last executing test programs: 6.669112531s ago: executing program 1 (id=1336): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000050004"], 0x48}}, 0x0) 6.252594489s ago: executing program 1 (id=1342): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 5.561316326s ago: executing program 0 (id=1346): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) socket$inet6_sctp(0xa, 0x0, 0x84) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) 5.243132399s ago: executing program 2 (id=1348): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x1000000, 0x3}]}]}, {0x0, [0x61, 0x0, 0x30, 0x2e]}}, 0x0, 0x36}, 0x28) 4.997503519s ago: executing program 3 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.980157747s ago: executing program 1 (id=1351): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000004c0), &(0x7f0000000000)=r0}, 0x20) 4.738499233s ago: executing program 2 (id=1352): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x30020080) 4.688330763s ago: executing program 1 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) socket$alg(0x26, 0x5, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x3, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x20002, 0xa, 0x4, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x161c8, 0x6, 0x7fc, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000002, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x2, 0x100, 0xa5d1, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r3}, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x1000009, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r9, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) sendmsg$nl_generic(r0, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) 4.402776667s ago: executing program 3 (id=1354): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 4.102720961s ago: executing program 2 (id=1355): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_clone(0x4000000, &(0x7f0000000140)="2b5f660ab172daa1091b743c309776fd81787c07d6e921299b6fd009756b445ac54bc95b4b7648c62b4942d6194b9bf16a25d5fe4a7f4ae8a96d", 0x3a, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 3.772843002s ago: executing program 0 (id=1356): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="08ea6180ee23", 0x6, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000002500)=""/4096, 0x1000) 3.397014619s ago: executing program 3 (id=1357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 3.396884629s ago: executing program 0 (id=1358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 3.315079518s ago: executing program 0 (id=1359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.405644195s ago: executing program 4 (id=1361): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 2.277884971s ago: executing program 3 (id=1362): unshare(0x2c020400) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x5, 0x0, 0x0) 1.983162563s ago: executing program 2 (id=1363): r0 = socket$pppoe(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.982888681s ago: executing program 0 (id=1364): ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c000000", 0x4) 1.50309432s ago: executing program 0 (id=1365): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1.501742101s ago: executing program 1 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) 1.479641072s ago: executing program 2 (id=1367): mmap(&(0x7f0000e80000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) 1.203290494s ago: executing program 3 (id=1368): listns(&(0x7f0000000180)={0x20, 0x0, 0x4, 0x2000000}, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0) 1.203102901s ago: executing program 4 (id=1369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 949.87039ms ago: executing program 3 (id=1370): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 949.559936ms ago: executing program 4 (id=1371): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x1, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x7, @broadcast, 0x6, "bbe4abe2458c5e"}]}}}}}}}}, 0x0) 812.244205ms ago: executing program 2 (id=1372): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 734.124711ms ago: executing program 4 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 495.139375ms ago: executing program 4 (id=1374): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x84100) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000100)=0x80000000) 494.994447ms ago: executing program 1 (id=1375): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 4 (id=1376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) kernel console output (not intermixed with test programs): 233840][ T5643] Bluetooth: hci0: command tx timeout [ 80.239921][ T5638] Bluetooth: hci4: command tx timeout [ 80.248636][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.312539][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.330115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.354207][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.406032][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.564941][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.578597][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.595861][ T5650] veth0_macvtap: entered promiscuous mode [ 80.629064][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.630233][ T5650] veth1_macvtap: entered promiscuous mode [ 80.655688][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.746333][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.800951][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.846066][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.853955][ T5737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8'. [ 80.871584][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.906335][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.942156][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.210038][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.245788][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.353462][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.375464][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.655433][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 81.726757][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 82.002821][ T5765] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.297793][ T5641] Bluetooth: hci2: command tx timeout [ 82.298554][ T5643] Bluetooth: hci3: command tx timeout [ 82.303396][ T5638] Bluetooth: hci0: command tx timeout [ 82.309529][ T5643] Bluetooth: hci4: command tx timeout [ 82.309555][ T5643] Bluetooth: hci1: command tx timeout [ 82.372629][ T5702] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 82.400674][ T5702] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.424324][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.434231][ T5726] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.443100][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.458430][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 83.609112][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 83.650131][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 83.679025][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.714275][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.764092][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.817325][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.847920][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.871631][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.153124][ T5726] usb 1-1: GET_CAPABILITIES returned 0 [ 84.178950][ T5726] usbtmc 1-1:16.0: can't read capabilities [ 84.432838][ T5726] usb 1-1: USB disconnect, device number 2 [ 85.434822][ T12] tipc: Subscription rejected, illegal request [ 86.726805][ T5726] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.801593][ T5842] netlink: 80 bytes leftover after parsing attributes in process `syz.1.42'. [ 86.830222][ T5842] netlink: 80 bytes leftover after parsing attributes in process `syz.1.42'. [ 86.904486][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.936543][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.964509][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.998297][ T5726] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 87.026777][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.056371][ T5726] usb 1-1: config 0 descriptor?? [ 87.265325][ T5718] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.277435][ T5803] syz.4.27 (5803): drop_caches: 1 [ 87.446907][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 87.472402][ T5718] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 87.521434][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.532248][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.550181][ T5718] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 87.561304][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.582324][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.591695][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.621575][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.650645][ T5718] usb 3-1: config 0 descriptor?? [ 87.666857][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.686036][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.709434][ T5726] kovaplus 0003:1E7D:2D50.0002: reserved main item tag 0xe [ 87.739098][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.754475][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.783163][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.807223][ T5726] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 87.820416][ T5726] kovaplus 0003:1E7D:2D50.0002: unbalanced collection at end of report description [ 87.847671][ T5726] kovaplus 0003:1E7D:2D50.0002: parse failed [ 87.865212][ T5726] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22 [ 87.895757][ T5726] usb 1-1: USB disconnect, device number 3 [ 87.924807][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 87.936854][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.998970][ T5718] usb 3-1: USB disconnect, device number 2 [ 88.738427][ T5875] netlink: 80 bytes leftover after parsing attributes in process `syz.3.54'. [ 88.747265][ T5872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.765736][ T5875] netlink: 80 bytes leftover after parsing attributes in process `syz.3.54'. [ 89.198575][ T5887] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 89.220604][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.236772][ T29] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 89.255654][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.277920][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.296803][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.408857][ T29] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.426395][ T29] usb 1-1: config 0 has no interface number 0 [ 89.443065][ T29] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 89.465029][ T29] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 89.487397][ T29] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.511250][ T29] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.530013][ T29] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 89.544841][ T29] usb 1-1: Product: syz [ 89.553261][ T29] usb 1-1: SerialNumber: syz [ 89.575508][ T29] usb 1-1: config 0 descriptor?? [ 89.595305][ T29] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 89.616246][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 90.083604][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.092517][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.099892][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.110319][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.118161][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.126804][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.134508][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.141954][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.149266][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.156875][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.172259][ T5726] usb 1-1: USB disconnect, device number 4 [ 90.172275][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 90.230113][ T5726] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 90.376784][ T5718] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.537594][ T5718] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 90.577190][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.600081][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.625869][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.659543][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.669657][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.686748][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.695181][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.712447][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.725147][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.735314][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.745127][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.757240][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.765712][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.776875][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.788562][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.797304][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.807768][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.820329][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.830417][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.840040][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.851735][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.860925][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.871267][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.887569][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.908131][ T5718] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 90.918736][ T5718] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 90.956952][ T5718] usb 5-1: Product: syz [ 90.966999][ T5718] usb 5-1: Manufacturer: syz [ 90.980508][ T5718] usb 5-1: SerialNumber: syz [ 91.014275][ T5718] usb 5-1: config 0 descriptor?? [ 91.037088][ T5909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.69'. [ 91.059607][ T5718] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.205104][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.313117][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.355437][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.443965][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 91.458341][ T5718] usb 5-1: USB disconnect, device number 2 [ 91.482162][ T5718] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 92.133552][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 92.258679][ T9] cfg80211: failed to load regulatory.db [ 93.165018][ T5946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.82'. [ 93.326186][ T5949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.365866][ T5950] team0: Port device vxlan0 added [ 93.366129][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.366612][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.368459][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.368495][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.382690][ T5949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.481012][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.607014][ T29] hid_parser_main: 196 callbacks suppressed [ 93.607035][ T29] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.638389][ T29] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.730699][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 94.802444][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 94.925890][ T30] audit: type=1326 audit(1779936611.618:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 94.979824][ T30] audit: type=1326 audit(1779936611.618:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.038306][ T30] audit: type=1326 audit(1779936611.618:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.063577][ T30] audit: type=1326 audit(1779936611.618:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.093345][ T30] audit: type=1326 audit(1779936611.628:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.125834][ T30] audit: type=1326 audit(1779936611.628:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.198484][ T30] audit: type=1326 audit(1779936611.628:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.268423][ T30] audit: type=1326 audit(1779936611.628:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.372831][ T30] audit: type=1326 audit(1779936611.628:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.438584][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.442590][ T5989] tipc: Started in network mode [ 95.472671][ T5989] tipc: Node identity , cluster identity 4711 [ 95.473634][ T5993] program syz.4.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.486287][ T30] audit: type=1326 audit(1779936611.628:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.2.97" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 95.562949][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.565881][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.815826][ T6003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.418134][ T6025] gretap0: entered promiscuous mode [ 96.438298][ T6025] gretap0: entered allmulticast mode [ 96.641294][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'. [ 96.841313][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.943450][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.991311][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.299591][ T9] IPVS: starting estimator thread 0... [ 97.406796][ T6052] IPVS: using max 43 ests per chain, 103200 per kthread [ 98.073865][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 98.617679][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.719027][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.757432][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.960724][ T6095] netlink: 'syz.2.147': attribute type 13 has an invalid length. [ 98.972661][ T6095] gretap0: refused to change device tx_queue_len [ 98.981370][ T6095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.184248][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.261166][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.279087][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.898476][ T6158] tipc: Started in network mode [ 100.903594][ T6158] tipc: Node identity 5a3230085491, cluster identity 4711 [ 100.911204][ T6158] tipc: Enabled bearer , priority 0 [ 100.919642][ T6158] syzkaller0: entered promiscuous mode [ 100.925370][ T6158] syzkaller0: entered allmulticast mode [ 100.947386][ T6158] tipc: Resetting bearer [ 100.956205][ T6157] tipc: Resetting bearer [ 100.974539][ T6157] tipc: Disabling bearer [ 101.119215][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 101.579341][ T6171] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 101.600350][ T1353] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.623314][ T1353] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.650748][ T1353] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.663541][ T1353] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.797361][ T9] IPVS: starting estimator thread 0... [ 101.897089][ T6179] IPVS: using max 39 ests per chain, 93600 per kthread [ 102.846761][ T5718] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.027624][ T5718] usb 2-1: not running at top speed; connect to a high speed hub [ 103.058834][ T5718] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 159, changing to 4 [ 103.090081][ T5718] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13896, setting to 1023 [ 103.116729][ T5718] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 4 [ 103.146582][ T5718] usb 2-1: New USB device found, idVendor=0499, idProduct=1044, bcdDevice= 0.40 [ 103.166265][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.176845][ T5718] usb 2-1: Product: Ц [ 103.471160][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.509757][ T5718] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 103.542342][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.557216][ T5718] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 103.588314][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.637056][ T6203] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 103.741115][ T5643] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 103.751629][ T5643] Bluetooth: hci3: Injecting HCI hardware error event [ 103.761273][ T4948] Bluetooth: hci3: hardware error 0x00 [ 103.894854][ T5718] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 104.033682][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.626032][ T1223] usb 2-1: USB disconnect, device number 2 [ 105.897011][ T4948] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 106.581735][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 106.791343][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.863600][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.899537][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.314435][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 107.742556][ T6331] syz.1.248 uses obsolete (PF_INET,SOCK_PACKET) [ 108.003629][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 110.549173][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.728426][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 110.749709][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 110.786346][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.808374][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.828731][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.861969][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.893590][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.134978][ T9] usb 2-1: usb_control_msg returned -32 [ 111.164875][ T9] usbtmc 2-1:16.0: can't read capabilities [ 111.799555][ T29] usb 2-1: USB disconnect, device number 3 [ 111.958407][ T6432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.295'. [ 111.971686][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.980979][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.011013][ T6432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.295'. [ 112.527681][ T5702] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.706742][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 112.730632][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.764748][ T5702] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 112.789786][ T5702] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 112.813604][ T5702] usb 4-1: config 14 has no interface number 0 [ 112.832274][ T5702] usb 4-1: config 14 has no interface number 1 [ 112.856110][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 112.891901][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 112.929936][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 112.947850][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 112.979737][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 113.011825][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 113.036752][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.076777][ T5702] usb 4-1: config 14 interface 57 has no altsetting 0 [ 113.096992][ T5702] usb 4-1: config 14 interface 228 has no altsetting 0 [ 113.126783][ T5702] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 113.150736][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.157369][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.159528][ T5702] usb 4-1: Product: syz [ 113.173934][ T5702] usb 4-1: Manufacturer: syz [ 113.190159][ T5702] usb 4-1: SerialNumber: syz [ 113.239503][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.277596][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.367617][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.307'. [ 113.400421][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.307'. [ 113.626800][ T5702] legousbtower 4-1:14.57: interrupt endpoints not found [ 114.027221][ T5702] legousbtower 4-1:14.228: get version request failed: -121 [ 114.054970][ T5702] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 114.193001][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 114.709477][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.790494][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.828579][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.131105][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 115.406807][ T5702] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.588352][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 115.601703][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.630852][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.666181][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.684023][ T29] usb 4-1: USB disconnect, device number 2 [ 115.700598][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.733193][ T5702] usb 5-1: config 0 descriptor?? [ 115.765221][ T5702] hub 5-1:0.0: USB hub found [ 115.970576][ T5702] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 116.115875][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 116.396164][ T5702] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 116.436466][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.487437][ T5702] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 116.552514][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.860550][ T5702] usb 5-1: USB disconnect, device number 3 [ 117.311033][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 117.762944][ T6581] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 117.822727][ T6581] vlan2: entered allmulticast mode [ 117.828310][ T6581] bond1: entered allmulticast mode [ 118.137992][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.218539][ T6594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.244169][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.328387][ T6597] fuse: Bad value for 'user_id' [ 118.333927][ T6597] fuse: Bad value for 'user_id' [ 118.658207][ T6611] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 118.707581][ T6611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.739388][ T6614] bond2: entered allmulticast mode [ 119.096312][ T6628] input: syz1 as /devices/virtual/input/input6 [ 119.219733][ T6631] Zero length message leads to an empty skb [ 119.548799][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.625675][ T6650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.656109][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.062658][ T6668] gretap0: entered promiscuous mode [ 120.072636][ T6668] gretap0: entered allmulticast mode [ 120.609045][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 120.821916][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.921557][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.939825][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.180819][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 123.013410][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 124.190472][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 125.137500][ T5754] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 125.318190][ T5754] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 125.359543][ T5754] usb 4-1: config 0 has no interface number 0 [ 125.386049][ T5754] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 125.441529][ T5754] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.475756][ T5754] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.480320][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 125.507104][ T5754] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 125.523125][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 125.537577][ T5754] usb 4-1: Product: syz [ 125.542497][ T5754] usb 4-1: SerialNumber: syz [ 125.556066][ T5754] usb 4-1: config 0 descriptor?? [ 125.571853][ T5754] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 125.604945][ T5754] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 125.797823][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 126.090313][ C0] cm109_urb_ctl_callback: 39 callbacks suppressed [ 126.090341][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.105474][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.112698][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.120386][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.127733][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.134894][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.142206][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.153283][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.160785][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.168363][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.181888][ T5702] usb 4-1: USB disconnect, device number 3 [ 126.181976][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 126.283734][ T5702] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 128.597169][ T5718] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.766850][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 128.782615][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.806267][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.842493][ T5718] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.867461][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.931610][ T5718] usb 1-1: config 0 descriptor?? [ 128.960435][ T5718] hub 1-1:0.0: USB hub found [ 129.163983][ T5718] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 129.592254][ T5718] usbhid 1-1:0.0: can't add hid device: -71 [ 129.620247][ T5718] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.697839][ T5718] usb 1-1: USB disconnect, device number 5 [ 129.828030][ T6912] netlink: 'syz.2.506': attribute type 34 has an invalid length. [ 130.319002][ T5702] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 130.509662][ T5702] usb 5-1: not running at top speed; connect to a high speed hub [ 130.542491][ T5702] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.603596][ T5702] usb 5-1: config 1 interface 0 has no altsetting 0 [ 130.640526][ T5702] usb 5-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 130.678861][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.708922][ T5702] usb 5-1: Manufacturer: ј [ 130.724838][ T5702] usb 5-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 130.936893][ T4948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 130.949513][ T4948] Bluetooth: hci1: Injecting HCI hardware error event [ 130.962865][ T4948] Bluetooth: hci1: hardware error 0x00 [ 130.991052][ T6916] netlink: 260 bytes leftover after parsing attributes in process `syz.4.507'. [ 131.044635][ T6916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.507'. [ 131.057782][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 131.128012][ T5718] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.161759][ T5702] usbhid 5-1:1.0: can't add hid device: -71 [ 131.172017][ T5702] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 131.187968][ T5702] usb 5-1: USB disconnect, device number 4 [ 131.276928][ T5726] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.286889][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 131.294680][ T5718] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 131.303226][ T5718] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.314404][ T1223] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.322080][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.332389][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.344047][ T5718] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.360627][ T5718] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.371315][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.446735][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 131.455888][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.468876][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.479867][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.489139][ T1223] usb 2-1: Using ep0 maxpacket: 32 [ 131.495200][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.505957][ T1223] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.516985][ T1223] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 131.527158][ T5726] usb 1-1: config 0 descriptor?? [ 131.532506][ T1223] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 131.545379][ T5726] hub 1-1:0.0: USB hub found [ 131.550161][ T1223] usb 2-1: config 14 has no interface number 0 [ 131.557280][ T1223] usb 2-1: config 14 has no interface number 1 [ 131.563701][ T1223] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 131.575874][ T1223] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 131.589881][ T1223] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 131.601957][ T5718] usb 4-1: GET_CAPABILITIES returned 0 [ 131.610655][ T1223] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 131.622563][ T5718] usbtmc 4-1:16.0: can't read capabilities [ 131.631832][ T1223] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 131.653683][ T1223] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.667539][ T1223] usb 2-1: config 14 interface 57 has no altsetting 0 [ 131.674408][ T1223] usb 2-1: config 14 interface 228 has no altsetting 0 [ 131.707856][ T1223] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 131.729002][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.755468][ T5726] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 131.764416][ T1223] usb 2-1: Product: syz [ 131.778057][ T1223] usb 2-1: Manufacturer: syz [ 131.792927][ T1223] usb 2-1: SerialNumber: syz [ 131.836543][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.850558][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.859790][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.874938][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.884777][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.926468][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.935606][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.974566][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.983714][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.019937][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.029081][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.042627][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.051742][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.060921][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.070216][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.079320][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 132.148649][ T5718] usb 4-1: USB disconnect, device number 4 [ 132.168324][ T5726] usbhid 1-1:0.0: can't add hid device: -71 [ 132.186312][ T5726] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 132.243543][ T1223] legousbtower 2-1:14.57: interrupt endpoints not found [ 132.278275][ T5726] usb 1-1: USB disconnect, device number 6 [ 132.636006][ T1223] legousbtower 2-1:14.228: get version request failed: -121 [ 132.647492][ T1223] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 133.098834][ T4948] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 133.198865][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.217349][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.836721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 134.014193][ T6980] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 134.258470][ T1223] usb 2-1: USB disconnect, device number 4 [ 134.331394][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.490295][ T6982] gretap1: entered allmulticast mode [ 134.512570][ T6989] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 134.579029][ T6982] bond1: (slave gretap1): making interface the new active one [ 134.629638][ T6982] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.707881][ T6983] bond1 (unregistering): (slave gretap1): Releasing active interface [ 134.757703][ T6983] bond1 (unregistering): Released all slaves [ 134.882193][ T6999] binder: 6998:6999 ioctl c0306201 0 returned -14 [ 135.165116][ T6989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.440380][ T5702] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.456664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.636899][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 136.651275][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.664253][ T5702] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 136.681464][ T5702] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 136.711055][ T5702] usb 2-1: config 14 has no interface number 0 [ 136.728180][ T5702] usb 2-1: config 14 has no interface number 1 [ 136.741950][ T5702] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 136.758886][ T5702] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 136.782354][ T5702] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 136.803258][ T5702] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 136.837311][ T5702] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 136.880210][ T5702] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.928111][ T5702] usb 2-1: config 14 interface 57 has no altsetting 0 [ 136.974019][ T5702] usb 2-1: config 14 interface 228 has no altsetting 0 [ 137.037852][ T5702] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 137.053087][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.111194][ T5702] usb 2-1: Product: syz [ 137.131220][ T5702] usb 2-1: Manufacturer: syz [ 137.143728][ T5702] usb 2-1: SerialNumber: syz [ 137.656343][ T5702] legousbtower 2-1:14.57: interrupt endpoints not found [ 137.701198][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 137.987072][ T1223] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.036600][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 138.057616][ T7054] binder: 7053:7054 ioctl c0306201 800006c0 returned -14 [ 138.072045][ T5702] legousbtower 2-1:14.228: get version request failed: -121 [ 138.083321][ T30] audit: type=1326 audit(1779936654.738:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.560" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4501c code=0x0 [ 138.118863][ T5702] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 138.196783][ T1223] usb 5-1: Using ep0 maxpacket: 32 [ 138.219067][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.255431][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.302682][ T1223] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.354259][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.418652][ T1223] usb 5-1: config 0 descriptor?? [ 138.426840][ T5718] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.447843][ T1223] hub 5-1:0.0: USB hub found [ 138.613295][ T5718] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.650538][ T1223] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 138.663894][ T5718] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.706500][ T5718] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.755620][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.814211][ T7057] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 138.878049][ T5718] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.058897][ T1223] usbhid 5-1:0.0: can't add hid device: -71 [ 139.086176][ T1223] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.187272][ T1223] usb 5-1: USB disconnect, device number 5 [ 139.475392][ T5718] usb 1-1: USB disconnect, device number 7 [ 139.857565][ T5702] usb 2-1: USB disconnect, device number 5 [ 140.020226][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 140.056034][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 140.158152][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'. [ 140.447036][ T7080] netlink: 80 bytes leftover after parsing attributes in process `syz.4.572'. [ 140.499874][ T7085] netlink: 80 bytes leftover after parsing attributes in process `syz.4.572'. [ 141.406749][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.427340][ T5718] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.553905][ T7100] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 141.596914][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 141.604636][ T5718] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.639946][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.653572][ T5718] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.678173][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.696790][ T5718] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.709218][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.728852][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.744237][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.791764][ T7097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 141.800920][ T9] usb 5-1: config 0 descriptor?? [ 141.834732][ T9] hub 5-1:0.0: USB hub found [ 141.849831][ T5718] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.961034][ T7098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.011300][ T7098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.032442][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 142.309829][ T7098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.399654][ T7098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.456141][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 142.463888][ T7098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.498792][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.569574][ T9] usb 5-1: USB disconnect, device number 6 [ 142.649904][ T7098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.704646][ T7098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.727359][ T5702] usb 1-1: USB disconnect, device number 8 [ 142.732661][ T7098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.823646][ T7098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.524015][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 143.573212][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 143.737020][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.118488][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 144.179981][ T7122] netlink: 72 bytes leftover after parsing attributes in process `syz.4.586'. [ 144.456772][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.698034][ T4948] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.964049][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 145.008923][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 145.213204][ T7140] syzkaller1: entered promiscuous mode [ 145.233789][ T7140] syzkaller1: entered allmulticast mode [ 145.276338][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 145.295531][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 145.817144][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.008958][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 146.194092][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.240508][ T9] usb 4-1: config 0 has no interface number 0 [ 146.256805][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 146.282947][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.312914][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.373515][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.383935][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.416948][ T9] usb 4-1: Product: syz [ 146.438689][ T9] usb 4-1: SerialNumber: syz [ 146.474031][ T9] usb 4-1: config 0 descriptor?? [ 146.520050][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 146.543170][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.559308][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 146.783099][ T4948] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.863476][ C0] cm109_urb_ctl_callback: 30 callbacks suppressed [ 146.863504][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.879198][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.886407][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.896702][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.904029][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.914870][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.921055][ T29] usb 4-1: USB disconnect, device number 5 [ 146.922568][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 147.110487][ T29] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 147.802170][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 147.898149][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.616865][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.856957][ T4948] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.757051][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 150.368779][ T5718] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.556762][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 150.581301][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.621948][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.656274][ T5718] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 150.693216][ T5718] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 150.716411][ T5718] usb 2-1: Manufacturer: syz [ 150.745590][ T5718] usb 2-1: config 0 descriptor?? [ 151.210251][ T5718] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 151.234838][ T5718] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 151.270206][ T5718] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 151.295977][ T5718] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 151.331753][ T5718] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 151.410502][ T5718] creative-sb0540 0003:041E:3100.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 151.477754][ T5718] usb 2-1: USB disconnect, device number 6 [ 151.805562][ T7224] fido_id[7224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 151.933277][ T7230] warning: `syz.0.635' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.964220][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 152.706946][ T5718] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.759303][ T7254] macvlan0: entered promiscuous mode [ 152.790042][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 152.887951][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 152.896027][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.907733][ T5718] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 152.916213][ T5718] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 152.924828][ T5718] usb 2-1: config 14 has no interface number 0 [ 152.931340][ T5718] usb 2-1: config 14 has no interface number 1 [ 152.938803][ T5718] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 152.950022][ T5718] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 152.962355][ T5718] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 152.974967][ T5718] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 152.982197][ T7258] netlink: 'syz.2.648': attribute type 16 has an invalid length. [ 153.039512][ T5718] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 153.112804][ T5718] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.158404][ T5718] usb 2-1: config 14 interface 57 has no altsetting 0 [ 153.176281][ T5718] usb 2-1: config 14 interface 228 has no altsetting 0 [ 153.198965][ T5718] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 153.211722][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.226809][ T5718] usb 2-1: Product: syz [ 153.231526][ T5718] usb 2-1: Manufacturer: syz [ 153.236354][ T5718] usb 2-1: SerialNumber: syz [ 153.253126][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 153.319354][ T7263] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.554007][ T7267] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 153.569056][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.624964][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.656167][ T5718] legousbtower 2-1:14.57: interrupt endpoints not found [ 153.690967][ T1353] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.732965][ T1353] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.069831][ T5718] legousbtower 2-1:14.228: get version request failed: -121 [ 154.091377][ T5718] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 154.436857][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.616798][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 154.628751][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.642991][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.662087][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.686600][ T5718] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.695913][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.710862][ T5718] usb 5-1: config 0 descriptor?? [ 154.766789][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 154.912066][ T4948] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 154.929599][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.939572][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 154.954618][ T9] usb 1-1: string descriptor 0 read error: -22 [ 154.962259][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 154.972286][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.989487][ T7297] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 155.041675][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.063705][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 155.324397][ T5718] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input9 [ 155.412193][ T9] usb 1-1: USB disconnect, device number 9 [ 155.433588][ T5718] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 155.504159][ T5718] usb 5-1: USB disconnect, device number 7 [ 155.518253][ T5754] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.717972][ T5633] usb 2-1: USB disconnect, device number 7 [ 155.727257][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 155.750026][ T7308] fido_id[7308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.782178][ T5754] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 155.810120][ T5754] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 155.869379][ T5754] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 155.889323][ T5754] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 155.907380][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.941030][ T5754] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 155.969391][ T5754] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 155.996946][ T5754] usb 4-1: Product: syz [ 156.007276][ T5754] usb 4-1: Manufacturer: syz [ 156.019290][ T5754] usb 4-1: SerialNumber: syz [ 156.078904][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 156.111238][ T5754] usb 4-1: config 0 descriptor?? [ 156.147621][ T5754] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 156.172052][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 156.209193][ T5754] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 156.655197][ T7307] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 156.657069][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 156.704950][ T7332] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 156.706726][ T5754] usb 4-1: USB disconnect, device number 6 [ 156.782147][ T5754] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 157.890406][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 157.943119][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 161.804758][ T7373] syz.4.693 (7373): drop_caches: 2 [ 162.950690][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 163.179901][ T7390] syzkaller0: entered promiscuous mode [ 163.203211][ T7390] syzkaller0: entered allmulticast mode [ 163.380646][ T7396] syzkaller0: entered promiscuous mode [ 163.399119][ T30] audit: type=1326 audit(1779936680.088:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.1.705" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5301c code=0x0 [ 163.401208][ T7396] syzkaller0: entered allmulticast mode [ 163.702704][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 163.757198][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'. [ 164.552975][ T7422] fuse: Invalid gid '00000000000000000003' [ 164.731940][ T7417] capability: warning: `syz.3.710' uses deprecated v2 capabilities in a way that may be insecure [ 164.917484][ T7429] input: syz1 as /devices/virtual/input/input10 [ 165.944075][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 167.364951][ T7465] sctp: [Deprecated]: syz.0.727 (pid 7465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.364951][ T7465] Use struct sctp_sack_info instead [ 168.107966][ T5702] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.304351][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 168.357141][ T5702] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 168.363164][ T7452] syz.1.723 (7452): drop_caches: 2 [ 168.406197][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.496868][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.568071][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.635452][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.753711][ T5702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.813815][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.836745][ T5718] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 168.966458][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 168.995407][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 169.020536][ T5718] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.031105][ T5718] usb 1-1: config 0 has no interface number 0 [ 169.052503][ T5718] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 169.092271][ T5718] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.112218][ T5718] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 169.142121][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.165923][ T5718] usb 1-1: Product: syz [ 169.184685][ T5718] usb 1-1: SerialNumber: syz [ 169.220404][ T5718] usb 1-1: config 0 descriptor?? [ 169.253153][ T5718] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 169.542735][ T5754] usb 1-1: USB disconnect, device number 10 [ 169.679411][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 169.983770][ T5754] usb 5-1: USB disconnect, device number 8 [ 171.553323][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 172.806661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 173.208713][ T7532] CUSE: unknown device info "" [ 173.237811][ T7532] CUSE: unknown device info "" [ 173.273200][ T7532] CUSE: unknown device info "" [ 173.279401][ T7532] CUSE: unknown device info "" [ 173.297207][ T7532] CUSE: unknown device info "" [ 173.329175][ T7532] CUSE: unknown device info "" [ 173.354898][ T7532] CUSE: unknown device info "" [ 173.364915][ T7532] CUSE: unknown device info "" [ 173.381245][ T7532] CUSE: unknown device info "" [ 173.443009][ T7532] CUSE: unknown device info "" [ 173.494599][ T7532] CUSE: unknown device info "" [ 173.500693][ T7532] CUSE: unknown device info "r" [ 173.516234][ T7532] CUSE: unknown device info "#" [ 173.523562][ T7532] CUSE: unknown device info "" [ 173.529625][ T7532] CUSE: unknown device info "" [ 173.534877][ T7532] CUSE: unknown device info "" [ 173.595560][ T7532] CUSE: DEVNAME unspecified [ 173.975585][ T5689] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.256801][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 174.270764][ T5689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 174.299445][ T5689] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 174.310908][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 174.321016][ T5689] usb 5-1: Product: syz [ 174.330272][ T5689] usb 5-1: Manufacturer: syz [ 174.339913][ T5689] usb 5-1: SerialNumber: syz [ 174.370601][ T5689] usb 5-1: config 0 descriptor?? [ 174.379832][ T7543] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.422802][ T7545] program syz.1.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.436122][ T5689] hub 5-1:0.0: bad descriptor, ignoring hub [ 174.444840][ T5689] hub 5-1:0.0: probe with driver hub failed with error -5 [ 174.644019][ T7561] process 'syz.2.760' launched './file0' with NULL argv: empty string added [ 174.880696][ T5718] usb 5-1: USB disconnect, device number 9 [ 175.029340][ T7557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.057526][ T7557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.090662][ T7557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.397334][ T5754] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.472701][ T7555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.561134][ T7555] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 175.584961][ T7555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.592247][ T7555] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 175.621998][ T7555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.630685][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 175.641653][ T7555] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 175.665532][ T7572] pimreg: entered allmulticast mode [ 175.671579][ T5754] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 175.716506][ T5754] usb 5-1: string descriptor 0 read error: -22 [ 175.729867][ T5754] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 175.767953][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 175.801144][ T5754] usb 5-1: config 0 descriptor?? [ 175.827242][ T7543] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.851900][ T5754] hub 5-1:0.0: bad descriptor, ignoring hub [ 175.883619][ T5754] hub 5-1:0.0: probe with driver hub failed with error -5 [ 176.708512][ T5689] usb 5-1: USB disconnect, device number 10 [ 179.379378][ T5689] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.566955][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 179.570664][ T5689] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.570718][ T5689] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.570751][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.570792][ T5689] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.570826][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.683871][ T5689] usb 3-1: config 0 descriptor?? [ 180.199325][ T5689] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 180.199464][ T5689] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 180.199526][ T5689] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 180.199588][ T5689] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 180.199650][ T5689] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 180.209162][ T5689] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 180.426646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.061649][ T5689] usb 3-1: USB disconnect, device number 3 [ 181.084802][ T7691] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 181.086838][ T7691] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 182.782909][ T30] audit: type=1800 audit(1779936699.478:17): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.791" name="/" dev="fuse" ino=4 res=0 errno=0 [ 183.056861][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.264186][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.302129][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.340722][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.374345][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.406749][ T5633] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.425932][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.455954][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.502552][ T9] usb 5-1: Manufacturer: syz [ 183.549372][ T9] usb 5-1: config 0 descriptor?? [ 183.597125][ T5633] usb 1-1: Using ep0 maxpacket: 16 [ 183.614283][ T5633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.652226][ T5633] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.674161][ T5633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.703069][ T5633] usb 1-1: Product: syz [ 183.720797][ T5633] usb 1-1: Manufacturer: syz [ 183.751149][ T5633] usb 1-1: SerialNumber: syz [ 183.783314][ T5633] usb 1-1: config 0 descriptor?? [ 183.851964][ T5633] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 183.910477][ T5633] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 184.047603][ T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 184.223072][ T9] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 184.370103][ T5702] usb 5-1: USB disconnect, device number 11 [ 184.443914][ T5633] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 184.680185][ T7745] fido_id[7745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 185.005579][ T5633] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.052533][ T5633] em28xx 1-1:0.0: board has no eeprom [ 185.397114][ T5633] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.424205][ T5633] em28xx 1-1:0.0: dvb set to bulk mode. [ 185.480684][ T9] em28xx 1-1:0.0: Binding DVB extension [ 185.622469][ T5633] usb 1-1: USB disconnect, device number 11 [ 185.654281][ T5633] em28xx 1-1:0.0: Disconnecting em28xx [ 185.884182][ T9] em28xx 1-1:0.0: Registering input extension [ 185.927414][ T5633] em28xx 1-1:0.0: Closing input extension [ 186.275216][ T5633] em28xx 1-1:0.0: Freeing device [ 186.825620][ T7772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.506653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.229684][ T7809] program syz.4.816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.306676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 194.626532][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.648263][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.226670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.616037][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.692789][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.118224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.469267][ T7828] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 196.573215][ T7794] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-/": -EINTR [ 196.769102][ T59] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.863888][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.901783][ T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.936354][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.979256][ T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.045087][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.086669][ T59] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.118180][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.126646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 198.128226][ T7848] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.500389][ T7859] random: crng reseeded on system resumption [ 200.033124][ T7870] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.835'. [ 200.257578][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'. [ 201.451579][ T7902] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 202.464847][ T7910] tipc: Started in network mode [ 202.550142][ T7910] tipc: Node identity 7e4edfc3c7ae, cluster identity 4711 [ 202.754812][ T7910] tipc: Enabled bearer , priority 0 [ 202.776644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 202.882845][ T7908] tipc: Resetting bearer [ 203.368482][ T7932] x_tables: duplicate underflow at hook 1 [ 204.211528][ T7922] hub 8-0:1.0: USB hub found [ 204.239177][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.338970][ T7922] hub 8-0:1.0: 1 port detected [ 204.509328][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 204.541452][ T29] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 204.563397][ T29] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 204.580086][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.607014][ T29] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 204.636867][ T29] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 204.649025][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.659284][ T29] usb 1-1: Product: syz [ 204.664783][ T29] usb 1-1: Manufacturer: syz [ 204.671852][ T29] usb 1-1: SerialNumber: syz [ 204.742988][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 204.922547][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input12 [ 204.955000][ T5726] IPVS: starting estimator thread 0... [ 205.048251][ T29] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 205.057988][ T7942] IPVS: using max 36 ests per chain, 86400 per kthread [ 205.095173][ T29] (id 0x00) [ 205.345922][ T29] rc_core: IR keymap rc-imon-pad not found [ 205.378328][ T29] Registered IR keymap rc-empty [ 205.384031][ T29] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 205.397596][ T29] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 205.454297][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 205.636166][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input13 [ 205.718737][ T29] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:12> initialized [ 205.801672][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.502825][ T7947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.300445][ T7937] imon:display_open: display port is already open [ 207.377109][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.486937][ T5726] usb 1-1: USB disconnect, device number 12 [ 207.599411][ T29] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.609829][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.621577][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.633268][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.649416][ T29] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.661734][ T29] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.675798][ T29] usb 2-1: Product: syz [ 207.681067][ T29] usb 2-1: Manufacturer: syz [ 207.703433][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 207.710277][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 207.732382][ T29] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 207.741397][ T29] cdc_wdm 2-1:1.0: Unknown control protocol [ 207.915370][ T9] usb 2-1: USB disconnect, device number 8 [ 208.490889][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 208.683264][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.694518][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.708461][ T7967] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.864'. [ 208.723517][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.738390][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.802993][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.822907][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.836751][ T9] usb 2-1: Product: syz [ 208.842731][ T9] usb 2-1: Manufacturer: syz [ 208.952626][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 208.958541][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 208.971126][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 209.013753][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 209.419695][ T7908] tipc: Disabling bearer [ 209.434756][ T5633] tipc: Node number set to 3118522307 [ 209.487914][ T7974] syzkaller0: entered promiscuous mode [ 209.516450][ T7974] syzkaller0: entered allmulticast mode [ 209.735419][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 209.737844][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.742376][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 209.742966][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 209.758042][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.764221][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 209.779440][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 209.786165][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 209.791684][ T29] usb 2-1: USB disconnect, device number 9 [ 209.792434][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 210.407003][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.594200][ T29] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.616167][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.659786][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.686977][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.719347][ T29] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.739172][ T29] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.758310][ T29] usb 2-1: Product: syz [ 210.769617][ T29] usb 2-1: Manufacturer: syz [ 210.829886][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 210.845703][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 210.867894][ T29] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 210.884765][ T29] cdc_wdm 2-1:1.0: Unknown control protocol [ 211.061163][ T5633] usb 2-1: USB disconnect, device number 10 [ 211.405449][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.492474][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.798052][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 211.832094][ T8025] team0: Port device team_slave_0 removed [ 212.196948][ T5633] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 212.276531][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.297434][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.307610][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.349292][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.372569][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.391731][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.411216][ T5633] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 212.423215][ T5633] usb 1-1: can't read configurations, error -61 [ 212.628248][ T5633] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 212.644424][ T8043] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.888'. [ 212.744124][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.763595][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.776982][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 212.822137][ T5633] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 212.869061][ T5633] usb 1-1: can't read configurations, error -61 [ 212.875901][ T5633] usb usb1-port1: attempt power cycle [ 212.944271][ T8041] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 213.236805][ T5633] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 213.271119][ T5633] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 213.282413][ T5633] usb 1-1: can't read configurations, error -61 [ 213.446901][ T5633] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 213.493024][ T5633] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 213.534140][ T5633] usb 1-1: can't read configurations, error -61 [ 213.551735][ T5633] usb usb1-port1: unable to enumerate USB device [ 214.748618][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.868013][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.504741][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 215.590058][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 217.629538][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.718325][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.758415][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.808163][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 220.803347][ T8162] random: crng reseeded on system resumption [ 221.949959][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 224.162566][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 224.559428][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.586698][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.612510][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.639112][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.664782][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.693890][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.719776][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.747904][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.772305][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.799018][ T5633] hid-generic 0080:0008:0000.0009: unknown main item tag 0x0 [ 224.851688][ T5633] hid-generic 0080:0008:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 225.059511][ T8228] fido_id[8228]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.647937][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 226.649022][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 227.089527][ T8281] fuse: Bad value for 'fd' [ 227.426086][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'. [ 227.699076][ T8288] gretap0: left promiscuous mode [ 227.860191][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.973276][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.350713][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.456433][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.799218][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.835426][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.861172][ T8297] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 228.872529][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.889213][ T8297] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 228.899812][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.053273][ T30] audit: type=1326 audit(1779936745.758:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.2.987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x0 [ 229.282264][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 229.295003][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 229.446806][ T1223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 229.610599][ T1223] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.639258][ T1223] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.669030][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.690546][ T1223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.726055][ T1223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.764793][ T1223] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.787655][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.804570][ T1223] usb 4-1: Product: syz [ 229.810102][ T1223] usb 4-1: Manufacturer: syz [ 229.833987][ T1223] cdc_wdm 4-1:1.0: skipping garbage [ 229.852136][ T1223] cdc_wdm 4-1:1.0: skipping garbage [ 229.898038][ T1223] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 229.918867][ T1223] cdc_wdm 4-1:1.0: Unknown control protocol [ 230.120512][ T1223] usb 4-1: USB disconnect, device number 7 [ 230.270055][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 230.308739][ T8327] bond1: entered allmulticast mode [ 230.448273][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.512336][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.524637][ T8331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.716737][ T1223] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.776168][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 230.789298][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 230.934548][ T1223] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.965297][ T1223] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 230.992625][ T1223] usb 3-1: can't read configurations, error -71 [ 231.096969][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 231.136071][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 231.244594][ T30] audit: type=1326 audit(1779936747.948:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.1006" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4701c code=0x0 [ 231.688341][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 231.785950][ T8359] bond1: entered allmulticast mode [ 231.944001][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 232.551412][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.635721][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.688293][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.750231][ T8376] __nla_validate_parse: 1 callbacks suppressed [ 232.750251][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 232.810035][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 233.078086][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 233.159329][ T8386] bond3: entered allmulticast mode [ 233.318650][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 233.396454][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 233.680768][ T30] audit: type=1326 audit(1779936750.388:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.3.1026" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4501c code=0x0 [ 233.916870][ T5702] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.076793][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 234.091410][ T5702] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 234.127776][ T5702] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.145483][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.166736][ T5702] usb 3-1: Product: syz [ 234.174369][ T5702] usb 3-1: Manufacturer: syz [ 234.195767][ T5702] usb 3-1: SerialNumber: syz [ 234.213570][ T5702] usb 3-1: config 0 descriptor?? [ 234.227466][ T8405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.249880][ T5702] hub 3-1:0.0: bad descriptor, ignoring hub [ 234.266776][ T5702] hub 3-1:0.0: probe with driver hub failed with error -5 [ 234.727442][ T5702] usb 3-1: USB disconnect, device number 6 [ 235.067311][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.076838][ T5702] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.130350][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.156410][ T8426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.222227][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 235.242334][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 235.256831][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 235.280199][ T5702] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 235.313219][ T5702] usb 3-1: string descriptor 0 read error: -22 [ 235.327096][ T5702] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.356713][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.389772][ T5702] usb 3-1: config 0 descriptor?? [ 235.408518][ T8405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.431986][ T5702] hub 3-1:0.0: bad descriptor, ignoring hub [ 235.446829][ T5702] hub 3-1:0.0: probe with driver hub failed with error -5 [ 235.629041][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 235.657576][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 235.967238][ T5702] usb 3-1: USB disconnect, device number 7 [ 236.635397][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 236.790649][ T8453] program syz.0.1046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.289680][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.393213][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.448521][ T8473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.053878][ T8487] __nla_validate_parse: 1 callbacks suppressed [ 238.053903][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 238.138182][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 238.473789][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 238.527224][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 238.760780][ T8481] syz.2.1056 (8481): drop_caches: 2 [ 239.014552][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 239.527554][ T8516] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 240.433173][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 240.437765][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 240.470641][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 240.484132][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 240.979881][ T8543] syzkaller0: entered promiscuous mode [ 240.985605][ T8543] syzkaller0: entered allmulticast mode [ 241.009682][ T8543] tipc: Enabled bearer , priority 0 [ 241.025682][ T8542] tipc: Resetting bearer [ 241.085723][ T8542] tipc: Disabling bearer [ 241.797723][ T5702] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.865108][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 241.997681][ T5702] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.039681][ T5702] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.085791][ T5702] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.109781][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.174350][ T8557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.240520][ T5702] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.214972][ T5633] usb 2-1: USB disconnect, device number 11 [ 243.980980][ T8596] __nla_validate_parse: 1 callbacks suppressed [ 243.981005][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 244.005369][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'. [ 245.293377][ T8612] binder_alloc: 8611: pid 8611 spamming oneway? 1 buffers allocated for a total size of 4096 [ 245.794056][ T8622] syz.1.1105: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 245.832928][ T29] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.879811][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.1.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.879852][ T8622] Tainted: [L]=SOFTLOCKUP [ 245.879859][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.879877][ T8622] Call Trace: [ 245.879887][ T8622] [ 245.879898][ T8622] dump_stack_lvl+0xe8/0x150 [ 245.879930][ T8622] warn_alloc+0x249/0x340 [ 245.879961][ T8622] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 245.879991][ T8622] ? __pfx_warn_alloc+0x10/0x10 [ 245.880026][ T8622] ? kasan_save_track+0x4f/0x80 [ 245.880051][ T8622] ? kasan_save_track+0x3e/0x80 [ 245.880072][ T8622] ? __kasan_kmalloc+0x93/0xb0 [ 245.880097][ T8622] ? __kmalloc_cache_noprof+0x31c/0x660 [ 245.880123][ T8622] ? xskq_create+0x56/0x170 [ 245.880148][ T8622] ? xsk_setsockopt+0x603/0x990 [ 245.880169][ T8622] ? do_sock_setsockopt+0x17c/0x1b0 [ 245.880195][ T8622] ? __ia32_sys_setsockopt+0x13d/0x1b0 [ 245.880220][ T8622] ? __do_fast_syscall_32+0x23e/0x6f0 [ 245.880242][ T8622] __vmalloc_node_range_noprof+0x132/0x1750 [ 245.880298][ T8622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.880332][ T8622] ? __kasan_kmalloc+0x93/0xb0 [ 245.880364][ T8622] vmalloc_user_noprof+0xad/0xe0 [ 245.880390][ T8622] ? xskq_create+0xbf/0x170 [ 245.880414][ T8622] xskq_create+0xbf/0x170 [ 245.880438][ T8622] xsk_init_queue+0x8a/0xe0 [ 245.880463][ T8622] xsk_setsockopt+0x603/0x990 [ 245.880491][ T8622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 245.880519][ T8622] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.880569][ T8622] ? aa_sock_opt_perm+0xff/0x1a0 [ 245.880624][ T8622] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 245.880665][ T8622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 245.880691][ T8622] do_sock_setsockopt+0x17c/0x1b0 [ 245.880726][ T8622] __ia32_sys_setsockopt+0x13d/0x1b0 [ 245.880767][ T8622] __do_fast_syscall_32+0x23e/0x6f0 [ 245.880789][ T8622] ? do_fast_syscall_32+0x33/0x70 [ 245.880807][ T8622] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.880834][ T8622] ? irqentry_exit+0x10f/0x8b0 [ 245.880855][ T8622] do_fast_syscall_32+0x33/0x70 [ 245.880874][ T8622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.880897][ T8622] RIP: 0023:0xf7f5301c [ 245.880936][ T8622] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 245.880951][ T8622] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 245.880985][ T8622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 245.880997][ T8622] RDX: 0000000000000002 RSI: 0000000080000080 RDI: 000000000000001c [ 245.881007][ T8622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.881018][ T8622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.881028][ T8622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.881053][ T8622] [ 245.881785][ T8622] Mem-Info: [ 246.065742][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 246.147770][ T8622] active_anon:6851 inactive_anon:0 isolated_anon:0 [ 246.147770][ T8622] active_file:13287 inactive_file:4042 isolated_file:0 [ 246.147770][ T8622] unevictable:768 dirty:280 writeback:0 [ 246.147770][ T8622] slab_reclaimable:7417 slab_unreclaimable:93821 [ 246.147770][ T8622] mapped:30203 shmem:2478 pagetables:1218 [ 246.147770][ T8622] sec_pagetables:0 bounce:0 [ 246.147770][ T8622] kernel_misc_reclaimable:0 [ 246.147770][ T8622] free:1360731 free_pcp:9429 free_cma:0 [ 246.162352][ T1223] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 246.274746][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 246.281014][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 246.306801][ T8622] Node 0 active_anon:33320kB inactive_anon:0kB active_file:53148kB inactive_file:15968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120856kB dirty:1140kB writeback:0kB shmem:14308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 246.347082][ T8622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 246.348212][ T29] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 246.390077][ T1223] usb 5-1: config 0 has no interfaces? [ 246.402494][ T1223] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 246.422001][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.444327][ T8622] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.491042][ T8622] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 246.505892][ T1223] usb 5-1: config 0 descriptor?? [ 246.512309][ T8622] Node 0 DMA32 free:1474292kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38620kB inactive_anon:0kB active_file:53148kB inactive_file:15968kB unevictable:1536kB writepending:1140kB zspages:0kB present:3129332kB managed:2552816kB mlocked:0kB bounce:0kB free_pcp:37108kB local_pcp:16908kB free_cma:0kB [ 246.557156][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.571577][ T8622] lowmem_reserve[]: 0 0 0 0 0 [ 246.587468][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.599945][ T8622] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 246.607558][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.645616][ T8622] lowmem_reserve[]: 0 0 0 0 0 [ 246.651277][ T8622] Node 1 Normal free:3942672kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.688171][ T8622] lowmem_reserve[]: 0 0 0 0 0 [ 246.693363][ T8622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.699789][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.724878][ T8622] Node 0 DMA32: 1240*4kB (UME) 1467*8kB (UME) 1014*16kB (UME) 782*32kB (UME) 271*64kB (UME) 154*128kB (UME) 91*256kB (UME) 29*512kB (UM) 13*1024kB (UME) 8*2048kB (UM) 320*4096kB (UM) = 1473560kB [ 246.762771][ T8622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 246.781563][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.806271][ T8622] Node 1 Normal: 10*4kB (UM) 7*8kB (UM) 9*16kB (UM) 5*32kB (UM) 8*64kB (UM) 7*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942672kB [ 246.828687][ T5718] usb 5-1: USB disconnect, device number 12 [ 246.830279][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.892357][ T8622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.933710][ T8622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.955963][ T8622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.967263][ T8622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.980563][ T8622] 20802 total pagecache pages [ 246.990812][ T8622] 0 pages in swap cache [ 247.003205][ T8622] Free swap = 124996kB [ 247.010519][ T8636] bond2: entered allmulticast mode [ 247.017981][ T8622] Total swap = 124996kB [ 247.022741][ T8622] 2097051 pages RAM [ 247.028007][ T8622] 0 pages HighMem/MovableOnly [ 247.047221][ T8622] 427062 pages reserved [ 247.053944][ T8622] 0 pages cma reserved [ 247.091817][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 247.120589][ T29] usbtmc 1-1:16.0: can't read capabilities [ 247.433162][ T5702] usb 1-1: USB disconnect, device number 17 [ 247.813598][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 247.827359][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 248.312763][ T8671] random: crng reseeded on system resumption [ 248.875911][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 248.909781][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 250.517577][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 250.552807][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'. [ 250.593374][ T8735] capability: warning: `syz.4.1149' uses 32-bit capabilities (legacy support in use) [ 250.826361][ T8741] program syz.1.1150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.129023][ T8748] validate_nla: 42 callbacks suppressed [ 251.129072][ T8748] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 252.322130][ T8767] binder: 8766:8767 ioctl c0306201 80000280 returned -14 [ 252.838969][ T8770] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1161'. [ 253.009815][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 253.090571][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 253.387530][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 254.399201][ T8805] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1175'. [ 254.537178][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 254.567757][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 254.606408][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 255.551387][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 255.598093][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 255.646820][ T5718] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 255.726374][ T8836] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1189'. [ 255.860279][ T5718] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 255.898046][ T5718] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 255.933010][ T5718] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 255.965587][ T5718] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 255.995727][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 256.020484][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 256.058452][ T5718] usb 1-1: string descriptor 0 read error: -22 [ 256.061302][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.065140][ T5718] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 256.072081][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.083614][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 256.147781][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.272164][ T5718] usb 1-1: config 0 descriptor?? [ 256.299820][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 256.313237][ T8831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.317360][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 256.342048][ T8844] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1192'. [ 256.397614][ T5718] hub 1-1:0.0: bad descriptor, ignoring hub [ 256.470850][ T5718] hub 1-1:0.0: probe with driver hub failed with error -5 [ 256.564259][ T5718] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 256.697330][ T5718] usb 1-1: USB disconnect, device number 18 [ 256.703337][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 256.924481][ T8856] fuse: Invalid gid '00000000000000000003' [ 257.580576][ T8868] syzkaller0: entered promiscuous mode [ 257.587817][ T8868] syzkaller0: entered allmulticast mode [ 257.635370][ T8870] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1201'. [ 258.022783][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 258.059776][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 262.417181][ T5718] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 262.589987][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.619759][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.663149][ T5718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.694259][ T5718] usb 5-1: config 1 interface 0 has no altsetting 0 [ 262.719591][ T5718] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 262.752258][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.775714][ T5718] usb 5-1: Product: syz [ 262.797720][ T5718] usb 5-1: Manufacturer: syz [ 262.821059][ T5718] usb 5-1: SerialNumber: syz [ 263.061661][ T8943] __nla_validate_parse: 5 callbacks suppressed [ 263.061680][ T8943] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1225'. [ 263.080844][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 263.135141][ T5718] smsusb:smsusb_probe: board id=8, interface number 0 [ 263.150731][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1228'. [ 263.163537][ T5718] smsusb:smsusb_probe: Device initialized with return code -19 [ 263.263573][ T5718] usb 5-1: USB disconnect, device number 13 [ 264.322064][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 265.177272][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 265.375037][ T29] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.401293][ T29] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 265.428521][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.455648][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 265.495425][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 265.537999][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.568806][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.605207][ T29] usb 3-1: Product: syz [ 265.618580][ T29] usb 3-1: Manufacturer: syz [ 265.668261][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 265.685299][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 265.714624][ T29] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 265.737825][ T29] cdc_wdm 3-1:1.0: Unknown control protocol [ 265.943458][ T1223] usb 3-1: USB disconnect, device number 8 [ 266.598829][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 266.881306][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 266.957778][ T8987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1242'. [ 267.430739][ T8900] syz.1.1210 (8900) used greatest stack depth: 18240 bytes left [ 267.567628][ T5718] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 267.729244][ T5718] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.767200][ T5718] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.800029][ T5718] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.837656][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.863915][ T8994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.886295][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.680839][ T5702] usb 2-1: USB disconnect, device number 12 [ 268.706039][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1247'. [ 268.996010][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 269.379870][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 269.486077][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 270.632629][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 271.792985][ T9079] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1275'. [ 272.857423][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 273.110663][ T5633] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.442999][ T9105] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 273.701357][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.723742][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.768703][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 273.813135][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.887672][ T5633] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.919304][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.618301][ T5633] usb 3-1: config 0 descriptor?? [ 275.368969][ T5633] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.532837][ T9121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 275.564050][ T30] audit: type=1804 audit(1779936792.228:21): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1290" name="/newroot/234/file0" dev="tmpfs" ino=1204 res=1 errno=0 [ 277.085920][ T9141] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 277.120673][ T9141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 277.629330][ T29] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 277.867651][ T5718] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 277.870326][ T9146] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 278.362265][ T9148] bond3: (slave geneve2): making interface the new active one [ 278.537099][ T9148] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 278.548504][ T8548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.563644][ T8548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.591418][ T8548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.626710][ T8548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.825060][ T5633] usb 3-1: USB disconnect, device number 9 [ 279.162109][ T9161] CUSE: unknown device info "" [ 279.191105][ T9161] CUSE: unknown device info "" [ 279.224748][ T9161] CUSE: unknown device info "" [ 279.247731][ T9161] CUSE: unknown device info "" [ 279.270908][ T9161] CUSE: unknown device info "" [ 279.300463][ T5633] IPVS: starting estimator thread 0... [ 279.317836][ T9161] CUSE: unknown device info "" [ 279.450071][ T9162] IPVS: using max 26 ests per chain, 62400 per kthread [ 279.507648][ T9161] CUSE: unknown device info "" [ 279.533126][ T9161] CUSE: unknown device info "" [ 279.546917][ T9161] CUSE: unknown device info "" [ 279.556696][ T9161] CUSE: unknown device info "" [ 279.576617][ T9161] CUSE: unknown device info "" [ 279.581536][ T9161] CUSE: unknown device info "r" [ 279.586382][ T9161] CUSE: unknown device info "#" [ 279.626634][ T9161] CUSE: unknown device info "" [ 279.774869][ T9161] CUSE: unknown device info "" [ 279.790173][ T9161] CUSE: unknown device info "" [ 279.795354][ T9161] CUSE: DEVNAME unspecified [ 280.522673][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 280.530382][ T29] usb 5-1: can't read configurations, error -71 [ 280.598449][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1311'. [ 281.363751][ T5718] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 281.736746][ T5718] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 281.747352][ T5718] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 281.778039][ T5718] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 281.796668][ T5718] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 281.824038][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 282.003815][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.015603][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 282.107300][ T5718] usb 1-1: string descriptor 0 read error: -22 [ 282.113776][ T5718] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 282.133688][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.326493][ T5718] usb 1-1: config 0 descriptor?? [ 282.355550][ T5718] hub 1-1:0.0: bad descriptor, ignoring hub [ 282.362174][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 282.369629][ T5718] hub 1-1:0.0: probe with driver hub failed with error -5 [ 282.416871][ T5718] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 282.632432][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 282.958281][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 283.350686][ T5718] input: failed to attach handler mousedev to device input17, error: -5 [ 283.682635][ T5718] usb 1-1: USB disconnect, device number 19 [ 285.759364][ T1223] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 286.141297][ T1223] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 286.151018][ T1223] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 286.167002][ T1223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 286.359106][ T1223] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 286.376511][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 286.413320][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.450077][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 286.702319][ T1223] usb 5-1: string descriptor 0 read error: -22 [ 286.709292][ T1223] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 286.719170][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.738867][ T1223] usb 5-1: config 0 descriptor?? [ 286.758443][ T1223] hub 5-1:0.0: bad descriptor, ignoring hub [ 286.768842][ T1223] hub 5-1:0.0: probe with driver hub failed with error -5 [ 286.830022][ T1223] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 287.124113][ T1223] usb 5-1: USB disconnect, device number 16 [ 287.456701][ T9278] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.940905][ T9283] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 288.336494][ T9292] netlink: 'syz.4.1360': attribute type 4 has an invalid length. [ 288.345399][ T9292] netlink: 'syz.4.1360': attribute type 4 has an invalid length. [ 289.315114][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 290.196660][ T5689] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.496378][ T5633] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 290.832745][ T9323] loop6: detected capacity change from 0 to 8 [ 290.847241][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.848503][ T5633] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 290.857833][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.866300][ T5633] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 290.886371][ T5633] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 290.902243][ T5633] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 290.922195][ T5633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 291.066128][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.076756][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 291.090602][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.101116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 291.101127][ T5633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.119394][ T5633] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 291.139143][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.149580][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 291.161400][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.171705][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 291.366981][ T5633] usb 4-1: string descriptor 0 read error: -22 [ 291.376831][ T5633] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 291.397086][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.416419][ T9329] [ 291.418851][ T9329] ====================================================== [ 291.425883][ T9329] WARNING: possible circular locking dependency detected [ 291.432944][ T9329] syzkaller #0 Tainted: G L [ 291.438940][ T9329] ------------------------------------------------------ [ 291.445974][ T9329] syz.1.1375/9329 is trying to acquire lock: [ 291.452228][ T9329] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 291.462533][ T9329] [ 291.462533][ T9329] but task is already holding lock: [ 291.469904][ T9329] ffff888026f18060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 291.479678][ T9329] [ 291.479678][ T9329] which lock already depends on the new lock. [ 291.479678][ T9329] [ 291.490088][ T9329] [ 291.490088][ T9329] the existing dependency chain (in reverse order) is: [ 291.499092][ T9329] [ 291.499092][ T9329] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 291.507709][ T9329] blk_alloc_queue+0x546/0x680 [ 291.513191][ T9329] __blk_mq_alloc_disk+0x197/0x390 [ 291.518915][ T9329] loop_add+0x482/0xb40 [ 291.523591][ T9329] loop_init+0xd9/0x170 [ 291.528273][ T9329] do_one_initcall+0x250/0x870 [ 291.533642][ T9329] do_initcall_level+0x104/0x190 [ 291.539104][ T9329] do_initcalls+0x59/0xa0 [ 291.543998][ T9329] kernel_init_freeable+0x2a6/0x3e0 [ 291.549810][ T9329] kernel_init+0x1d/0x1d0 [ 291.554695][ T9329] ret_from_fork+0x514/0xb70 [ 291.559829][ T9329] ret_from_fork_asm+0x1a/0x30 [ 291.565137][ T9329] [ 291.565137][ T9329] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 291.572379][ T9329] fs_reclaim_acquire+0x71/0x100 [ 291.577866][ T9329] kmem_cache_alloc_noprof+0x40/0x650 [ 291.583864][ T9329] __kernfs_iattrs+0xdf/0x320 [ 291.589080][ T9329] kernfs_iop_setattr+0xea/0x3f0 [ 291.594642][ T9329] notify_change+0xc1a/0xf40 [ 291.599938][ T9329] do_truncate+0x1c2/0x250 [ 291.604940][ T9329] path_openat+0x2f89/0x3860 [ 291.610220][ T9329] do_file_open+0x23e/0x4a0 [ 291.615236][ T9329] do_sys_openat2+0x113/0x200 [ 291.620430][ T9329] __x64_sys_openat+0x138/0x170 [ 291.625874][ T9329] do_syscall_64+0x174/0x580 [ 291.630970][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.637372][ T9329] [ 291.637372][ T9329] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 291.645923][ T9329] __lock_acquire+0x15a5/0x2cf0 [ 291.651304][ T9329] lock_acquire+0x106/0x350 [ 291.656331][ T9329] down_read+0x47/0x2e0 [ 291.661016][ T9329] kernfs_iop_getattr+0x9e/0x450 [ 291.666574][ T9329] vfs_getattr_nosec+0x2e1/0x430 [ 291.672038][ T9329] loop_assign_backing_file+0x27a/0x4b0 [ 291.678162][ T9329] lo_ioctl+0x1acb/0x1fb0 [ 291.683133][ T9329] lo_compat_ioctl+0x324/0x3f0 [ 291.688445][ T9329] compat_blkdev_ioctl+0x5ea/0x7c0 [ 291.694190][ T9329] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 291.700191][ T9329] __do_fast_syscall_32+0x23e/0x6f0 [ 291.705937][ T9329] do_fast_syscall_32+0x33/0x70 [ 291.711341][ T9329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.718322][ T9329] [ 291.718322][ T9329] other info that might help us debug this: [ 291.718322][ T9329] [ 291.728722][ T9329] Chain exists of: [ 291.728722][ T9329] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 291.728722][ T9329] [ 291.743161][ T9329] Possible unsafe locking scenario: [ 291.743161][ T9329] [ 291.750785][ T9329] CPU0 CPU1 [ 291.756135][ T9329] ---- ---- [ 291.761481][ T9329] lock(&q->q_usage_counter(io)#23); [ 291.766856][ T9329] lock(fs_reclaim); [ 291.773370][ T9329] lock(&q->q_usage_counter(io)#23); [ 291.781272][ T9329] rlock(&root->kernfs_iattr_rwsem); [ 291.786644][ T9329] [ 291.786644][ T9329] *** DEADLOCK *** [ 291.786644][ T9329] [ 291.794951][ T9329] 3 locks held by syz.1.1375/9329: [ 291.800055][ T9329] #0: ffff888027034430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 291.809201][ T9329] #1: ffff888026f18060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 291.819397][ T9329] #2: ffff888026f18098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 291.829941][ T9329] [ 291.829941][ T9329] stack backtrace: [ 291.836119][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.1.1375 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.836150][ T9329] Tainted: [L]=SOFTLOCKUP [ 291.836157][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.836170][ T9329] Call Trace: [ 291.836180][ T9329] [ 291.836189][ T9329] dump_stack_lvl+0xe8/0x150 [ 291.836213][ T9329] print_circular_bug+0x2e1/0x300 [ 291.836237][ T9329] check_noncircular+0x12e/0x150 [ 291.836265][ T9329] __lock_acquire+0x15a5/0x2cf0 [ 291.836300][ T9329] ? kernfs_iop_getattr+0x9e/0x450 [ 291.836324][ T9329] lock_acquire+0x106/0x350 [ 291.836343][ T9329] ? kernfs_iop_getattr+0x9e/0x450 [ 291.836371][ T9329] down_read+0x47/0x2e0 [ 291.836393][ T9329] ? kernfs_iop_getattr+0x9e/0x450 [ 291.836417][ T9329] kernfs_iop_getattr+0x9e/0x450 [ 291.836443][ T9329] vfs_getattr_nosec+0x2e1/0x430 [ 291.836467][ T9329] loop_assign_backing_file+0x27a/0x4b0 [ 291.836495][ T9329] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 291.836534][ T9329] lo_ioctl+0x1acb/0x1fb0 [ 291.836560][ T9329] ? __pfx_lo_ioctl+0x10/0x10 [ 291.836583][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836605][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836628][ T9329] ? do_raw_spin_lock+0x12b/0x2f0 [ 291.836656][ T9329] ? do_raw_spin_lock+0x12b/0x2f0 [ 291.836683][ T9329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.836712][ T9329] ? rcu_is_watching+0x15/0xb0 [ 291.836734][ T9329] ? trace_hrtimer_start+0x82/0x200 [ 291.836768][ T9329] ? finish_task_switch+0x4da/0xbe0 [ 291.836786][ T9329] ? rcu_is_watching+0x15/0xb0 [ 291.836808][ T9329] ? trace_sched_exit_tp+0x3a/0x130 [ 291.836825][ T9329] ? __schedule+0x1837/0x5740 [ 291.836854][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836876][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836897][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836919][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836940][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836962][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.836982][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.837005][ T9329] ? unwind_next_frame+0xa6/0x2550 [ 291.837031][ T9329] ? unwind_next_frame+0xa6/0x2550 [ 291.837053][ T9329] ? is_bpf_text_address+0x26/0x2b0 [ 291.837078][ T9329] ? is_bpf_text_address+0x26/0x2b0 [ 291.837099][ T9329] ? is_bpf_text_address+0x292/0x2b0 [ 291.837117][ T9329] ? is_bpf_text_address+0x26/0x2b0 [ 291.837137][ T9329] ? kernel_text_address+0xa5/0xe0 [ 291.837165][ T9329] ? __kernel_text_address+0xd/0x30 [ 291.837190][ T9329] ? unwind_get_return_address+0x4d/0x90 [ 291.837213][ T9329] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.837242][ T9329] ? arch_stack_walk+0xfb/0x150 [ 291.837270][ T9329] ? stack_trace_save+0xa9/0x100 [ 291.837303][ T9329] ? __pfx_stack_trace_save+0x10/0x10 [ 291.837330][ T9329] ? kasan_save_free_info+0x46/0x50 [ 291.837355][ T9329] ? stack_depot_save_flags+0x33/0x810 [ 291.837378][ T9329] ? kasan_save_track+0x4f/0x80 [ 291.837403][ T9329] ? kasan_save_track+0x3e/0x80 [ 291.837428][ T9329] ? kasan_save_free_info+0x46/0x50 [ 291.837448][ T9329] ? __kasan_slab_free+0x5c/0x80 [ 291.837475][ T9329] ? kfree+0x1c5/0x640 [ 291.837498][ T9329] ? tomoyo_path_number_perm+0x501/0x630 [ 291.837523][ T9329] ? security_file_ioctl_compat+0xc3/0x2a0 [ 291.837547][ T9329] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 291.837578][ T9329] ? __asan_memset+0x22/0x50 [ 291.837602][ T9329] ? blk_get_meta_cap+0x16d/0x7a0 [ 291.837627][ T9329] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 291.837654][ T9329] ? blkdev_common_ioctl+0x14b7/0x3240 [ 291.837683][ T9329] lo_compat_ioctl+0x324/0x3f0 [ 291.837707][ T9329] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 291.837731][ T9329] ? kasan_quarantine_put+0xbb/0x1f0 [ 291.837760][ T9329] ? tomoyo_path_number_perm+0x219/0x630 [ 291.837786][ T9329] ? tomoyo_path_number_perm+0x219/0x630 [ 291.837812][ T9329] ? do_vfs_ioctl+0x1166/0x1530 [ 291.837842][ T9329] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.837875][ T9329] ? __lock_acquire+0x6b5/0x2cf0 [ 291.837900][ T9329] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 291.837924][ T9329] compat_blkdev_ioctl+0x5ea/0x7c0 [ 291.837951][ T9329] ? __fget_files+0x2a/0x420 [ 291.837976][ T9329] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 291.838002][ T9329] ? __fget_files+0x2a/0x420 [ 291.838027][ T9329] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 291.838056][ T9329] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 291.838087][ T9329] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 291.838118][ T9329] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.838145][ T9329] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.838163][ T9329] ? _raw_spin_unlock_irq+0x2e/0x50 [ 291.838189][ T9329] ? __ia32_compat_sys_rt_sigprocmask+0x2c6/0x340 [ 291.838214][ T9329] ? rcu_is_watching+0x15/0xb0 [ 291.838241][ T9329] __do_fast_syscall_32+0x23e/0x6f0 [ 291.838262][ T9329] ? do_fast_syscall_32+0x33/0x70 [ 291.838281][ T9329] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.838305][ T9329] ? irqentry_exit+0x10f/0x8b0 [ 291.838322][ T9329] ? trace_irq_disable+0x3b/0x140 [ 291.838351][ T9329] do_fast_syscall_32+0x33/0x70 [ 291.838371][ T9329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.838395][ T9329] RIP: 0023:0xf7f5301c [ 291.838412][ T9329] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 291.838429][ T9329] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 291.838451][ T9329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 291.838465][ T9329] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.838477][ T9329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.838488][ T9329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.838501][ T9329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.838520][ T9329] [ 291.911109][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 291.916657][ T5633] usb 4-1: config 0 descriptor?? [ 292.131504][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.152768][ T5633] hub 4-1:0.0: bad descriptor, ignoring hub [ 292.156296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.161197][ T5633] hub 4-1:0.0: probe with driver hub failed with error -5 [ 292.168503][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.174231][ T5633] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 292.176785][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.176940][ T9323] ldm_validate_partition_table(): Disk read failed. [ 292.192373][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.192411][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.675446][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.679397][ T5633] usb 4-1: USB disconnect, device number 8 [ 292.685654][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.686059][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.709951][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.718132][ T9323] Dev loop6: unable to read RDB block 0 [ 292.724156][ T9323] loop6: unable to read partition table [ 292.729971][ T9323] loop6: partition table beyond EOD, truncated [ 292.736365][ T9323] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 292.754012][ T9329] ldm_validate_partition_table(): Disk read failed. [ 292.761301][ T9329] Dev loop6: unable to read RDB block 0 [ 292.767589][ T9329] loop6: unable to read partition table [ 292.773367][ T9329] loop6: partition table beyond EOD, truncated [ 292.781309][ T9329] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 293.098502][ T5689] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 293.106203][ T5689] usb 1-1: can't read configurations, error -71