610): pid=16767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3807" name="UDC" dev="configfs" ino=88013 res=0 errno=0 [ 889.169590][ T5713] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 889.180728][ T5713] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input100 [ 889.541374][ T32] audit: type=1800 audit(1787247476.569:611): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3812" name="cdrom" dev="configfs" ino=88121 res=0 errno=0 [ 889.568937][ T32] audit: type=1800 audit(1787247476.599:612): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3812" name="file" dev="configfs" ino=88122 res=0 errno=0 [ 889.621074][ T5713] usb 3-1: USB disconnect, device number 66 [ 889.621253][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 890.146572][ T5713] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 890.201246][ T32] audit: type=1800 audit(1787247477.229:613): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3821" name="cdrom" dev="configfs" ino=88164 res=0 errno=0 [ 890.223407][ T32] audit: type=1800 audit(1787247477.249:614): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3821" name="file" dev="configfs" ino=89093 res=0 errno=0 [ 890.247511][ T32] audit: type=1800 audit(1787247477.279:615): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3821" name="UDC" dev="configfs" ino=89094 res=0 errno=0 [ 890.298070][ T5713] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 890.312671][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.312726][ T5713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 890.312860][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.343861][ T5713] usb 1-1: config 0 descriptor?? [ 890.357965][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 890.358036][ T5713] dvb-usb: bulk message failed: -22 (3/0) [ 890.376039][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 890.378611][ C1] ================================================================== ** replaying previous printk message ** [ 890.378611][ C1] ================================================================== [ 890.378663][ C1] BUG: KASAN: slab-use-after-free in dummy_timer+0x340d/0x4cf0 [ 890.378780][ C1] Read of size 1 at addr ffff88807ac49cda by task udevd/4983 [ 890.378843][ C1] [ 890.378893][ C1] CPU: 1 UID: 0 PID: 4983 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 890.378965][ C1] Tainted: [L]=SOFTLOCKUP [ 890.378995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.379045][ C1] Call Trace: [ 890.379074][ C1] [ 890.379105][ C1] dump_stack_lvl+0xe8/0x150 [ 890.379204][ C1] print_address_description+0x55/0x1e0 [ 890.379331][ C1] ? dummy_timer+0x340d/0x4cf0 [ 890.379409][ C1] print_report+0x58/0x70 [ 890.379495][ C1] kasan_report+0x117/0x150 [ 890.379600][ C1] ? dummy_timer+0x340d/0x4cf0 [ 890.379685][ C1] dummy_timer+0x340d/0x4cf0 [ 890.379794][ C1] ? check_buffer+0x257/0x860 [ 890.379925][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 890.380014][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 890.380105][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 890.380197][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 890.380281][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 890.380388][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 890.380483][ C1] handle_softirqs+0x226/0x860 [ 890.380570][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 890.380644][ C1] __irq_exit_rcu+0xcb/0x220 [ 890.380714][ C1] irq_exit_rcu+0x9/0x30 [ 890.380775][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 890.380955][ C1] [ 890.380977][ C1] [ 890.380991][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 890.381082][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 890.381153][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 d7 56 5a 0a e8 22 fa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 890.381204][ C1] RSP: 0018:ffffc90002e6f160 EFLAGS: 00000206 [ 890.381286][ C1] RAX: 0000000000a47e5f RBX: ffff8880b853c9e0 RCX: 8000000000000001 [ 890.381317][ C1] RDX: 0000000000000007 RSI: ffffffff8e586ce4 RDI: ffffffff8c6edc80 [ 890.381361][ C1] RBP: ffffc90002e6f1b0 R08: ffffffff909ba57f R09: 1ffffffff21374af [ 890.381405][ C1] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff88807e525dc0 [ 890.381455][ C1] R13: ffff88807e525dc0 R14: dffffc0000000000 R15: 1ffff110170a793c [ 890.381539][ C1] __schedule+0x1b5f/0x5bc0 [ 890.381624][ C1] ? lock_acquire+0x115/0x350 [ 890.381718][ C1] ? __lock_acquire+0x6df/0x2e50 [ 890.381814][ C1] ? __lock_acquire+0x6df/0x2e50 [ 890.381939][ C1] ? __lock_acquire+0x6df/0x2e50 [ 890.382022][ C1] ? __pfx___schedule+0x10/0x10 [ 890.382108][ C1] ? __lock_acquire+0x6df/0x2e50 [ 890.382207][ C1] preempt_schedule_irq+0x4b/0x90 [ 890.382285][ C1] irqentry_exit+0x14f/0x910 [ 890.382353][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 890.382417][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 890.382512][ C1] Code: ff ff ff e8 40 81 4a 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 0c 16 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d e7 9a fb [ 890.382563][ C1] RSP: 0018:ffffc90002e6f4e0 EFLAGS: 00000292 [ 890.382622][ C1] RAX: 8a933035900f0c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 890.382673][ C1] RDX: 000000004af5f718 RSI: ffffffff8e80f067 RDI: ffffffff8c6edc80 [ 890.382708][ C1] RBP: ffff88807e525dc0 R08: 8c00000000000000 R09: 0000000000000000 [ 890.382743][ C1] R10: 0000000000000000 R11: ffffffff8ef5ca60 R12: ffffffff8ef5ca60 [ 890.382785][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 890.382874][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 890.382952][ C1] ? unwind_next_frame+0x8f/0x2550 [ 890.383027][ C1] unwind_next_frame+0xac/0x2550 [ 890.383082][ C1] ? unwind_next_frame+0x8f/0x2550 [ 890.383139][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 890.383235][ C1] ? unwind_next_frame+0x8f/0x2550 [ 890.383317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 890.383411][ C1] arch_stack_walk+0x11b/0x150 [ 890.383480][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 890.383558][ C1] stack_trace_save+0xa9/0x100 [ 890.383641][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 890.383734][ C1] ? stack_trace_save+0xa9/0x100 [ 890.383809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 890.383939][ C1] kasan_save_track+0x3e/0x80 [ 890.384020][ C1] ? kasan_save_track+0x3e/0x80 [ 890.384103][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 890.384183][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 890.384335][ C1] __kasan_kmalloc+0x93/0xb0 [ 890.384430][ C1] __kmalloc_noprof+0x36b/0x720 [ 890.384498][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 890.384527][ C1] ? tomoyo_encode+0x2ad/0x570 [ 890.384564][ C1] ? tomoyo_encode+0x2ad/0x570 [ 890.384603][ C1] tomoyo_encode+0x2ad/0x570 [ 890.384643][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 890.384688][ C1] tomoyo_path_perm+0x283/0x560 [ 890.384717][ C1] ? tomoyo_path_perm+0x251/0x560 [ 890.384746][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 890.384775][ C1] ? __x64_sys_openat+0x138/0x170 [ 890.384835][ C1] security_inode_getattr+0x12b/0x310 [ 890.384865][ C1] __x64_sys_newfstat+0x133/0x270 [ 890.384944][ C1] ? do_sys_openat2+0x14e/0x200 [ 890.385006][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 890.385129][ C1] do_syscall_64+0x166/0x520 [ 890.385192][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.385256][ C1] ? clear_bhb_loop+0x70/0xc0 [ 890.385321][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.385382][ C1] RIP: 0033:0x7ff299511ad7 [ 890.385444][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 890.385498][ C1] RSP: 002b:00007ffcb05e9718 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 890.385563][ C1] RAX: ffffffffffffffda RBX: 000055c4134987f0 RCX: 00007ff299511ad7 [ 890.385614][ C1] RDX: 00007ff2995efea0 RSI: 00007ffcb05e9720 RDI: 000000000000000c [ 890.385656][ C1] RBP: 00007ff2995efff0 R08: 0000000000000001 R09: 0000000000000000 [ 890.385698][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 890.385732][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 000055c4134987f0 [ 890.385797][ C1] [ 890.385826][ C1] [ 890.385856][ C1] Allocated by task 10184: [ 890.385889][ C1] kasan_save_track+0x3e/0x80 [ 890.385959][ C1] __kasan_kmalloc+0x93/0xb0 [ 890.386044][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 890.386113][ C1] batadv_forw_packet_alloc+0x178/0x370 [ 890.386300][ C1] batadv_iv_ogm_queue_add+0x8b8/0xd90 [ 890.386432][ C1] batadv_iv_ogm_schedule+0x84b/0xfc0 [ 890.386524][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x622/0x740 [ 890.386610][ C1] process_scheduled_works+0xc3d/0x1630 [ 890.386676][ C1] worker_thread+0xa47/0xfb0 [ 890.386740][ C1] kthread+0x38b/0x480 [ 890.386816][ C1] ret_from_fork+0x514/0xb70 [ 890.386901][ C1] ret_from_fork_asm+0x1a/0x30 [ 890.386975][ C1] [ 890.386988][ C1] Freed by task 10180: [ 890.387019][ C1] kasan_save_track+0x3e/0x80 [ 890.387095][ C1] kasan_save_free_info+0x40/0x50 [ 890.387160][ C1] __kasan_slab_free+0x5c/0x80 [ 890.387245][ C1] kfree+0x1c5/0x650 [ 890.387314][ C1] process_scheduled_works+0xc3d/0x1630 [ 890.387381][ C1] worker_thread+0xa47/0xfb0 [ 890.387444][ C1] kthread+0x38b/0x480 [ 890.387517][ C1] ret_from_fork+0x514/0xb70 [ 890.387588][ C1] ret_from_fork_asm+0x1a/0x30 [ 890.387656][ C1] [ 890.387675][ C1] Last potentially related work creation: [ 890.387698][ C1] kasan_save_stack+0x3e/0x60 [ 890.387799][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 890.387889][ C1] insert_work+0x3d/0x330 [ 890.387940][ C1] __queue_work+0xbae/0x10d0 [ 890.388019][ C1] call_timer_fn+0x18d/0x5f0 [ 890.388080][ C1] __run_timer_base+0x67e/0x8b0 [ 890.388163][ C1] run_timer_softirq+0xb7/0x170 [ 890.388249][ C1] handle_softirqs+0x226/0x860 [ 890.388314][ C1] __irq_exit_rcu+0xcb/0x220 [ 890.388385][ C1] irq_exit_rcu+0x9/0x30 [ 890.388445][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 890.388540][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 890.388590][ C1] [ 890.388610][ C1] The buggy address belongs to the object at ffff88807ac49c00 [ 890.388610][ C1] which belongs to the cache kmalloc-512 of size 512 [ 890.388666][ C1] The buggy address is located 218 bytes inside of [ 890.388666][ C1] freed 512-byte region [ffff88807ac49c00, ffff88807ac49e00) [ 890.388730][ C1] [ 890.388753][ C1] The buggy address belongs to the physical page: [ 890.388786][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac48 [ 890.388852][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 890.388904][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 890.388966][ C1] page_type: f5(slab) [ 890.389020][ C1] raw: 00fff00000000040 ffff88813ff15c80 dead000000000100 dead000000000122 [ 890.389073][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 890.389144][ C1] head: 00fff00000000040 ffff88813ff15c80 dead000000000100 dead000000000122 [ 890.389191][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 890.389260][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 890.389314][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 890.389340][ C1] page dumped because: kasan: bad access detected [ 890.389375][ C1] page_owner tracks the page as allocated [ 890.389404][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevadm), ts 34851258719 [ 890.389502][ C1] post_alloc_hook+0x1f9/0x250 [ 890.389567][ C1] get_page_from_freelist+0x2209/0x2280 [ 890.389651][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 890.389735][ C1] allocate_slab+0x7d/0x620 [ 890.389791][ C1] refill_objects+0x2d5/0x350 [ 890.389853][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 890.389907][ C1] __kmalloc_cache_noprof+0x39b/0x600 [ 890.389981][ C1] kernfs_fop_open+0x3ac/0xce0 [ 890.390042][ C1] do_dentry_open+0x816/0x1380 [ 890.390095][ C1] vfs_open+0x3b/0x340 [ 890.390139][ C1] path_openat+0x1443/0x1d60 [ 890.390214][ C1] do_file_open+0x23e/0x4a0 [ 890.390287][ C1] do_sys_openat2+0x115/0x200 [ 890.390337][ C1] __x64_sys_openat+0x138/0x170 [ 890.390400][ C1] do_syscall_64+0x166/0x520 [ 890.390445][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.390508][ C1] page last free pid 1 tgid 1 ts 28870767808 stack trace: [ 890.390566][ C1] free_pages_prepare+0x9eb/0xaf0 [ 890.390646][ C1] __free_contig_range_common+0x174/0x340 [ 890.390701][ C1] destroy_args+0x4e5/0x570 [ 890.390885][ C1] debug_vm_pgtable+0x3f8/0x410 [ 890.390985][ C1] do_one_initcall+0x250/0x870 [ 890.391059][ C1] do_initcall_level+0x10a/0x1a0 [ 890.391198][ C1] do_initcalls+0x59/0xa0 [ 890.391275][ C1] kernel_init_freeable+0x29d/0x3e0 [ 890.391347][ C1] kernel_init+0x22/0x1d0 [ 890.391411][ C1] ret_from_fork+0x514/0xb70 [ 890.391486][ C1] ret_from_fork_asm+0x1a/0x30 [ 890.391563][ C1] [ 890.391583][ C1] Memory state around the buggy address: [ 890.391619][ C1] ffff88807ac49b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 890.391661][ C1] ffff88807ac49c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.391706][ C1] >ffff88807ac49c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.391739][ C1] ^ [ 890.391781][ C1] ffff88807ac49d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.391824][ C1] ffff88807ac49d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.391858][ C1] ================================================================== [ 890.391932][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 891.551175][ C1] CPU: 1 UID: 0 PID: 4983 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 891.561637][ C1] Tainted: [L]=SOFTLOCKUP [ 891.566028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.576106][ C1] Call Trace: [ 891.579408][ C1] [ 891.582271][ C1] vpanic+0x56d/0xa60 [ 891.586298][ C1] ? __pfx_vpanic+0x10/0x10 [ 891.590851][ C1] panic+0xc5/0xd0 [ 891.594609][ C1] ? __pfx_panic+0x10/0x10 [ 891.599064][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.603870][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.608699][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.613501][ C1] check_panic_on_warn+0x89/0xb0 [ 891.618510][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.623306][ C1] end_report+0x73/0x170 [ 891.627572][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.632371][ C1] kasan_report+0x128/0x150 [ 891.636902][ C1] ? dummy_timer+0x340d/0x4cf0 [ 891.641796][ C1] dummy_timer+0x340d/0x4cf0 [ 891.646426][ C1] ? check_buffer+0x257/0x860 [ 891.651151][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 891.656562][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 891.661553][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 891.667393][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 891.672366][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 891.677596][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 891.682749][ C1] handle_softirqs+0x226/0x860 [ 891.687544][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 891.692351][ C1] __irq_exit_rcu+0xcb/0x220 [ 891.696966][ C1] irq_exit_rcu+0x9/0x30 [ 891.701247][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 891.706920][ C1] [ 891.709880][ C1] [ 891.712842][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 891.718849][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 891.724693][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 d7 56 5a 0a e8 22 fa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 891.744325][ C1] RSP: 0018:ffffc90002e6f160 EFLAGS: 00000206 [ 891.750422][ C1] RAX: 0000000000a47e5f RBX: ffff8880b853c9e0 RCX: 8000000000000001 [ 891.758456][ C1] RDX: 0000000000000007 RSI: ffffffff8e586ce4 RDI: ffffffff8c6edc80 [ 891.766462][ C1] RBP: ffffc90002e6f1b0 R08: ffffffff909ba57f R09: 1ffffffff21374af [ 891.774464][ C1] R10: dffffc0000000000 R11: fffffbfff21374b0 R12: ffff88807e525dc0 [ 891.782462][ C1] R13: ffff88807e525dc0 R14: dffffc0000000000 R15: 1ffff110170a793c [ 891.790467][ C1] __schedule+0x1b5f/0x5bc0 [ 891.795006][ C1] ? lock_acquire+0x115/0x350 [ 891.799724][ C1] ? __lock_acquire+0x6df/0x2e50 [ 891.804690][ C1] ? __lock_acquire+0x6df/0x2e50 [ 891.809663][ C1] ? __lock_acquire+0x6df/0x2e50 [ 891.814810][ C1] ? __pfx___schedule+0x10/0x10 [ 891.819718][ C1] ? __lock_acquire+0x6df/0x2e50 [ 891.824691][ C1] preempt_schedule_irq+0x4b/0x90 [ 891.829747][ C1] irqentry_exit+0x14f/0x910 [ 891.834363][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 891.839840][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 891.845155][ C1] Code: ff ff ff e8 40 81 4a 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 0c 16 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d e7 9a fb [ 891.864871][ C1] RSP: 0018:ffffc90002e6f4e0 EFLAGS: 00000292 [ 891.870980][ C1] RAX: 8a933035900f0c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 891.878999][ C1] RDX: 000000004af5f718 RSI: ffffffff8e80f067 RDI: ffffffff8c6edc80 [ 891.887001][ C1] RBP: ffff88807e525dc0 R08: 8c00000000000000 R09: 0000000000000000 [ 891.895003][ C1] R10: 0000000000000000 R11: ffffffff8ef5ca60 R12: ffffffff8ef5ca60 [ 891.902990][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 891.911016][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 891.916075][ C1] ? unwind_next_frame+0x8f/0x2550 [ 891.921215][ C1] unwind_next_frame+0xac/0x2550 [ 891.926186][ C1] ? unwind_next_frame+0x8f/0x2550 [ 891.931317][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 891.936110][ C1] ? unwind_next_frame+0x8f/0x2550 [ 891.941239][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 891.947421][ C1] arch_stack_walk+0x11b/0x150 [ 891.952211][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 891.957264][ C1] stack_trace_save+0xa9/0x100 [ 891.962086][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 891.967505][ C1] ? stack_trace_save+0xa9/0x100 [ 891.972486][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 891.977886][ C1] kasan_save_track+0x3e/0x80 [ 891.982625][ C1] ? kasan_save_track+0x3e/0x80 [ 891.987502][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 891.992292][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 891.997360][ C1] __kasan_kmalloc+0x93/0xb0 [ 892.001980][ C1] __kmalloc_noprof+0x36b/0x720 [ 892.006861][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 892.011958][ C1] ? tomoyo_encode+0x2ad/0x570 [ 892.016756][ C1] ? tomoyo_encode+0x2ad/0x570 [ 892.021587][ C1] tomoyo_encode+0x2ad/0x570 [ 892.026214][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 892.031893][ C1] tomoyo_path_perm+0x283/0x560 [ 892.036799][ C1] ? tomoyo_path_perm+0x251/0x560 [ 892.041861][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 892.047252][ C1] ? __x64_sys_openat+0x138/0x170 [ 892.052313][ C1] security_inode_getattr+0x12b/0x310 [ 892.057733][ C1] __x64_sys_newfstat+0x133/0x270 [ 892.062779][ C1] ? do_sys_openat2+0x14e/0x200 [ 892.067751][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 892.073348][ C1] do_syscall_64+0x166/0x520 [ 892.077962][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.084046][ C1] ? clear_bhb_loop+0x70/0xc0 [ 892.088745][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.094676][ C1] RIP: 0033:0x7ff299511ad7 [ 892.099111][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 892.118741][ C1] RSP: 002b:00007ffcb05e9718 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 892.127181][ C1] RAX: ffffffffffffffda RBX: 000055c4134987f0 RCX: 00007ff299511ad7 [ 892.135202][ C1] RDX: 00007ff2995efea0 RSI: 00007ffcb05e9720 RDI: 000000000000000c [ 892.143301][ C1] RBP: 00007ff2995efff0 R08: 0000000000000001 R09: 0000000000000000 [ 892.151290][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 892.159282][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 000055c4134987f0 [ 892.167286][ C1] [ 892.170936][ C1] Kernel Offset: disabled [ 892.175284][ C1] Rebooting in 86400 seconds..