last executing test programs: 43.469740708s ago: executing program 1 (id=301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x24000840) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 43.152414183s ago: executing program 1 (id=303): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 43.110072557s ago: executing program 1 (id=304): socketpair(0x21, 0x3, 0xcc, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x24000004) openat$uhid(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x16, 0xfc, 0xe9, 0x8, 0x1bcf, 0xb40, 0x11ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x140, 0x7, [{{0x9, 0x4, 0x78, 0xa, 0x0, 0xe, 0x1, 0x0, 0x40}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x110, 0x4, 0xe, 0x7, 0x20, 0x9}, 0x0, 0x0}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) getpeername$unix(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000010) syz_clone(0x800c200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 41.145106455s ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39.797056823s ago: executing program 1 (id=322): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.97658286s ago: executing program 1 (id=325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xfffffffc, 0xfffffffd, 0x6, 0x6eddb310, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6835446b3"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001280)={0x7, 0xc239, 0x4, 0x3, 0x16, "b920df02aa57b844"}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) 38.887080217s ago: executing program 32 (id=325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xfffffffc, 0xfffffffd, 0x6, 0x6eddb310, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6835446b3"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001280)={0x7, 0xc239, 0x4, 0x3, 0x16, "b920df02aa57b844"}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) 5.228845279s ago: executing program 4 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x2, 0x0, 0x200000000000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 5.110202148s ago: executing program 4 (id=525): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045440, 0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.685503503s ago: executing program 3 (id=531): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x4, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x50) 4.590234931s ago: executing program 3 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec9", 0xc}, {&(0x7f0000000440)="9c74df", 0x3}], 0x2) 4.379711817s ago: executing program 3 (id=533): syz_create_resource$binfmt(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000800)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)={0x40, 0x15, 0x5f, "32d32ad9b0b5539c7d235be9a7126cc8253128af868e293ce6d79d1dd3ad3329e7fa97419bcbfb6173ad32b050b72be7e339440cca9c5b30fc054709ac346ada4a7f0c46eace89edd6325457edac794b31a8eec727088ce091282c57882de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "9d3d"}, 0x0, 0x0, 0x0, 0x0}) 4.154236386s ago: executing program 5 (id=535): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) 2.630289238s ago: executing program 0 (id=538): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002d80)=""/253, 0xfd}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f00000000c0)=""/48, 0x30}], 0xa, 0x0, 0x38}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x1e, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x7, 0x40012100, 0x0) 2.629956278s ago: executing program 0 (id=539): socket$can_raw(0x1d, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x24ee41, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffff9}}) sched_setscheduler(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.318807933s ago: executing program 0 (id=540): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000a00)) 2.301228685s ago: executing program 5 (id=541): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.070326704s ago: executing program 4 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"]) 2.050957925s ago: executing program 4 (id=543): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 1.967606992s ago: executing program 4 (id=544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 1.606916361s ago: executing program 4 (id=545): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_pts(r0, 0x105000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2040, &(0x7f00000001c0)={[{@xino_off}], [{@euid_lt}]}) connect$tipc(r0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000026c0)=0x4d60, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000002700)=@req={0x2, 0x40, 0x0, 0x6787}, 0x10) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x12060) syz_usb_connect(0x5, 0x36, &(0x7f0000002a80)={{0x12, 0x1, 0x200, 0xb1, 0xb6, 0xcf, 0x8, 0x499, 0x1000, 0x613a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xb7, 0x3, 0x1, 0x5a, 0x6, 0xd3, 0x6, [@hid_hid={0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x8b2}}], [{{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0x3, 0xff}}]}}]}}]}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) 1.064368534s ago: executing program 2 (id=551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) 982.297671ms ago: executing program 2 (id=552): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x2}) 982.108851ms ago: executing program 2 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a00201db5298c049239b0bf3ee895b811302dc2e9b58a83f692cc3ad6d5ba5b26cc76c544cd11ccdac4f57cd02a45b1b0161cdcb4bd376152dbef97d9c5f17f0c612d"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 940.743734ms ago: executing program 2 (id=554): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x81, 0x30, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1}, {0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0xfe, 0x0, 0x3}, {0x200003, 0xb, 0x1c, 0x8, 0x40, 0x8, 0x5f, 0x1, 0x0, 0x8, 0x0, 0x8, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 906.330707ms ago: executing program 2 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 588.914693ms ago: executing program 3 (id=556): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 502.38757ms ago: executing program 2 (id=557): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x86) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 479.449292ms ago: executing program 3 (id=558): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 363.523281ms ago: executing program 5 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008895}, 0x4040080) 270.314969ms ago: executing program 5 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000022, 0x0, 0x201}]}) 245.02712ms ago: executing program 0 (id=561): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0x0, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa40]}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 137.276579ms ago: executing program 5 (id=562): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x10000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 50.281926ms ago: executing program 3 (id=563): ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3, 0x4000010, 0xffffffffffffffff, 0xeda2d000) getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000003dc0)={0x60000200, &(0x7f0000003bc0)=0xffffffffffffffff, 0x0, &(0x7f0000003c40), {0x10}, 0x0, 0x0, &(0x7f0000003cc0)=""/185, &(0x7f0000003d80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) syz_clone3(&(0x7f0000003e80)={0x10000000, 0x0, &(0x7f0000003980), 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x5) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000040c0)) socket$nl_generic(0x10, 0x3, 0x10) 50.014656ms ago: executing program 0 (id=564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000003000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000044010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000005000000ac1414bb000000000000000000000000000000003200000000002ec388110000ac1414bb000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000001"], 0x1fc}}, 0x48014) 49.629096ms ago: executing program 5 (id=565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 0s ago: executing program 0 (id=566): syz_create_resource$binfmt(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000800)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)={0x40, 0x15, 0x5f, "32d32ad9b0b5539c7d235be9a7126cc8253128af868e293ce6d79d1dd3ad3329e7fa97419bcbfb6173ad32b050b72be7e339440cca9c5b30fc054709ac346ada4a7f0c46eace89edd6325457edac794b31a8eec727088ce091282c57882de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "9d3d"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): inder of the config [ 84.455753][ T4246] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 84.467454][ T4246] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 24692, setting to 1024 [ 84.487744][ T4246] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.651342][ T4232] hub 2-1:0.0: 1 port detected [ 84.675032][ T4246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.695867][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.715088][ T4246] usb 5-1: Product: syz [ 84.720277][ T4246] usb 5-1: Manufacturer: syz [ 84.728327][ T4246] usb 5-1: SerialNumber: syz [ 84.839265][ T4336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.131325][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 85.137924][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 85.229282][ T4336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.249956][ T4336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.319313][ T4232] hub 2-1:0.0: activate --> -90 [ 85.349516][ T4336] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.369192][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.378356][ T4336] usb 4-1: SerialNumber: syz [ 85.694679][ T4336] usb 4-1: 0:2 : does not exist [ 85.719926][ T4336] usb 4-1: USB disconnect, device number 3 [ 85.859832][ T4246] cdc_ncm 5-1:1.0: bind() failure [ 85.899376][ T4246] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 85.919410][ T4246] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 85.941637][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.949296][ T4260] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.959382][ T4246] usbtest: probe of 5-1:1.1 failed with error -71 [ 85.989902][ T4246] usb 5-1: USB disconnect, device number 3 [ 86.192957][ T4336] usb 2-1: USB disconnect, device number 2 [ 86.201683][ T4232] usb 2-1-port1: cannot reset (err = -71) [ 86.209213][ T4232] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 86.218616][ T4232] usb 2-1-port1: attempt power cycle [ 86.225321][ T4260] usb 1-1: Using ep0 maxpacket: 16 [ 86.359391][ T4260] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 86.371788][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.399267][ T4260] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.559325][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.590146][ T4260] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.602378][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.614609][ T4260] usb 1-1: Product: syz [ 86.622533][ T4260] usb 1-1: Manufacturer: syz [ 86.627986][ T4260] usb 1-1: SerialNumber: syz [ 86.819891][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 86.949494][ T21] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.958748][ T21] usb 4-1: config 0 has no interface number 0 [ 86.967715][ T21] usb 4-1: config 0 interface 184 has no altsetting 0 [ 87.109920][ T4260] usb 1-1: 0:2 : does not exist [ 87.179331][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 87.192191][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.201761][ T21] usb 4-1: Product: syz [ 87.206376][ T21] usb 4-1: Manufacturer: syz [ 87.209442][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 87.211580][ T21] usb 4-1: SerialNumber: syz [ 87.240157][ T21] usb 4-1: config 0 descriptor?? [ 87.300258][ T21] smsc75xx v1.0.0 [ 87.972671][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 87.988002][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.339317][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.589260][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 88.819528][ T13] usb 2-1: config 16 has an invalid interface number: 224 but max is 2 [ 88.830792][ T13] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 88.843365][ T13] usb 2-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 88.854036][ T13] usb 2-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 88.865376][ T13] usb 2-1: config 16 has an invalid descriptor of length 67, skipping remainder of the config [ 88.881445][ T13] usb 2-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 88.891893][ T13] usb 2-1: config 16 has no interface number 1 [ 88.899838][ T13] usb 2-1: config 16 interface 224 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 88.914894][ T13] usb 2-1: config 16 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.929805][ T13] usb 2-1: config 16 interface 224 has no altsetting 0 [ 88.937751][ T13] usb 2-1: config 16 interface 0 has no altsetting 0 [ 89.029479][ T4260] usb 1-1: 1:0: cannot get min/max values for control 6 (id 1) [ 89.119754][ T13] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice=1b.be [ 89.130256][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.139480][ T13] usb 2-1: Product: syz [ 89.144037][ T13] usb 2-1: Manufacturer: syz [ 89.149352][ T13] usb 2-1: SerialNumber: syz [ 89.243300][ T4260] usb 1-1: USB disconnect, device number 2 [ 89.480506][ T13] ums-onetouch 2-1:16.224: USB Mass Storage device detected [ 89.501465][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.559643][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.575941][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 89.594011][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 89.612150][ T21] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 89.650112][ T13] ums-onetouch 2-1:16.0: USB Mass Storage device detected [ 89.662679][ T21] usb 4-1: USB disconnect, device number 4 [ 89.725131][ T13] usb 2-1: USB disconnect, device number 7 [ 90.265826][ T4461] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.289309][ T4461] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.336282][ T4447] loop4: detected capacity change from 0 to 32768 [ 90.669424][ T4447] overlayfs: unrecognized mount option "fsname=iocharset" or missing value [ 90.699941][ T4477] tipc: Started in network mode [ 90.711488][ T4474] read_mapping_page failed! [ 90.730416][ T4477] tipc: Node identity c2ca6feda8ba, cluster identity 4711 [ 90.750217][ T4474] ERROR: (device loop4): txCommit: [ 90.750217][ T4474] [ 90.803501][ T4477] tipc: Enabled bearer , priority 0 [ 90.844841][ T4470] tipc: Resetting bearer [ 90.997442][ T4470] tipc: Disabling bearer [ 91.034469][ T154] read_mapping_page failed! [ 91.039895][ T154] ERROR: (device loop4): txCommit: [ 91.039895][ T154] [ 91.077529][ T154] jfs_write_inode: jfs_commit_inode failed! [ 91.663356][ T1111] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.705761][ T1111] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.733222][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 92.174733][ T1348] cfg80211: failed to load regulatory.db [ 92.323242][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.507286][ T4517] loop3: detected capacity change from 0 to 32768 [ 92.532489][ T4517] ======================================================= [ 92.532489][ T4517] WARNING: The mand mount option has been deprecated and [ 92.532489][ T4517] and is ignored by this kernel. Remove the mand [ 92.532489][ T4517] option from the mount to silence this warning. [ 92.532489][ T4517] ======================================================= [ 92.659268][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 92.685820][ T4517] XFS (loop3): Mounting V5 Filesystem [ 92.789519][ T4260] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.808646][ T4260] usb 3-1: config 0 has no interface number 0 [ 92.861596][ T4517] XFS (loop3): Ending clean mount [ 92.894606][ T4517] XFS (loop3): Quotacheck needed: Please wait. [ 93.015652][ T4517] XFS (loop3): Quotacheck: Done. [ 93.032307][ T4260] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.053699][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.079661][ T26] audit: type=1800 audit(1754210093.458:3): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 93.089991][ T4260] usb 3-1: Product: syz [ 93.153965][ T4260] usb 3-1: Manufacturer: syz [ 93.177113][ T4260] usb 3-1: SerialNumber: syz [ 93.177932][ T26] audit: type=1800 audit(1754210093.498:4): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 93.206248][ T4260] usb 3-1: config 0 descriptor?? [ 93.260289][ T4260] smsc95xx v2.0.0 [ 93.373279][ T4195] XFS (loop3): Unmounting Filesystem [ 93.689395][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 93.722917][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.769668][ T4246] Bluetooth: hci5: command 0x1003 tx timeout [ 93.776814][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 93.967024][ T4569] fuse: Bad value for 'fd' [ 94.429372][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 94.443000][ T4260] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 94.469758][ T4583] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.479980][ T4583] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 94.599361][ T4246] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.743575][ T4594] tipc: Started in network mode [ 94.755856][ T4594] tipc: Node identity 362033eb570e, cluster identity 4711 [ 94.766562][ T4594] tipc: Enabled bearer , priority 0 [ 94.780324][ T4593] tipc: Resetting bearer [ 94.840655][ T4593] tipc: Disabling bearer [ 94.854242][ T4246] usb 4-1: Using ep0 maxpacket: 32 [ 94.979590][ T4246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.002515][ T4246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.021224][ T4246] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.047571][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.086027][ T4246] usb 4-1: config 0 descriptor?? [ 95.130523][ T4246] hub 4-1:0.0: USB hub found [ 95.237985][ T4598] loop4: detected capacity change from 0 to 32768 [ 95.305400][ T4598] XFS (loop4): Mounting V5 Filesystem [ 95.349308][ T4246] hub 4-1:0.0: 1 port detected [ 95.381521][ T4598] XFS (loop4): Ending clean mount [ 95.398951][ T4598] XFS (loop4): Quotacheck needed: Please wait. [ 95.439387][ T4598] XFS (loop4): Quotacheck: Done. [ 95.449662][ T1108] usb 3-1: USB disconnect, device number 2 [ 95.479910][ T26] audit: type=1800 audit(1754210095.868:5): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.90" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 95.522501][ T26] audit: type=1800 audit(1754210095.908:6): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.90" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 95.844972][ T4186] XFS (loop4): Unmounting Filesystem [ 95.851954][ T4246] Bluetooth: hci5: command 0x1001 tx timeout [ 95.858315][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 95.934400][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.989457][ T1348] hub 4-1:0.0: activate --> -90 [ 96.189353][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 96.309412][ T1108] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.320379][ T1108] usb 3-1: config 0 has no interface number 0 [ 96.328652][ T1108] usb 3-1: config 0 interface 184 has no altsetting 0 [ 96.509497][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.520338][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.531209][ T1108] usb 3-1: Product: syz [ 96.535588][ T1108] usb 3-1: Manufacturer: syz [ 96.541344][ T1108] usb 3-1: SerialNumber: syz [ 96.560171][ T1108] usb 3-1: config 0 descriptor?? [ 96.600891][ T1108] smsc75xx v1.0.0 [ 96.851405][ T13] usb 4-1: USB disconnect, device number 5 [ 96.869562][ T1348] usb 4-1-port1: cannot reset (err = -71) [ 96.875563][ T1348] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 96.885244][ T1348] usb 4-1-port1: attempt power cycle [ 97.259435][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 97.275254][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.396075][ T4616] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.929363][ T1348] Bluetooth: hci5: command 0x1009 tx timeout [ 98.027649][ T4620] device syzkaller0 entered promiscuous mode [ 98.036434][ T1348] syzkaller0: tun_net_xmit 48 [ 98.054391][ T4620] syzkaller0: create flow: hash 3096060636 index 1 [ 98.066383][ T4620] syzkaller0: delete flow: hash 3096060636 index 1 [ 98.329653][ T4622] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.338178][ T4622] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.699487][ T4260] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 98.829530][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.841185][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 98.851768][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.862362][ T1108] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 98.873941][ T1108] usb 3-1: USB disconnect, device number 3 [ 99.069364][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.082657][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.095033][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.110006][ T4260] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 99.121240][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.160073][ T4260] usb 4-1: config 0 descriptor?? [ 99.457693][ T4637] tipc: Started in network mode [ 99.466970][ T4637] tipc: Node identity 2edc146f955, cluster identity 4711 [ 99.478025][ T4637] tipc: Enabled bearer , priority 0 [ 99.489590][ T4636] tipc: Resetting bearer [ 99.558702][ T4636] tipc: Disabling bearer [ 99.643996][ T4260] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 99.658245][ T4260] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 99.673741][ T4260] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 2/5 [ 99.686861][ T4260] kovaplus 0003:1E7D:2D50.0004: parse failed [ 99.702338][ T4260] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22 [ 99.719193][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.843719][ T4260] usb 4-1: USB disconnect, device number 10 [ 100.026246][ T1108] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.059655][ T1108] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.093763][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.147880][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.218182][ T4644] loop2: detected capacity change from 0 to 32768 [ 100.259449][ T1111] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.276038][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.285081][ T1111] usb 1-1: SerialNumber: syz [ 100.310876][ T4644] XFS (loop2): Mounting V5 Filesystem [ 100.445178][ T4644] XFS (loop2): Ending clean mount [ 100.479414][ T4644] XFS (loop2): Quotacheck needed: Please wait. [ 100.502738][ T4664] netlink: 312 bytes leftover after parsing attributes in process `syz.3.112'. [ 100.554502][ T4644] XFS (loop2): Quotacheck: Done. [ 100.572332][ T1111] usb 1-1: 0:2 : does not exist [ 100.583446][ T26] audit: type=1800 audit(1754210100.968:7): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 100.631884][ T1111] usb 1-1: USB disconnect, device number 3 [ 100.700693][ T4197] XFS (loop2): Unmounting Filesystem [ 100.881826][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.187930][ T4673] device syzkaller0 entered promiscuous mode [ 101.198959][ T13] syzkaller0: tun_net_xmit 48 [ 101.208734][ T4680] syzkaller0: create flow: hash 3096060636 index 1 [ 101.268043][ T4673] syzkaller0: delete flow: hash 3096060636 index 1 [ 101.920294][ T4702] cgroup: Need name or subsystem set [ 102.048898][ T1108] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 102.076299][ T1108] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.508927][ T4699] loop1: detected capacity change from 0 to 32768 [ 102.540524][ T4699] XFS (loop1): Mounting V5 Filesystem [ 102.693636][ T4699] XFS (loop1): Ending clean mount [ 102.722011][ T4699] XFS (loop1): Quotacheck needed: Please wait. [ 102.798824][ T4699] XFS (loop1): Quotacheck: Done. [ 102.878420][ T26] audit: type=1800 audit(1754210103.258:8): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 103.001893][ T4191] XFS (loop1): Unmounting Filesystem [ 103.457232][ T4739] usb usb8: usbfs: process 4739 (syz.1.131) did not claim interface 0 before use [ 103.539528][ T1108] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 103.669367][ T4203] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 103.959677][ T1108] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.977909][ T1108] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.996384][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.006267][ T1108] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 104.025351][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.043951][ T1108] usb 4-1: config 0 descriptor?? [ 104.079313][ T4203] usb 3-1: config 0 has no interfaces? [ 104.097258][ T4755] loop1: detected capacity change from 0 to 32768 [ 104.178335][ T4755] XFS (loop1): Mounting V5 Filesystem [ 104.219477][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.265053][ T4260] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 104.279663][ T4203] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 104.294272][ T4260] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.326093][ T4203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.361475][ T4203] usb 3-1: Product: syz [ 104.365805][ T4203] usb 3-1: Manufacturer: syz [ 104.416545][ T4203] usb 3-1: SerialNumber: syz [ 104.446377][ T4203] usb 3-1: config 0 descriptor?? [ 104.491126][ T4755] XFS (loop1): Ending clean mount [ 104.506535][ T4755] XFS (loop1): Quotacheck needed: Please wait. [ 104.528809][ T1108] steelseries_srws1 0003:1038:1410.0008: missing HID_OUTPUT_REPORT 0 [ 104.583478][ T4755] XFS (loop1): Quotacheck: Done. [ 104.616801][ T26] audit: type=1800 audit(1754210104.998:9): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.141" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 104.659461][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.679189][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.694421][ T4191] XFS (loop1): Unmounting Filesystem [ 104.735264][ T1108] usb 4-1: USB disconnect, device number 11 [ 104.764044][ T1348] usb 3-1: USB disconnect, device number 4 [ 104.782504][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.803539][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.818117][ T13] usb 1-1: SerialNumber: syz [ 105.077882][ T4774] input: syz1 as /devices/virtual/input/input8 [ 105.102885][ T13] usb 1-1: 0:2 : does not exist [ 105.118665][ T13] usb 1-1: unit 5: unexpected type 0x0a [ 105.136896][ T13] usb 1-1: USB disconnect, device number 4 [ 105.400207][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 105.413575][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.689499][ T1111] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 105.859343][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.906946][ T4794] loop0: detected capacity change from 0 to 32768 [ 105.929323][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 105.988866][ T4794] XFS (loop0): Mounting V5 Filesystem [ 106.049432][ T1111] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 106.060013][ T4794] XFS (loop0): Ending clean mount [ 106.067376][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.067944][ T4794] XFS (loop0): Quotacheck needed: Please wait. [ 106.097106][ T1111] usb 4-1: config 0 has no interface number 0 [ 106.139314][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 106.188392][ T4794] XFS (loop0): Quotacheck: Done. [ 106.208793][ T26] audit: type=1800 audit(1754210106.588:10): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.154" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 106.259316][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 106.269469][ T26] audit: type=1800 audit(1754210106.648:11): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.154" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 106.269942][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.312278][ T1111] usb 4-1: Product: syz [ 106.317236][ T1111] usb 4-1: Manufacturer: syz [ 106.319606][ T1108] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.335168][ T1111] usb 4-1: SerialNumber: syz [ 106.340696][ T4187] XFS (loop0): Unmounting Filesystem [ 106.349208][ T1108] usb 3-1: config 0 has no interface number 0 [ 106.352712][ T1111] usb 4-1: config 0 descriptor?? [ 106.365766][ T1108] usb 3-1: config 0 interface 184 has no altsetting 0 [ 106.412873][ T1111] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 106.421572][ T1111] usb 4-1: No valid video chain found. [ 106.559758][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.577267][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.587212][ T4808] block device autoloading is deprecated and will be removed. [ 106.598712][ T1108] usb 3-1: Product: syz [ 106.642787][ T1108] usb 3-1: Manufacturer: syz [ 106.648010][ T1108] usb 3-1: SerialNumber: syz [ 106.691502][ T1108] usb 3-1: config 0 descriptor?? [ 106.707458][ T1111] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 106.722544][ T1348] usb 4-1: USB disconnect, device number 12 [ 106.744127][ T1111] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.765867][ T1108] smsc75xx v1.0.0 [ 107.181774][ T4821] device syzkaller0 entered promiscuous mode [ 107.230028][ T4823] input: syz1 as /devices/virtual/input/input9 [ 107.259290][ T4295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.419442][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.432504][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.619662][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 107.699788][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.710973][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.722193][ T4295] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 107.731984][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.743560][ T4295] usb 1-1: config 0 descriptor?? [ 108.029414][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.044300][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.139521][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.149258][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.157895][ T21] usb 4-1: SerialNumber: syz [ 108.223945][ T4295] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 108.462034][ T21] usb 4-1: 0:2 : does not exist [ 108.497779][ T21] usb 4-1: USB disconnect, device number 13 [ 108.502706][ T4832] loop1: detected capacity change from 0 to 32768 [ 108.576633][ T4832] XFS (loop1): Mounting V5 Filesystem [ 108.666297][ T4832] XFS (loop1): Ending clean mount [ 108.674426][ T4832] XFS (loop1): Quotacheck needed: Please wait. [ 108.720086][ T4832] XFS (loop1): Quotacheck: Done. [ 108.730463][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.755057][ T26] audit: type=1800 audit(1754210109.138:12): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 108.786535][ T26] audit: type=1800 audit(1754210109.168:13): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 108.827105][ T4191] XFS (loop1): Unmounting Filesystem [ 109.009324][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.029647][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.041432][ T1108] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.054602][ T1108] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 109.068723][ T1108] usb 3-1: USB disconnect, device number 5 [ 109.249400][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 109.262376][ T13] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.280559][ T13] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 109.319346][ T4295] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 109.339346][ T4295] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 109.376432][ T4295] pyra: probe of 0003:1E7D:2CF6.000A failed with error -71 [ 109.418106][ T4295] usb 1-1: USB disconnect, device number 5 [ 109.527180][ T4853] fido_id[4853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.669672][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.705672][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.729385][ T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 109.758729][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.771479][ T21] usb 4-1: config 0 descriptor?? [ 110.069270][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.231176][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.238558][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.247161][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.255992][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.264145][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.271997][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.280616][ T21] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 110.291922][ T21] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 110.329396][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 110.452771][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.470028][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.639413][ T1111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.652418][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.661094][ T1111] usb 3-1: Product: syz [ 110.665391][ T1111] usb 3-1: Manufacturer: syz [ 110.670438][ T1111] usb 3-1: SerialNumber: syz [ 110.673038][ T13] usb 4-1: USB disconnect, device number 14 [ 111.006865][ T4874] loop1: detected capacity change from 0 to 32768 [ 111.013777][ T1111] usb 3-1: 0:2 : does not exist [ 111.048048][ T1111] usb 3-1: USB disconnect, device number 6 [ 111.054556][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.087581][ T4874] XFS (loop1): Mounting V5 Filesystem [ 111.172839][ T4874] XFS (loop1): Ending clean mount [ 111.183568][ T4874] XFS (loop1): Quotacheck needed: Please wait. [ 111.243869][ T4874] XFS (loop1): Quotacheck: Done. [ 111.281109][ T26] audit: type=1800 audit(1754210111.668:14): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 111.308662][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.327711][ T26] audit: type=1800 audit(1754210111.668:15): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 111.327809][ T4191] XFS (loop1): Unmounting Filesystem [ 111.429454][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.440722][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.451186][ T4260] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 111.461035][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.480288][ T4260] usb 1-1: config 0 descriptor?? [ 111.539216][ T4232] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 111.861122][ T4267] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 111.871897][ T4267] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.909335][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.922022][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.939266][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.952539][ T4260] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 111.969200][ T4260] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 111.989411][ T4260] arvo 0003:1E7D:30D4.000E: item fetching failed at offset 2/7 [ 112.007867][ T4260] arvo 0003:1E7D:30D4.000E: parse failed [ 112.014754][ T4260] arvo: probe of 0003:1E7D:30D4.000E failed with error -22 [ 112.069538][ T4232] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.079506][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.087705][ T4232] usb 4-1: SerialNumber: syz [ 112.154086][ T4336] usb 1-1: USB disconnect, device number 6 [ 112.179320][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 112.185163][ T1111] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.268502][ T4903] syz.4.186 uses obsolete (PF_INET,SOCK_PACKET) [ 112.309442][ T21] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.323813][ T21] usb 3-1: config 0 has no interface number 0 [ 112.331980][ T21] usb 3-1: config 0 interface 184 has no altsetting 0 [ 112.382261][ T4232] usb 4-1: 0:2 : does not exist [ 112.401189][ T4232] usb 4-1: USB disconnect, device number 15 [ 112.499332][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.509029][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.520620][ T21] usb 3-1: Product: syz [ 112.525993][ T21] usb 3-1: Manufacturer: syz [ 112.533457][ T21] usb 3-1: SerialNumber: syz [ 112.541106][ T21] usb 3-1: config 0 descriptor?? [ 112.560105][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.572246][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 112.584216][ T21] smsc75xx v1.0.0 [ 112.588598][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.601051][ T1111] usb 2-1: config 0 descriptor?? [ 112.630711][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.924915][ T4915] tipc: Enabled bearer , priority 0 [ 112.937613][ T4915] device syzkaller0 entered promiscuous mode [ 112.961863][ T4915] tipc: Resetting bearer [ 112.969256][ T4914] tipc: Resetting bearer [ 112.985230][ T4914] tipc: Disabling bearer [ 113.081541][ T1111] logitech-hidpp-device 0003:046D:C262.000F: unknown main item tag 0x7 [ 113.098079][ T1111] logitech-hidpp-device 0003:046D:C262.000F: item fetching failed at offset 6/7 [ 113.109948][ T1111] logitech-hidpp-device 0003:046D:C262.000F: hidpp_probe:parse failed [ 113.118548][ T1111] logitech-hidpp-device: probe of 0003:046D:C262.000F failed with error -22 [ 113.239464][ T21] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 113.252471][ T21] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.282360][ T13] usb 2-1: USB disconnect, device number 8 [ 113.339719][ T4295] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 113.352026][ T4295] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.432624][ T4932] fido_id[4932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.469434][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.739244][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 113.846506][ T4944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.201'. [ 113.859443][ T1108] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.877064][ T1108] usb 1-1: config 0 has no interface number 0 [ 113.900614][ T1108] usb 1-1: config 0 interface 41 has no altsetting 0 [ 114.070347][ T1108] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 114.096293][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.107958][ T1108] usb 1-1: Product: syz [ 114.117132][ T1108] usb 1-1: Manufacturer: syz [ 114.124222][ T1108] usb 1-1: SerialNumber: syz [ 114.133750][ T1108] usb 1-1: config 0 descriptor?? [ 114.180793][ T1108] CoreChips: probe of 1-1:0.41 failed with error -22 [ 114.199177][ T4295] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.385686][ T1108] usb 1-1: USB disconnect, device number 7 [ 114.559454][ T4295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.570074][ T4295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.659392][ T4295] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.673981][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.688764][ T4295] usb 2-1: SerialNumber: syz [ 114.809411][ T21] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 114.831369][ T21] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 114.852833][ T21] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 114.866390][ T21] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 114.904108][ T21] usb 3-1: USB disconnect, device number 7 [ 114.983051][ T4295] usb 2-1: 0:2 : does not exist [ 115.000965][ T4956] overlayfs: upper fs does not support tmpfile. [ 115.019244][ T4295] usb 2-1: USB disconnect, device number 9 [ 115.270929][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.619219][ T4295] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.869284][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 115.989497][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.012121][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.024877][ T4295] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 116.035157][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.054532][ T4295] usb 1-1: config 0 descriptor?? [ 116.429675][ T4982] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.438648][ T4982] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.500436][ T21] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 116.516936][ T21] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.563697][ T4295] apple 0003:05AC:024B.0012: fixing up MacBook JIS keyboard report descriptor [ 116.595851][ T4295] apple 0003:05AC:024B.0012: unknown main item tag 0x6 [ 116.646316][ T4295] apple 0003:05AC:024B.0012: ignoring exceeding usage max [ 116.678079][ T4295] apple 0003:05AC:024B.0012: invalid report_size 16640 [ 116.709205][ T4295] apple 0003:05AC:024B.0012: item 0 2 1 7 parsing failed [ 116.726037][ T4991] fido_id[4991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.743190][ T4295] apple 0003:05AC:024B.0012: parse failed [ 116.751221][ T4295] apple: probe of 0003:05AC:024B.0012 failed with error -22 [ 116.821358][ T4295] usb 1-1: USB disconnect, device number 8 [ 117.004782][ T1111] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.279903][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 117.429395][ T1111] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.441619][ T1111] usb 2-1: config 0 has no interface number 0 [ 117.471674][ T1111] usb 2-1: config 0 interface 184 has no altsetting 0 [ 117.639316][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.669463][ T1111] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.681115][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.690447][ T1111] usb 2-1: Product: syz [ 117.694929][ T1111] usb 2-1: Manufacturer: syz [ 117.700110][ T1111] usb 2-1: SerialNumber: syz [ 117.707560][ T1111] usb 2-1: config 0 descriptor?? [ 117.750558][ T1111] smsc75xx v1.0.0 [ 117.869500][ T4232] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 118.039422][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 118.049376][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 118.062030][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 118.229469][ T4232] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 118.238608][ T21] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 118.249534][ T4232] usb 4-1: config 0 has no interface number 0 [ 118.256331][ T21] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 118.267666][ T21] usb 1-1: Product: syz [ 118.272270][ T21] usb 1-1: Manufacturer: syz [ 118.277427][ T21] usb 1-1: SerialNumber: syz [ 118.291988][ T21] usb 1-1: config 0 descriptor?? [ 118.389325][ T1111] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 118.402008][ T1111] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.412402][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 118.422804][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.431215][ T4232] usb 4-1: Product: syz [ 118.435688][ T4232] usb 4-1: Manufacturer: syz [ 118.440746][ T4232] usb 4-1: SerialNumber: syz [ 118.447780][ T4232] usb 4-1: config 0 descriptor?? [ 118.615614][ T21] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 118.626873][ T21] usb 1-1: USB disconnect, device number 9 [ 118.810121][ T4232] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 118.817944][ T4232] usb 4-1: No valid video chain found. [ 118.828582][ T4232] usb 4-1: USB disconnect, device number 16 [ 118.840385][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.899442][ T5033] device syzkaller0 entered promiscuous mode [ 119.944290][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 119.952271][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 119.989544][ T1111] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.017430][ T1111] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 120.079373][ T1111] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 120.115771][ T1111] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 120.136076][ T1111] usb 2-1: USB disconnect, device number 10 [ 120.141407][ T5035] tipc: Enabled bearer , priority 0 [ 120.174476][ T5035] device syzkaller0 entered promiscuous mode [ 120.196146][ T5035] tipc: Resetting bearer [ 120.208722][ T5034] tipc: Resetting bearer [ 120.231183][ T5034] tipc: Disabling bearer [ 120.459234][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.620959][ T5050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.244'. [ 120.719598][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 120.879535][ T1108] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 120.896361][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.917384][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.080355][ T4203] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.099362][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.115251][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.156777][ T1108] usb 1-1: Product: syz [ 121.162843][ T1108] usb 1-1: Manufacturer: syz [ 121.172559][ T1108] usb 1-1: SerialNumber: syz [ 121.509296][ T4203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.528395][ T4203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.649724][ T1108] usb 1-1: 0:2 : does not exist [ 121.655444][ T4203] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.689946][ T4203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.718240][ T4203] usb 2-1: SerialNumber: syz [ 122.009758][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 122.017731][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 122.109499][ T21] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 122.369229][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 122.490213][ T21] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.499009][ T21] usb 4-1: config 0 has no interface number 0 [ 122.506626][ T21] usb 4-1: config 0 interface 184 has no altsetting 0 [ 122.669304][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.682757][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.694762][ T21] usb 4-1: Product: syz [ 122.707797][ T21] usb 4-1: Manufacturer: syz [ 122.716237][ T21] usb 4-1: SerialNumber: syz [ 122.739903][ T21] usb 4-1: config 0 descriptor?? [ 122.785936][ T21] smsc75xx v1.0.0 [ 123.346482][ T4203] usb 2-1: 0:2 : does not exist [ 123.367039][ T1108] usb 1-1: USB disconnect, device number 10 [ 123.398785][ T4203] usb 2-1: USB disconnect, device number 11 [ 123.429525][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 123.446997][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.456347][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.669827][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 124.089310][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 124.769530][ T4232] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.809362][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.829699][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 124.845799][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 124.858741][ T21] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 124.909552][ T21] usb 4-1: USB disconnect, device number 17 [ 125.189549][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.213030][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.339361][ T4232] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.358938][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.379452][ T4232] usb 1-1: SerialNumber: syz [ 125.692202][ T4232] usb 1-1: 0:2 : does not exist [ 125.720671][ T4232] usb 1-1: USB disconnect, device number 11 [ 125.810504][ T5133] 9pnet: p9_client_clunk (5133): Trying to clunk with invalid fid [ 125.831560][ T5133] CPU: 0 PID: 5133 Comm: syz.3.276 Not tainted 5.15.189-syzkaller #0 [ 125.840049][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.851584][ T5133] Call Trace: [ 125.855491][ T5133] [ 125.858737][ T5133] dump_stack_lvl+0x168/0x230 [ 125.863675][ T5133] ? show_regs_print_info+0x20/0x20 [ 125.869728][ T5133] ? load_image+0x3b0/0x3b0 [ 125.874341][ T5133] ? v9fs_fid_find+0x2d1/0x320 [ 125.879351][ T5133] p9_client_clunk+0x2b3/0x380 [ 125.884140][ T5133] v9fs_statfs+0x192/0x350 [ 125.889429][ T5133] ? v9fs_drop_inode+0x130/0x130 [ 125.894829][ T5133] ? ovl_mount_dir+0x1f6/0x2b0 [ 125.900085][ T5133] ? kfree+0xef/0x2a0 [ 125.904635][ T5133] vfs_statfs+0x13d/0x2c0 [ 125.909303][ T5133] ovl_get_upper+0x181/0x580 [ 125.914414][ T5133] ? ovl_fill_super+0x2ae0/0x2ae0 [ 125.919704][ T5133] ovl_fill_super+0x170b/0x2ae0 [ 125.924683][ T5133] ? ovl_mount+0x30/0x30 [ 125.929034][ T5133] ? preempt_count_add+0x8d/0x190 [ 125.934426][ T5133] ? sget+0x427/0x440 [ 125.938428][ T5133] ? free_anon_bdev+0x20/0x20 [ 125.943468][ T5133] ? ovl_mount+0x30/0x30 [ 125.948662][ T5133] mount_nodev+0x52/0xe0 [ 125.952944][ T5133] legacy_get_tree+0xe6/0x180 [ 125.957872][ T5133] ? virtio_fs_zero_page_range+0x120/0x120 [ 125.964145][ T5133] vfs_get_tree+0x88/0x270 [ 125.969036][ T5133] do_new_mount+0x24a/0xa40 [ 125.973689][ T5133] __se_sys_mount+0x2d6/0x3c0 [ 125.978398][ T5133] ? __x64_sys_mount+0xc0/0xc0 [ 125.983491][ T5133] ? lockdep_hardirqs_on+0x94/0x140 [ 125.989437][ T5133] ? __x64_sys_mount+0x1c/0xc0 [ 125.990588][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.994445][ T5133] do_syscall_64+0x4c/0xa0 [ 125.994511][ T5133] ? clear_bhb_loop+0x30/0x80 [ 125.994532][ T5133] ? clear_bhb_loop+0x30/0x80 [ 126.026045][ T5133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.032584][ T5133] RIP: 0033:0x7f3c8f00bb69 [ 126.037473][ T5133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.067002][ T5133] RSP: 002b:00007f3c8ce73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.080376][ T5133] RAX: ffffffffffffffda RBX: 00007f3c8f232fa0 RCX: 00007f3c8f00bb69 [ 126.090439][ T5133] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 126.101427][ T5133] RBP: 00007f3c8f08edf1 R08: 00002000000001c0 R09: 0000000000000000 [ 126.115385][ T5133] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.123982][ T5133] R13: 0000000000000000 R14: 00007f3c8f232fa0 R15: 00007fffe1565768 [ 126.132569][ T5133] [ 126.145873][ T5133] overlayfs: statfs failed on './file0' [ 126.581268][ T5155] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 126.679349][ T4295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.773074][ T5158] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 126.781811][ T5158] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.939179][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 127.079388][ T4295] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.087637][ T4295] usb 1-1: config 0 has no interface number 0 [ 127.124040][ T4295] usb 1-1: config 0 interface 184 has no altsetting 0 [ 127.299311][ T4295] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 127.319189][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.339202][ T4295] usb 1-1: Product: syz [ 127.343797][ T4295] usb 1-1: Manufacturer: syz [ 127.348821][ T4295] usb 1-1: SerialNumber: syz [ 127.371929][ T4295] usb 1-1: config 0 descriptor?? [ 127.420253][ T4295] smsc75xx v1.0.0 [ 127.439232][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.829261][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.842515][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.959634][ T4232] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.976525][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.986044][ T4232] usb 2-1: SerialNumber: syz [ 128.079437][ T4295] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 128.102547][ T4295] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 128.322108][ T4232] usb 2-1: 0:2 : does not exist [ 128.343017][ T4232] usb 2-1: USB disconnect, device number 12 [ 128.581192][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.239206][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.449390][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.469592][ T4295] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 129.491561][ T4295] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 129.499312][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 129.504629][ T4295] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 129.529556][ T4295] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 129.542784][ T4295] usb 1-1: USB disconnect, device number 12 [ 129.659566][ T4232] usb 3-1: config 16 has an invalid interface number: 213 but max is 0 [ 129.671261][ T4232] usb 3-1: config 16 has no interface number 0 [ 129.678587][ T4232] usb 3-1: config 16 interface 213 has no altsetting 0 [ 129.689496][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 129.849554][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.859651][ T4232] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=28.a8 [ 129.874632][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.883445][ T4232] usb 3-1: Product: syz [ 129.888372][ T4232] usb 3-1: Manufacturer: syz [ 129.897014][ T4232] usb 3-1: SerialNumber: syz [ 129.930401][ T13] usb 2-1: config 8 has an invalid interface number: 120 but max is 0 [ 129.941613][ T13] usb 2-1: config 8 has no interface number 0 [ 129.948265][ T13] usb 2-1: config 8 interface 120 has no altsetting 0 [ 130.109434][ T13] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=11.ea [ 130.121051][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.129855][ T13] usb 2-1: Product: syz [ 130.134582][ T13] usb 2-1: Manufacturer: syz [ 130.139317][ T13] usb 2-1: SerialNumber: syz [ 130.266783][ T4232] usb 3-1: USB disconnect, device number 8 [ 130.319289][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 130.521698][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.695784][ T13] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 130.709226][ T13] usb 2-1: Forcing UVC version to 1.0a [ 130.726678][ T13] usb 2-1: No valid video chain found. [ 130.754590][ T13] usb 2-1: USB disconnect, device number 13 [ 130.769935][ T21] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 130.814808][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.837629][ T21] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 130.847456][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.867858][ T21] usb 1-1: config 0 descriptor?? [ 131.219601][ T21] usb 1-1: string descriptor 0 read error: -71 [ 131.260885][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 131.265753][ T4203] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 131.292043][ T21] usb 1-1: USB disconnect, device number 13 [ 131.303103][ T4203] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.919208][ T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 131.993740][ T5245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2340085918 (2340085918 ns) > initial count (281086070 ns). Using initial count to start timer. [ 132.169397][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 132.319409][ T21] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 132.329423][ T21] usb 4-1: config 0 has no interface number 0 [ 132.336109][ T21] usb 4-1: config 0 interface 184 has no altsetting 0 [ 132.359540][ T4232] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 132.509748][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 132.517832][ T4191] ODEBUG: Out of memory. ODEBUG disabled [ 132.524262][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.535851][ T21] usb 4-1: Product: syz [ 132.544918][ T21] usb 4-1: Manufacturer: syz [ 132.552675][ T21] usb 4-1: SerialNumber: syz [ 132.562972][ T21] usb 4-1: config 0 descriptor?? [ 132.611150][ T21] smsc75xx v1.0.0 [ 132.629196][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 132.749468][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.823303][ T4232] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 132.833959][ T4232] usb 1-1: can't read configurations, error -71 [ 133.132552][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141175][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.259455][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 133.288160][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 133.475973][ T1111] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.495674][ T1108] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 133.528722][ T1108] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.824108][ T5266] chnl_net:caif_netlink_parms(): no params data found [ 133.909685][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.918853][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.928529][ T1111] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 133.941773][ T5266] device bridge_slave_0 entered promiscuous mode [ 133.952871][ T1111] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 133.968871][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.980782][ T1111] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 133.992413][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.002152][ T1111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 134.018036][ T5266] device bridge_slave_1 entered promiscuous mode [ 134.025625][ T1111] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.045763][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.131058][ T5266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.152391][ T5266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.244661][ T5266] team0: Port device team_slave_0 added [ 134.249576][ T1111] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.271823][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.293371][ T5266] team0: Port device team_slave_1 added [ 134.294909][ T1111] usb 3-1: Product: syz [ 134.307477][ T1111] usb 3-1: Manufacturer: syz [ 134.318797][ T1111] usb 3-1: SerialNumber: syz [ 134.360022][ T1111] usb 3-1: config 0 descriptor?? [ 134.403963][ T5280] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 134.416027][ T5280] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 134.429816][ T5266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.438183][ T5266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.470085][ T5266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.497109][ T5266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.513637][ T5266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.572419][ T5266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.653276][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 134.670691][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 134.686165][ T1111] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 134.696226][ T1111] usb 3-1: USB disconnect, device number 9 [ 134.702850][ T21] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 134.716240][ T21] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 134.748173][ T21] usb 4-1: USB disconnect, device number 18 [ 134.779581][ T5266] device hsr_slave_0 entered promiscuous mode [ 134.793906][ T5266] device hsr_slave_1 entered promiscuous mode [ 134.801748][ T5266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.813710][ T5266] Cannot create hsr debugfs directory [ 134.930237][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.021099][ T5266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.034614][ T5266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.053309][ T5266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.065277][ T5266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.279491][ T5266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.301188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.316721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.344730][ T5266] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.386595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.419256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.433739][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.441242][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.461218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.501575][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.518828][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.542877][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.551174][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.561324][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.580119][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.590128][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.602920][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.613811][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 135.642550][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.664711][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.678504][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.691470][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.703016][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.724978][ T5266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.743659][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.756684][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.767037][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.985055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.994929][ T1111] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 136.010755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.018725][ T1111] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.052952][ T5266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.167167][ T5319] tmpfs: Unknown parameter 'noswap' [ 136.473356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.483624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.512945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.528588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.551759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.570624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.599436][ T5266] device veth0_vlan entered promiscuous mode [ 136.628017][ T5266] device veth1_vlan entered promiscuous mode [ 136.662073][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 136.693483][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 136.727052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.746984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.758274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.775576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.789208][ T5266] device veth0_macvtap entered promiscuous mode [ 136.801944][ T5266] device veth1_macvtap entered promiscuous mode [ 136.841677][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.860018][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.880804][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.892595][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.905354][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.918023][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.932615][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.945278][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.956505][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.968222][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.987064][ T5266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.014358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.031614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.049405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.050454][ T4295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.068777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.082034][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.094829][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.108474][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.121276][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.133077][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.144798][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.165611][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.179180][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.190482][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.205583][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.222382][ T5266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.239600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.251584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.290520][ T5266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.302127][ T5266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.313417][ T5266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.323067][ T5266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.349165][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 137.436452][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.460916][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.471731][ T4295] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.488199][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.491917][ T4295] usb 3-1: config 0 has no interface number 0 [ 137.504543][ T4295] usb 3-1: config 0 interface 184 has no altsetting 0 [ 137.516742][ T4682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.527390][ T4682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.539037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.669309][ T4295] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.683849][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.695343][ T4295] usb 3-1: Product: syz [ 137.699709][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 137.713803][ T4295] usb 3-1: Manufacturer: syz [ 137.718577][ T4295] usb 3-1: SerialNumber: syz [ 137.732033][ T4295] usb 3-1: config 0 descriptor?? [ 137.770945][ T4295] smsc75xx v1.0.0 [ 137.832327][ T5354] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 137.840962][ T5354] overlayfs: failed to set xattr on upper [ 137.847607][ T5354] overlayfs: ...falling back to index=off,metacopy=off. [ 137.889284][ T1348] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.269464][ T1348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.283942][ T1348] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 138.293995][ T1348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.308979][ T1348] usb 6-1: config 0 descriptor?? [ 138.429442][ T4295] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 138.442121][ T4295] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.731260][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 138.738061][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 138.791525][ T1348] elecom 0003:056E:00FE.0016: item fetching failed at offset 6/7 [ 138.800315][ T1348] elecom: probe of 0003:056E:00FE.0016 failed with error -22 [ 139.017044][ T1348] usb 6-1: USB disconnect, device number 2 [ 139.186133][ T13] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 139.214003][ T13] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.737524][ T5377] overlayfs: statfs failed on './file0' [ 139.772427][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 139.799342][ T4295] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 139.818768][ T4295] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 139.831271][ T4295] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 139.841711][ T4295] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 139.852806][ T4295] usb 3-1: USB disconnect, device number 10 [ 140.219273][ T1348] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.589459][ T1348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.607807][ T1348] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.699530][ T1348] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.716921][ T1348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.727431][ T1348] usb 6-1: SerialNumber: syz [ 140.808619][ T1111] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 140.827693][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 140.835371][ T1111] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.012304][ T1348] usb 6-1: 0:2 : does not exist [ 141.043119][ T1348] usb 6-1: USB disconnect, device number 3 [ 141.268561][ T5399] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 141.287047][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.693151][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.787779][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.829212][ T1111] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 141.849424][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 141.849468][ T4203] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.870466][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.948785][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.109266][ T4203] usb 4-1: Using ep0 maxpacket: 32 [ 142.145427][ T154] tipc: Left network mode [ 142.172981][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 142.209368][ T1111] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.221644][ T1111] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 142.232997][ T4203] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.239592][ T1111] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 142.260397][ T1111] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 142.262130][ T4203] usb 4-1: config 0 has no interface number 0 [ 142.298162][ T4203] usb 4-1: config 0 interface 184 has no altsetting 0 [ 142.326236][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.343357][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.353094][ T5413] device bridge_slave_0 entered promiscuous mode [ 142.362549][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.370873][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.380078][ T5413] device bridge_slave_1 entered promiscuous mode [ 142.432227][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.447281][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.469353][ T1111] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.479683][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.483036][ T4203] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.488499][ T1111] usb 6-1: Product: syz [ 142.488522][ T1111] usb 6-1: Manufacturer: syz [ 142.488538][ T1111] usb 6-1: SerialNumber: syz [ 142.520239][ T5409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.545752][ T4203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.558759][ T4203] usb 4-1: Product: syz [ 142.567889][ T4203] usb 4-1: Manufacturer: syz [ 142.576503][ T5413] team0: Port device team_slave_0 added [ 142.577821][ T4203] usb 4-1: SerialNumber: syz [ 142.600368][ T5413] team0: Port device team_slave_1 added [ 142.627849][ T4203] usb 4-1: config 0 descriptor?? [ 142.679720][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.680707][ T4203] smsc75xx v1.0.0 [ 142.688550][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.723725][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.763853][ T5409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.773409][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.782574][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.820823][ T5409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.842493][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.984226][ T5413] device hsr_slave_0 entered promiscuous mode [ 143.001284][ T5413] device hsr_slave_1 entered promiscuous mode [ 143.008684][ T5413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.026180][ T5413] Cannot create hsr debugfs directory [ 143.344661][ T4203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 143.371941][ T4203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.490115][ T5409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.497678][ T5409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.511765][ T154] device hsr_slave_0 left promiscuous mode [ 143.534264][ T154] device hsr_slave_1 left promiscuous mode [ 143.564006][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.578154][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.591718][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.613580][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.640611][ T154] device bridge_slave_1 left promiscuous mode [ 143.649342][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.691642][ T154] device bridge_slave_0 left promiscuous mode [ 143.703096][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.740623][ T154] device veth1_macvtap left promiscuous mode [ 143.747643][ T154] device veth0_macvtap left promiscuous mode [ 143.754605][ T154] device veth1_vlan left promiscuous mode [ 143.763930][ T154] device veth0_vlan left promiscuous mode [ 143.779434][ T1111] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 143.791613][ T1111] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 143.804298][ T1111] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 143.930543][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 144.010769][ T1111] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 144.023033][ T1111] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 144.075346][ T154] team0 (unregistering): Port device team_slave_1 removed [ 144.088809][ T154] team0 (unregistering): Port device team_slave_0 removed [ 144.112568][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.128942][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.213056][ T154] bond0 (unregistering): Released all slaves [ 144.309179][ T1111] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 144.395841][ T1348] usb 6-1: USB disconnect, device number 4 [ 144.419517][ T1348] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 144.739438][ T4203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.779379][ T4203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 144.798422][ T4336] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 144.822895][ T4203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.832761][ T4336] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.860316][ T5413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.882495][ T4203] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 144.954478][ T4203] usb 4-1: USB disconnect, device number 19 [ 145.016504][ T5413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.061279][ T5413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.081211][ T5413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.413614][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.446522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.463692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.482916][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.517461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.540587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.556835][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.564310][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.598532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.636532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.649379][ T4295] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.668207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.693201][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.703290][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.749982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.816915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.828455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.858650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.883035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.906096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.942987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.999343][ T5413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.019411][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 146.029423][ T4295] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 133, using maximum allowed: 30 [ 146.051576][ T4295] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.073035][ T5413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.094535][ T4295] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 146.109261][ T4260] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.120999][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.137087][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.156231][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.164538][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.179392][ T4295] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 146.192740][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.212072][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.229337][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.270288][ T4295] usb 4-1: config 0 descriptor?? [ 146.494965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.528976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.538821][ T4260] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.559202][ T4260] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.599842][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.674829][ T4260] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.688637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.710793][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.722473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.729438][ T4260] usb 6-1: SerialNumber: syz [ 146.779938][ T4295] wacom 0003:056A:0084.001A: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 146.785362][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.810059][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.821019][ T5413] device veth0_vlan entered promiscuous mode [ 146.830923][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.841433][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.860773][ T5413] device veth1_vlan entered promiscuous mode [ 146.906914][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.920033][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.933282][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.946520][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.963293][ T1111] usb 4-1: USB disconnect, device number 20 [ 146.976724][ T5413] device veth0_macvtap entered promiscuous mode [ 147.018844][ T4260] usb 6-1: 0:2 : does not exist [ 147.032295][ T5413] device veth1_macvtap entered promiscuous mode [ 147.054570][ T4260] usb 6-1: USB disconnect, device number 5 [ 147.091873][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.115386][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.126728][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.138519][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.173314][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.195093][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.207220][ T5534] fido_id[5534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.221511][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.274555][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.327877][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.365743][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.430067][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.497186][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.523564][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.547387][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.591038][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.631239][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.652664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 147.706975][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.736367][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.771760][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.809878][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.850594][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.869222][ T4246] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 147.903443][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.918098][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.939249][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.982575][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.001731][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.016193][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.041841][ T5538] device syzkaller0 entered promiscuous mode [ 148.061096][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.091196][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.100269][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 148.145649][ T5413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.162359][ T5413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.215271][ T5413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.235379][ T5413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.252636][ T4246] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 148.271649][ T4246] usb 4-1: config 0 has no interface number 0 [ 148.279167][ T5545] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 148.289698][ T4246] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 148.306037][ T5545] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 148.316927][ T4246] usb 4-1: config 0 interface 214 has no altsetting 0 [ 148.356863][ T5552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 148.481408][ T4246] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 148.513529][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.556937][ T4246] usb 4-1: Product: syz [ 148.572647][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.589224][ T4246] usb 4-1: Manufacturer: syz [ 148.599183][ T4246] usb 4-1: SerialNumber: syz [ 148.617519][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.627918][ T4246] usb 4-1: config 0 descriptor?? [ 148.647852][ T4260] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 148.679685][ T5541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.692273][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.711199][ T4260] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.751974][ T5559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.829867][ T5559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.899660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.839498][ T4260] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.089370][ T1348] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 150.169588][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 150.209278][ T4260] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.220210][ T4260] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.319482][ T4260] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.329623][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.337852][ T4260] usb 3-1: SerialNumber: syz [ 150.402820][ T5588] binder: BINDER_SET_CONTEXT_MGR already set [ 150.423637][ T5588] binder: 5587:5588 ioctl 4018620d 2000000002c0 returned -16 [ 150.479491][ T1348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.616726][ T4246] usb 4-1: USB disconnect, device number 21 [ 150.629954][ T1348] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.637884][ T1348] usb 1-1: can't read configurations, error -71 [ 150.648440][ T4260] usb 3-1: 0:2 : does not exist [ 150.675648][ T4260] usb 3-1: USB disconnect, device number 11 [ 150.900313][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.069250][ T4246] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.256902][ T4260] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 151.277977][ T4260] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.319225][ T4246] usb 4-1: Using ep0 maxpacket: 16 [ 151.321920][ T5608] 9pnet: p9_client_clunk (5608): Trying to clunk with invalid fid [ 151.345066][ T5608] CPU: 0 PID: 5608 Comm: syz.2.416 Not tainted 5.15.189-syzkaller #0 [ 151.353304][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.363568][ T5608] Call Trace: [ 151.366971][ T5608] [ 151.370021][ T5608] dump_stack_lvl+0x168/0x230 [ 151.374747][ T5608] ? show_regs_print_info+0x20/0x20 [ 151.379989][ T5608] ? load_image+0x3b0/0x3b0 [ 151.385142][ T5608] ? v9fs_fid_find+0x2d1/0x320 [ 151.389959][ T5608] p9_client_clunk+0x2b3/0x380 [ 151.394767][ T5608] v9fs_statfs+0x192/0x350 [ 151.399481][ T5608] ? slab_free_freelist_hook+0xea/0x170 [ 151.405390][ T5608] ? v9fs_drop_inode+0x130/0x130 [ 151.410392][ T5608] vfs_statfs+0x13d/0x2c0 [ 151.414770][ T5608] ovl_get_lowerstack+0x1fd/0x1bf0 [ 151.419956][ T5608] ? ovl_get_upper+0x580/0x580 [ 151.424784][ T5608] ? ovl_get_workdir+0x11a0/0x11a0 [ 151.430213][ T5608] ovl_fill_super+0x174d/0x2ae0 [ 151.435582][ T5608] ? ovl_mount+0x30/0x30 [ 151.439960][ T5608] ? preempt_count_add+0x8d/0x190 [ 151.445162][ T5608] ? sget+0x427/0x440 [ 151.449224][ T5608] ? free_anon_bdev+0x20/0x20 [ 151.456301][ T5608] ? ovl_mount+0x30/0x30 [ 151.461196][ T5608] mount_nodev+0x52/0xe0 [ 151.467993][ T5608] legacy_get_tree+0xe6/0x180 [ 151.474095][ T5608] ? virtio_fs_zero_page_range+0x120/0x120 [ 151.482610][ T5608] vfs_get_tree+0x88/0x270 [ 151.489115][ T5608] do_new_mount+0x24a/0xa40 [ 151.494841][ T5608] __se_sys_mount+0x2d6/0x3c0 [ 151.499767][ T5608] ? __x64_sys_mount+0xc0/0xc0 [ 151.505245][ T5608] ? lockdep_hardirqs_on+0x94/0x140 [ 151.510945][ T5608] ? __x64_sys_mount+0x1c/0xc0 [ 151.515826][ T5608] do_syscall_64+0x4c/0xa0 [ 151.521226][ T5608] ? clear_bhb_loop+0x30/0x80 [ 151.526033][ T5608] ? clear_bhb_loop+0x30/0x80 [ 151.530973][ T5608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.537383][ T5608] RIP: 0033:0x7f0fc11b0b69 [ 151.542963][ T5608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.565018][ T5608] RSP: 002b:00007f0fbf018038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.574727][ T5608] RAX: ffffffffffffffda RBX: 00007f0fc13d7fa0 RCX: 00007f0fc11b0b69 [ 151.584684][ T5608] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 151.594820][ T5608] RBP: 00007f0fc1233df1 R08: 0000200000000400 R09: 0000000000000000 [ 151.604170][ T5608] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.614223][ T5608] R13: 0000000000000000 R14: 00007f0fc13d7fa0 R15: 00007ffd533424a8 [ 151.623617][ T5608] [ 151.637730][ T5608] overlayfs: statfs failed on './file0' [ 151.754635][ T4246] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.857937][ T4246] usb 4-1: config 4 has an invalid interface number: 182 but max is 0 [ 151.876801][ T4246] usb 4-1: config 4 has no interface number 0 [ 151.883641][ T4246] usb 4-1: config 4 interface 182 has no altsetting 0 [ 151.883751][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 152.049278][ T4246] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=f6.38 [ 152.099242][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.107820][ T4246] usb 4-1: Product: syz [ 152.146411][ T4246] usb 4-1: Manufacturer: syz [ 152.151483][ T4246] usb 4-1: SerialNumber: syz [ 152.509312][ T21] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 152.519376][ T4246] snd-usb-audio: probe of 4-1:4.182 failed with error -71 [ 152.544666][ T4246] usb 4-1: USB disconnect, device number 22 [ 152.639141][ T1108] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 152.707302][ T1348] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 152.727479][ T1348] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.929313][ T4260] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.959498][ T21] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 152.986099][ T21] usb 1-1: config 0 has no interface number 0 [ 152.996757][ T21] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 153.009366][ T1108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.020079][ T1108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.022653][ T21] usb 1-1: config 0 interface 214 has no altsetting 0 [ 153.061290][ T5646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 153.119393][ T1108] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.135106][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.152692][ T1108] usb 6-1: SerialNumber: syz [ 153.229556][ T21] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 153.253676][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.270727][ T21] usb 1-1: Product: syz [ 153.275798][ T21] usb 1-1: Manufacturer: syz [ 153.292837][ T21] usb 1-1: SerialNumber: syz [ 153.315619][ T21] usb 1-1: config 0 descriptor?? [ 153.339590][ T5628] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.347065][ T4260] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.377247][ T4260] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.412375][ T4260] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.423066][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.445802][ T1108] usb 6-1: 0:2 : does not exist [ 153.457416][ T4260] usb 3-1: config 0 descriptor?? [ 153.494652][ T1108] usb 6-1: USB disconnect, device number 6 [ 153.511657][ T4260] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 153.771616][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.993608][ T5672] overlayfs: statfs failed on './file0' [ 154.692790][ T1108] usb 1-1: USB disconnect, device number 18 [ 154.782235][ T21] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 154.801638][ T21] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.815356][ T4232] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 154.829265][ T4246] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 155.089290][ T4246] usb 4-1: Using ep0 maxpacket: 16 [ 155.210087][ T4246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.223137][ T4246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.239398][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.251005][ T4232] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.260413][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.271101][ T4232] usb 6-1: config 0 descriptor?? [ 155.389482][ T4246] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 155.399259][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.407627][ T4246] usb 4-1: Product: syz [ 155.412434][ T4246] usb 4-1: Manufacturer: syz [ 155.417087][ T4246] usb 4-1: SerialNumber: syz [ 155.760706][ T5687] udc-core: couldn't find an available UDC or it's busy [ 155.768267][ T5687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.780663][ T4232] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 155.792282][ T4232] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001F/input/input14 [ 155.877713][ T4260] usb 3-1: USB disconnect, device number 12 [ 155.923360][ T4232] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 155.939360][ T4246] usb 4-1: 0:2 : does not exist [ 155.969531][ T4295] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 156.229336][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 156.235391][ T4246] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 156.250466][ T4246] usb 4-1: USB disconnect, device number 23 [ 156.330813][ T4260] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 156.349377][ T4295] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 156.358960][ T4295] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 156.381015][ T4295] usb 1-1: config 0 has no interface number 0 [ 156.404702][ T4295] usb 1-1: config 0 interface 182 has no altsetting 0 [ 156.579337][ T4295] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=86.a0 [ 156.592795][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.601870][ T4295] usb 1-1: Product: syz [ 156.607352][ T4295] usb 1-1: Manufacturer: syz [ 156.614935][ T4295] usb 1-1: SerialNumber: syz [ 156.623234][ T4295] usb 1-1: config 0 descriptor?? [ 156.709620][ T4260] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.721000][ T4260] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.810015][ T4260] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.828260][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.838178][ T4260] usb 3-1: SerialNumber: syz [ 156.849323][ T4246] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 156.965689][ T4295] usb 1-1: USB disconnect, device number 19 [ 157.132017][ T4260] usb 3-1: 0:2 : does not exist [ 157.148290][ T4260] usb 3-1: USB disconnect, device number 13 [ 157.249346][ T4246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.264738][ T4246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.349259][ T4246] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.359629][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.367753][ T4246] usb 4-1: SerialNumber: syz [ 157.496455][ T5712] input: syz1 as /devices/virtual/input/input15 [ 157.540481][ T4295] usb 6-1: USB disconnect, device number 7 [ 157.657809][ T4246] usb 4-1: 0:2 : does not exist [ 157.707386][ T4246] usb 4-1: USB disconnect, device number 24 [ 157.752477][ T5017] udevd[5017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.850435][ T4260] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 157.885614][ T4260] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.950708][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.469279][ T4260] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.569354][ T1111] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 158.709182][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 158.809749][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 158.849642][ T4260] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.880322][ T4260] usb 3-1: config 0 has no interface number 0 [ 158.887100][ T4260] usb 3-1: config 0 interface 184 has no altsetting 0 [ 158.940082][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.963062][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.984467][ T1111] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 158.997640][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.038168][ T1111] usb 4-1: config 0 descriptor?? [ 159.076021][ T4260] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.099450][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.108995][ T4260] usb 3-1: Product: syz [ 159.120845][ T4260] usb 3-1: Manufacturer: syz [ 159.127543][ T4260] usb 3-1: SerialNumber: syz [ 159.146332][ T4260] usb 3-1: config 0 descriptor?? [ 159.190469][ T4260] smsc75xx v1.0.0 [ 159.299213][ T4295] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 159.380063][ T1108] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 159.532151][ T1111] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 159.540177][ T1111] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 159.549614][ T1111] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 159.557377][ T1111] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 159.565779][ T1111] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 159.639243][ T1111] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf3 found [ 159.647093][ T1111] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf4 found [ 159.705251][ T4295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.718042][ T4295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.743400][ T4246] usb 4-1: USB disconnect, device number 25 [ 159.809519][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.824337][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.837520][ T4295] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.849529][ T1108] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 159.850017][ T4260] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 159.861181][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.882170][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.893081][ T4295] usb 1-1: SerialNumber: syz [ 159.893125][ T1108] usb 6-1: config 0 descriptor?? [ 159.911452][ T4260] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.188870][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 160.205399][ T4295] usb 1-1: 0:2 : does not exist [ 160.227409][ T4295] usb 1-1: USB disconnect, device number 20 [ 160.391507][ T1108] greenasia 0003:0E8F:0012.0022: ignoring exceeding usage max [ 160.401621][ T1108] greenasia 0003:0E8F:0012.0022: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 160.415207][ T1108] greenasia 0003:0E8F:0012.0022: no inputs found [ 160.569334][ T4336] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 160.593178][ T4295] usb 6-1: USB disconnect, device number 8 [ 160.805478][ T1111] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 160.813597][ T4336] usb 4-1: Using ep0 maxpacket: 16 [ 160.828564][ T1111] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.838910][ T4260] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 160.850926][ T4260] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 160.860678][ T4260] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 160.879220][ T4260] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 160.949374][ T4336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.969280][ T4336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.049264][ T4260] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 161.139296][ T4336] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.151962][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.162294][ T4336] usb 4-1: Product: syz [ 161.167014][ T4336] usb 4-1: Manufacturer: syz [ 161.174086][ T4336] usb 4-1: SerialNumber: syz [ 161.419410][ T4260] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.433605][ T4260] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 161.443583][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.470611][ T5778] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 161.491528][ T4260] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 161.509501][ T4336] usb 4-1: 0:2 : does not exist [ 161.546569][ T4336] usb 4-1: USB disconnect, device number 26 [ 161.599247][ T1111] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 161.774587][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.849391][ T1111] usb 6-1: Using ep0 maxpacket: 16 [ 161.875876][ T4336] usb 3-1: USB disconnect, device number 14 [ 162.071268][ T1111] usb 6-1: config 7 has an invalid interface number: 165 but max is 0 [ 162.099388][ T1111] usb 6-1: config 7 has no interface number 0 [ 162.119657][ T1111] usb 6-1: config 7 interface 165 has no altsetting 0 [ 162.243252][ T5811] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.259577][ T5811] overlayfs: failed to set xattr on upper [ 162.266275][ T5811] overlayfs: ...falling back to index=off,metacopy=off. [ 162.310007][ T1111] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=1f.39 [ 162.344417][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.361605][ T4295] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 162.364753][ T1111] usb 6-1: Product: syz [ 162.376256][ T1111] usb 6-1: Manufacturer: syz [ 162.381600][ T1111] usb 6-1: SerialNumber: syz [ 162.389628][ T4295] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.430136][ T4336] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.709896][ T1111] rtl8150 6-1:7.165: couldn't find required endpoints [ 162.737574][ T5823] binder: 5822:5823 ioctl 4018620d 0 returned -22 [ 162.745240][ T1111] rtl8150: probe of 6-1:7.165 failed with error -5 [ 162.773754][ T1111] usb 6-1: USB disconnect, device number 9 [ 162.799397][ T4336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.822131][ T4336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.871173][ T21] usb 1-1: USB disconnect, device number 21 [ 162.912497][ T4336] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.947085][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.967546][ T4336] usb 3-1: SerialNumber: syz [ 163.278583][ T4336] usb 3-1: 0:2 : does not exist [ 163.341345][ T4336] usb 3-1: USB disconnect, device number 15 [ 163.395671][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.416735][ T21] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 163.679157][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 163.769344][ T26] audit: type=1800 audit(1754210164.142:16): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.498" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 163.819463][ T21] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 163.848606][ T21] usb 1-1: config 0 has no interface number 0 [ 163.877218][ T21] usb 1-1: config 0 interface 184 has no altsetting 0 [ 163.906438][ T5018] udevd[5018]: symlink '../../loop9' '/dev/disk/by-diskseq/90.tmp-b7:9' failed: Read-only file system [ 164.021650][ T5018] udevd[5018]: symlink '../../loop9' '/dev/disk/by-diskseq/90.tmp-b7:9' failed: Read-only file system [ 164.048124][ T4246] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 164.068463][ T4246] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.084870][ T5018] udevd[5018]: symlink '../../loop9' '/dev/disk/by-diskseq/90.tmp-b7:9' failed: Read-only file system [ 164.094035][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.129662][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.145163][ T5018] udevd[5018]: symlink '../../loop9' '/dev/disk/by-diskseq/90.tmp-b7:9' failed: Read-only file system [ 164.158107][ T21] usb 1-1: Product: syz [ 164.177779][ T21] usb 1-1: Manufacturer: syz [ 164.196979][ T21] usb 1-1: SerialNumber: syz [ 164.222402][ T21] usb 1-1: config 0 descriptor?? [ 164.288275][ T21] smsc75xx v1.0.0 [ 164.659266][ T1111] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 164.700902][ T5856] input: syz1 as /devices/virtual/input/input19 [ 164.948455][ T21] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 164.989425][ T21] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.119844][ T1111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.149265][ T1111] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.189158][ T1111] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.219298][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.231936][ T1111] usb 6-1: config 0 descriptor?? [ 165.292220][ T1111] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 165.969325][ T21] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 165.986329][ T21] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 165.998254][ T21] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 166.020255][ T4246] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 166.030714][ T21] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 166.389364][ T4246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.407736][ T4246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.499361][ T4246] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.510174][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.518470][ T4246] usb 4-1: SerialNumber: syz [ 166.739298][ T1111] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 166.803487][ T4246] usb 4-1: 0:2 : does not exist [ 166.827684][ T4246] usb 4-1: USB disconnect, device number 27 [ 166.972387][ T1108] usb 1-1: USB disconnect, device number 22 [ 166.989962][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 167.057696][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.159357][ T1111] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.170592][ T1111] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.182044][ T1111] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.197254][ T1111] usb 3-1: config 1 interface 0 has no altsetting 0 [ 167.376262][ T4295] usb 6-1: USB disconnect, device number 10 [ 167.389363][ T1111] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 167.409183][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.409354][ T1108] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 167.427562][ T1111] usb 3-1: Product: syz [ 167.439552][ T1111] usb 3-1: Manufacturer: syz [ 167.444465][ T1111] usb 3-1: SerialNumber: syz [ 167.727402][ T1111] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 167.799451][ T1108] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.818088][ T1108] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.837219][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.859179][ T1108] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 167.886034][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.907620][ T1108] usb 1-1: config 0 descriptor?? [ 167.931349][ T1111] usb 3-1: USB disconnect, device number 16 [ 167.946611][ T1111] usblp0: removed [ 168.229170][ T4336] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 168.339216][ T4295] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 168.499456][ T4336] usb 4-1: Using ep0 maxpacket: 32 [ 168.579280][ T4295] usb 6-1: Using ep0 maxpacket: 32 [ 168.619508][ T1108] usb 1-1: string descriptor 0 read error: -22 [ 168.639294][ T4336] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 168.649694][ T4336] usb 4-1: config 0 has no interface number 0 [ 168.656063][ T4336] usb 4-1: config 0 interface 184 has no altsetting 0 [ 168.699276][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.710553][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.722894][ T4295] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 168.732308][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.742987][ T4295] usb 6-1: config 0 descriptor?? [ 168.841834][ T1108] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0026/input/input21 [ 168.849372][ T4336] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.865921][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.873492][ T1108] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0026/input/input22 [ 168.875715][ T4336] usb 4-1: Product: syz [ 168.892727][ T4336] usb 4-1: Manufacturer: syz [ 168.897643][ T4336] usb 4-1: SerialNumber: syz [ 168.903155][ T1108] uclogic 0003:256C:006D.0026: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 168.928018][ T4336] usb 4-1: config 0 descriptor?? [ 169.020671][ T4336] smsc75xx v1.0.0 [ 169.047711][ T21] usb 1-1: USB disconnect, device number 23 [ 169.230964][ T4295] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 169.238264][ T4295] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 169.250397][ T4295] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 169.260077][ T4295] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 169.267782][ T4295] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 169.281863][ T4295] koneplus 0003:1E7D:2D51.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 169.449598][ T4295] koneplus 0003:1E7D:2D51.0027: couldn't init struct koneplus_device [ 169.458498][ T4295] koneplus 0003:1E7D:2D51.0027: couldn't install mouse [ 169.470262][ T4295] koneplus: probe of 0003:1E7D:2D51.0027 failed with error -71 [ 169.482151][ T4295] usb 6-1: USB disconnect, device number 11 [ 169.533264][ T5921] fido_id[5921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 169.629639][ T21] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 169.639416][ T1108] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.647662][ T4336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 169.667854][ T21] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.679636][ T4336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.999777][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.014061][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.099402][ T1108] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.109097][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.120342][ T1108] usb 3-1: SerialNumber: syz [ 170.239154][ T4295] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 170.239270][ T1111] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 170.412760][ T1108] usb 3-1: 0:2 : does not exist [ 170.428735][ T1108] usb 3-1: USB disconnect, device number 17 [ 170.539282][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 170.609473][ T4295] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.629423][ T4336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 170.646165][ T4336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 170.657163][ T4336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 170.667307][ T4336] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 170.685979][ T5018] udevd[5018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.703671][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.715749][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.726987][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.741712][ T1111] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 170.754687][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.767407][ T1111] usb 1-1: config 0 descriptor?? [ 170.789540][ T4295] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.800783][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.810001][ T4295] usb 6-1: Product: syz [ 170.814614][ T4295] usb 6-1: Manufacturer: syz [ 170.820169][ T4295] usb 6-1: SerialNumber: syz [ 171.090677][ T4295] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.357574][ T21] usb 6-1: USB disconnect, device number 12 [ 171.383104][ T21] usblp0: removed [ 171.529671][ T1111] usbhid 1-1:0.0: can't add hid device: -71 [ 171.539541][ T1111] usbhid: probe of 1-1:0.0 failed with error -71 [ 171.557911][ T1111] usb 1-1: USB disconnect, device number 24 [ 171.650464][ T4260] usb 4-1: USB disconnect, device number 28 [ 171.695871][ T5965] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.720751][ T5965] overlayfs: failed to set xattr on upper [ 171.727084][ T5965] overlayfs: ...falling back to index=off,metacopy=off. [ 172.039265][ T4295] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.230332][ T5984] ================================================================== [ 172.239329][ T5984] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 172.250036][ T5984] Read of size 1 at addr ffff888074543600 by task syz.5.565/5984 [ 172.258391][ T5984] [ 172.260839][ T5984] CPU: 0 PID: 5984 Comm: syz.5.565 Not tainted 5.15.189-syzkaller #0 [ 172.269292][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.280763][ T5984] Call Trace: [ 172.284440][ T5984] [ 172.287608][ T5984] dump_stack_lvl+0x168/0x230 [ 172.292881][ T5984] ? show_regs_print_info+0x20/0x20 [ 172.298601][ T5984] ? load_image+0x3b0/0x3b0 [ 172.303415][ T5984] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 172.308940][ T5984] ? xfrm_pol_bin_obj+0x140/0x140 [ 172.314115][ T5984] print_address_description+0x60/0x2d0 [ 172.320028][ T5984] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 172.329241][ T5984] kasan_report+0xdf/0x130 [ 172.333711][ T5984] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 172.342500][ T5984] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 172.349450][ T5984] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 172.356332][ T5984] ? __kasan_kmalloc+0xb5/0xf0 [ 172.361560][ T5984] ? xfrm_policy_alloc+0x75/0x2b0 [ 172.366885][ T5984] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 172.373350][ T5984] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 172.379688][ T5984] xfrm_policy_inexact_insert+0xe0/0x1460 [ 172.385787][ T5984] ? __get_hash_thresh+0x105/0x410 [ 172.392693][ T5984] ? policy_hash_bysel+0x10a/0x570 [ 172.397964][ T5984] xfrm_policy_insert+0x112/0x930 [ 172.403374][ T5984] xfrm_add_policy+0x4d6/0x860 [ 172.408201][ T5984] ? xfrm_dump_sa_done+0xc0/0xc0 [ 172.413303][ T5984] ? apparmor_capable+0x12c/0x190 [ 172.418542][ T5984] ? __nla_parse+0x3c/0x50 [ 172.423468][ T5984] xfrm_user_rcv_msg+0x58d/0x860 [ 172.428475][ T5984] ? xfrm_netlink_rcv+0x90/0x90 [ 172.433491][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 172.438574][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 172.443565][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 172.448559][ T5984] ? __mutex_lock_common+0x431/0x2390 [ 172.454230][ T5984] ? __copy_skb_header+0x417/0x5a0 [ 172.459688][ T5984] ? __skb_clone+0x480/0x790 [ 172.464445][ T5984] netlink_rcv_skb+0x1e0/0x430 [ 172.469819][ T5984] ? xfrm_netlink_rcv+0x90/0x90 [ 172.474850][ T5984] ? netlink_ack+0xb60/0xb60 [ 172.479593][ T5984] ? __lock_acquire+0x7c60/0x7c60 [ 172.485055][ T5984] xfrm_netlink_rcv+0x75/0x90 [ 172.489790][ T5984] netlink_unicast+0x774/0x920 [ 172.494765][ T5984] netlink_sendmsg+0x8ab/0xbc0 [ 172.499603][ T5984] ? netlink_getsockopt+0x560/0x560 [ 172.505070][ T5984] ? aa_sock_msg_perm+0x94/0x150 [ 172.510316][ T5984] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 172.516335][ T5984] ? security_socket_sendmsg+0x7c/0xa0 [ 172.521942][ T5984] ? netlink_getsockopt+0x560/0x560 [ 172.527202][ T5984] ____sys_sendmsg+0x5a2/0x8c0 [ 172.532054][ T5984] ? memset+0x1e/0x40 [ 172.536799][ T5984] ? __sys_sendmsg_sock+0x30/0x30 [ 172.541895][ T5984] ? import_iovec+0x6f/0xa0 [ 172.546550][ T5984] ___sys_sendmsg+0x1f0/0x260 [ 172.551285][ T5984] ? __sys_sendmsg+0x250/0x250 [ 172.556305][ T5984] ? sock_setsockopt+0x1502/0x2270 [ 172.561724][ T5984] ? __fdget+0x18b/0x210 [ 172.565991][ T5984] __se_sys_sendmsg+0x190/0x250 [ 172.570892][ T5984] ? __x64_sys_sendmsg+0x80/0x80 [ 172.575962][ T5984] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 172.582710][ T5984] ? lockdep_hardirqs_on+0x94/0x140 [ 172.589650][ T1111] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 172.590062][ T5984] do_syscall_64+0x4c/0xa0 [ 172.607043][ T5984] ? clear_bhb_loop+0x30/0x80 [ 172.612454][ T5984] ? clear_bhb_loop+0x30/0x80 [ 172.618265][ T5984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.624678][ T5984] RIP: 0033:0x7fa2a5115b69 [ 172.629613][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.652645][ T5984] RSP: 002b:00007fa2a2f7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.661621][ T5984] RAX: ffffffffffffffda RBX: 00007fa2a533cfa0 RCX: 00007fa2a5115b69 [ 172.670101][ T5984] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 172.679393][ T5984] RBP: 00007fa2a5198df1 R08: 0000000000000000 R09: 0000000000000000 [ 172.688520][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.696808][ T5984] R13: 0000000000000000 R14: 00007fa2a533cfa0 R15: 00007ffc15d6c228 [ 172.705476][ T5984] [ 172.708594][ T5984] [ 172.711029][ T5984] Allocated by task 5984: [ 172.715356][ T5984] __kasan_kmalloc+0xb5/0xf0 [ 172.720154][ T5984] sk_prot_alloc+0xe7/0x210 [ 172.724979][ T5984] sk_alloc+0x2f/0x310 [ 172.729438][ T5984] pfkey_create+0xd8/0x560 [ 172.734691][ T5984] __sock_create+0x47b/0x900 [ 172.740123][ T5984] __sys_socket+0xe2/0x170 [ 172.744963][ T5984] __x64_sys_socket+0x76/0x80 [ 172.750149][ T5984] do_syscall_64+0x4c/0xa0 [ 172.755400][ T5984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.761416][ T5984] [ 172.763782][ T5984] Last potentially related work creation: [ 172.769497][ T5984] kasan_save_stack+0x35/0x60 [ 172.774491][ T5984] kasan_record_aux_stack+0xb8/0x100 [ 172.779794][ T5984] call_rcu+0x182/0x930 [ 172.783988][ T5984] dev_shutdown+0x19f/0x710 [ 172.788593][ T5984] unregister_netdevice_many+0xa0c/0x18f0 [ 172.794683][ T5984] unregister_netdevice_queue+0x31c/0x360 [ 172.800440][ T5984] __tun_detach+0xd4a/0x1500 [ 172.805217][ T5984] tun_chr_close+0x109/0x1b0 [ 172.809912][ T5984] __fput+0x234/0x930 [ 172.814022][ T5984] task_work_run+0x125/0x1a0 [ 172.818644][ T5984] exit_to_user_mode_loop+0x10f/0x130 [ 172.824225][ T5984] exit_to_user_mode_prepare+0xb1/0x140 [ 172.829878][ T5984] syscall_exit_to_user_mode+0x16/0x40 [ 172.835644][ T5984] do_syscall_64+0x58/0xa0 [ 172.840184][ T5984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.846820][ T5984] [ 172.849171][ T5984] Second to last potentially related work creation: [ 172.856551][ T5984] kasan_save_stack+0x35/0x60 [ 172.861657][ T5984] kasan_record_aux_stack+0xb8/0x100 [ 172.867279][ T5984] call_rcu+0x182/0x930 [ 172.871742][ T5984] dev_shutdown+0x19f/0x710 [ 172.876347][ T5984] unregister_netdevice_many+0xa0c/0x18f0 [ 172.882079][ T5984] unregister_netdevice_queue+0x31c/0x360 [ 172.887923][ T5984] __tun_detach+0xd4a/0x1500 [ 172.892720][ T5984] tun_chr_close+0x109/0x1b0 [ 172.897503][ T5984] __fput+0x234/0x930 [ 172.901500][ T5984] task_work_run+0x125/0x1a0 [ 172.906102][ T5984] exit_to_user_mode_loop+0x10f/0x130 [ 172.911621][ T5984] exit_to_user_mode_prepare+0xb1/0x140 [ 172.917196][ T5984] syscall_exit_to_user_mode+0x16/0x40 [ 172.922803][ T5984] do_syscall_64+0x58/0xa0 [ 172.927272][ T5984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.933194][ T5984] [ 172.935527][ T5984] The buggy address belongs to the object at ffff888074543000 [ 172.935527][ T5984] which belongs to the cache kmalloc-2k of size 2048 [ 172.949699][ T5984] The buggy address is located 1536 bytes inside of [ 172.949699][ T5984] 2048-byte region [ffff888074543000, ffff888074543800) [ 172.963378][ T5984] The buggy address belongs to the page: [ 172.969167][ T5984] page:ffffea0001d15000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74540 [ 172.979443][ T5984] head:ffffea0001d15000 order:3 compound_mapcount:0 compound_pincount:0 [ 172.988199][ T5984] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 172.996218][ T5984] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016842000 [ 173.004823][ T5984] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 173.013495][ T5984] page dumped because: kasan: bad access detected [ 173.020161][ T5984] page_owner tracks the page as allocated [ 173.025893][ T5984] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 73988945035, free_ts 73968185356 [ 173.046091][ T5984] get_page_from_freelist+0x1b77/0x1c60 [ 173.052252][ T5984] __alloc_pages+0x1e1/0x470 [ 173.057208][ T5984] new_slab+0xc0/0x4b0 [ 173.061835][ T5984] ___slab_alloc+0x81e/0xdf0 [ 173.066658][ T5984] __kmalloc_track_caller+0x1cb/0x330 [ 173.072321][ T5984] kmemdup+0x22/0x50 [ 173.076438][ T5984] neigh_sysctl_register+0x9b/0xa80 [ 173.081661][ T5984] addrconf_sysctl_register+0xac/0x1b0 [ 173.087145][ T5984] ipv6_add_dev+0xbf3/0x1190 [ 173.092019][ T5984] addrconf_notify+0x66f/0xf00 [ 173.096912][ T5984] raw_notifier_call_chain+0xcb/0x160 [ 173.102309][ T5984] register_netdevice+0x1275/0x16b0 [ 173.107673][ T5984] register_vlan_dev+0x3c3/0x7f0 [ 173.113200][ T5984] vlan_newlink+0x44c/0x610 [ 173.117744][ T5984] rtnl_newlink+0x114c/0x17d0 [ 173.122565][ T5984] rtnetlink_rcv_msg+0x9b9/0xe60 [ 173.127539][ T5984] page last free stack trace: [ 173.132228][ T5984] free_unref_page_prepare+0x637/0x6c0 [ 173.137976][ T5984] free_unref_page+0x94/0x280 [ 173.142859][ T5984] __unfreeze_partials+0x1a5/0x200 [ 173.148089][ T5984] put_cpu_partial+0x12d/0x190 [ 173.153374][ T5984] qlist_free_all+0x35/0x90 [ 173.158081][ T5984] kasan_quarantine_reduce+0x150/0x160 [ 173.163554][ T5984] __kasan_slab_alloc+0x2f/0xd0 [ 173.168437][ T5984] slab_post_alloc_hook+0x4c/0x380 [ 173.173588][ T5984] __kmalloc_track_caller+0x125/0x330 [ 173.179067][ T5984] kvasprintf+0xd4/0x180 [ 173.183612][ T5984] kobject_set_name_vargs+0x5d/0x110 [ 173.188921][ T5984] kobject_init_and_add+0xda/0x190 [ 173.194242][ T5984] net_rx_queue_update_kobjects+0x1af/0x490 [ 173.200336][ T5984] netdev_register_kobject+0x223/0x310 [ 173.205819][ T5984] register_netdevice+0x1019/0x16b0 [ 173.211154][ T5984] veth_newlink+0x8ed/0xda0 [ 173.215789][ T5984] [ 173.218391][ T5984] Memory state around the buggy address: [ 173.224227][ T5984] ffff888074543500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 173.232471][ T5984] ffff888074543580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 173.240916][ T5984] >ffff888074543600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 173.249079][ T5984] ^ [ 173.253353][ T5984] ffff888074543680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 173.261548][ T5984] ffff888074543700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 173.270062][ T5984] ================================================================== [ 173.278163][ T5984] Disabling lock debugging due to kernel taint [ 173.285496][ T5984] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 173.293799][ T5984] CPU: 0 PID: 5984 Comm: syz.5.565 Tainted: G B 5.15.189-syzkaller #0 [ 173.303945][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.314193][ T5984] Call Trace: [ 173.317482][ T5984] [ 173.320609][ T5984] dump_stack_lvl+0x168/0x230 [ 173.325408][ T5984] ? show_regs_print_info+0x20/0x20 [ 173.330708][ T5984] ? load_image+0x3b0/0x3b0 [ 173.335235][ T5984] panic+0x2c9/0x7f0 [ 173.339337][ T5984] ? bpf_jit_dump+0xd0/0xd0 [ 173.345201][ T5984] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 173.351304][ T5984] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 173.358023][ T5984] ? _raw_spin_unlock+0x40/0x40 [ 173.363396][ T5984] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 173.370189][ T5984] check_panic_on_warn+0x80/0xa0 [ 173.375877][ T5984] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 173.382626][ T5984] end_report+0x6d/0xf0 [ 173.386904][ T5984] kasan_report+0x102/0x130 [ 173.392472][ T5984] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 173.399101][ T5984] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 173.406060][ T5984] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 173.412414][ T5984] ? __kasan_kmalloc+0xb5/0xf0 [ 173.417540][ T5984] ? xfrm_policy_alloc+0x75/0x2b0 [ 173.422755][ T5984] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 173.429004][ T5984] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 173.435069][ T5984] xfrm_policy_inexact_insert+0xe0/0x1460 [ 173.441104][ T5984] ? __get_hash_thresh+0x105/0x410 [ 173.446259][ T5984] ? policy_hash_bysel+0x10a/0x570 [ 173.451397][ T5984] xfrm_policy_insert+0x112/0x930 [ 173.456465][ T5984] xfrm_add_policy+0x4d6/0x860 [ 173.461778][ T5984] ? xfrm_dump_sa_done+0xc0/0xc0 [ 173.467542][ T5984] ? apparmor_capable+0x12c/0x190 [ 173.473138][ T5984] ? __nla_parse+0x3c/0x50 [ 173.478199][ T5984] xfrm_user_rcv_msg+0x58d/0x860 [ 173.483627][ T5984] ? xfrm_netlink_rcv+0x90/0x90 [ 173.489179][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 173.494059][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 173.499113][ T5984] ? xfrm_netlink_rcv+0x66/0x90 [ 173.504624][ T5984] ? __mutex_lock_common+0x431/0x2390 [ 173.510813][ T5984] ? __copy_skb_header+0x417/0x5a0 [ 173.516340][ T5984] ? __skb_clone+0x480/0x790 [ 173.520944][ T5984] netlink_rcv_skb+0x1e0/0x430 [ 173.525784][ T5984] ? xfrm_netlink_rcv+0x90/0x90 [ 173.530978][ T5984] ? netlink_ack+0xb60/0xb60 [ 173.535616][ T5984] ? __lock_acquire+0x7c60/0x7c60 [ 173.541031][ T5984] xfrm_netlink_rcv+0x75/0x90 [ 173.546033][ T5984] netlink_unicast+0x774/0x920 [ 173.551156][ T5984] netlink_sendmsg+0x8ab/0xbc0 [ 173.556959][ T5984] ? netlink_getsockopt+0x560/0x560 [ 173.562625][ T5984] ? aa_sock_msg_perm+0x94/0x150 [ 173.567840][ T5984] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 173.573232][ T5984] ? security_socket_sendmsg+0x7c/0xa0 [ 173.578818][ T5984] ? netlink_getsockopt+0x560/0x560 [ 173.585015][ T5984] ____sys_sendmsg+0x5a2/0x8c0 [ 173.590462][ T5984] ? memset+0x1e/0x40 [ 173.595027][ T5984] ? __sys_sendmsg_sock+0x30/0x30 [ 173.600742][ T5984] ? import_iovec+0x6f/0xa0 [ 173.605839][ T5984] ___sys_sendmsg+0x1f0/0x260 [ 173.613091][ T5984] ? __sys_sendmsg+0x250/0x250 [ 173.619149][ T5984] ? sock_setsockopt+0x1502/0x2270 [ 173.624833][ T5984] ? __fdget+0x18b/0x210 [ 173.629308][ T5984] __se_sys_sendmsg+0x190/0x250 [ 173.634273][ T5984] ? __x64_sys_sendmsg+0x80/0x80 [ 173.639967][ T5984] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 173.646291][ T5984] ? lockdep_hardirqs_on+0x94/0x140 [ 173.651722][ T5984] do_syscall_64+0x4c/0xa0 [ 173.656687][ T5984] ? clear_bhb_loop+0x30/0x80 [ 173.661376][ T5984] ? clear_bhb_loop+0x30/0x80 [ 173.666063][ T5984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.671975][ T5984] RIP: 0033:0x7fa2a5115b69 [ 173.676430][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.696658][ T5984] RSP: 002b:00007fa2a2f7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.705095][ T5984] RAX: ffffffffffffffda RBX: 00007fa2a533cfa0 RCX: 00007fa2a5115b69 [ 173.713095][ T5984] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 173.721087][ T5984] RBP: 00007fa2a5198df1 R08: 0000000000000000 R09: 0000000000000000 [ 173.729072][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.737059][ T5984] R13: 0000000000000000 R14: 00007fa2a533cfa0 R15: 00007ffc15d6c228 [ 173.745770][ T5984] [ 173.749248][ T5984] Kernel Offset: disabled [ 173.754968][ T5984] Rebooting in 86400 seconds..