last executing test programs: 6m36.828315577s ago: executing program 3 (id=1976): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 6m36.719959142s ago: executing program 3 (id=1977): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 6m36.719136903s ago: executing program 3 (id=1978): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = timerfd_create(0x7, 0x80800) timerfd_gettime(r0, &(0x7f0000000000)) 6m36.689437775s ago: executing program 3 (id=1979): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') setuid(0xee01) fchown(r0, 0x0, 0x0) 6m36.610963106s ago: executing program 3 (id=1980): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) 6m36.57863495s ago: executing program 3 (id=1981): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0xaa, 0x6, 0x0, @empty, @mcast1, {[@srh={0x2b, 0x10, 0x4, 0x8, 0x8c, 0x20, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, @loopback, @local, @private1]}], @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0xe03, 0x0, 0x3, 0xc, 0x5, 0x3, 0x10, 0x7, 0x2, 0x4e22, 0x4e24}, 0x1, 0x2}}, [0x0, 0x0]}}}}}, 0xd2) 6m21.287138691s ago: executing program 32 (id=1981): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0xaa, 0x6, 0x0, @empty, @mcast1, {[@srh={0x2b, 0x10, 0x4, 0x8, 0x8c, 0x20, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, @loopback, @local, @private1]}], @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0xe03, 0x0, 0x3, 0xc, 0x5, 0x3, 0x10, 0x7, 0x2, 0x4e22, 0x4e24}, 0x1, 0x2}}, [0x0, 0x0]}}}}}, 0xd2) 4m9.335767456s ago: executing program 0 (id=3770): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) 4m9.219735792s ago: executing program 0 (id=3772): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x6f479580, 0x0, 0x1002, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000fff000000001000a0000", 0x1c) 4m9.206792872s ago: executing program 0 (id=3774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x9, 0x2a, {0x2a, 0x19, "cfcc467a9a0eab83b658a8873d6fd7dbcbd3f634f94de3c55cd990295d741e7562ab9eb7e858d15a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m6.059685021s ago: executing program 0 (id=3818): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r0, r0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x29) 4m5.869504909s ago: executing program 0 (id=3820): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 4m5.712100007s ago: executing program 0 (id=3822): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 3m50.502083172s ago: executing program 33 (id=3822): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 2.731671322s ago: executing program 1 (id=6568): syz_open_dev$usbfs(0x0, 0x400000001fc, 0x10100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) 2.277834895s ago: executing program 1 (id=6569): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 1.998414767s ago: executing program 1 (id=6573): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d18304", 0xc}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={0x0}) 1.715113472s ago: executing program 5 (id=6575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 1.607842485s ago: executing program 2 (id=6576): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.607661629s ago: executing program 1 (id=6577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8c, 0xec000000, 0x9}]}) 1.545401261s ago: executing program 2 (id=6578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1}) 1.533250802s ago: executing program 5 (id=6579): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032211e0ff14000200475400f6a13bb10000a8880088fb4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x8864, r1}, 0x14) 1.439570438s ago: executing program 2 (id=6580): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, r0, 0x821, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x0) 1.367921336s ago: executing program 5 (id=6581): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cad7000010000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900040000002e000000080026008a09000008009f0003"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x24040000) 1.297072244s ago: executing program 1 (id=6582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1.279630174s ago: executing program 5 (id=6583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 1.24353404s ago: executing program 2 (id=6584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x104, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xe8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdf, 0x2, "db4ae2ed15533e1a99ab7525028785d07bb72d51651f543334be67750b18a6024fd265c25eec8ecb5078873c74af19e2325d87ec603e49ac229c3454a8d6a832b365c34beaf1150444b2315fc6ef541ee8ae7167d86f5adf4e1f7a4683a7498acc27207cec2827415d30dd942dcb4baca6f5d329a529846dba802eff7f179bc6a722fbad1540c566f0ca205d1401093ef68ea0d6bbbbf0b283fa9c2b6188f8b0eb13a63b3e0c4a5e795ae11a1bcbf89c1dca53cbe22299813eea4ac435b407be20b84a11ec08df7dba75ca686c538fdffa7a16ad58fe07590d84e9"}, @NL80211_BAND_5GHZ={0xfffffffffffffeb0}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) 1.242903851s ago: executing program 4 (id=6585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 1.107923286s ago: executing program 4 (id=6586): syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r0], 0xb2) 1.107752853s ago: executing program 1 (id=6587): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x400}) 1.087984404s ago: executing program 2 (id=6588): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.026162785s ago: executing program 5 (id=6589): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 896.286199ms ago: executing program 4 (id=6590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x20}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 887.995555ms ago: executing program 2 (id=6591): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 658.05603ms ago: executing program 4 (id=6592): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) getsockname$l2tp6(r0, 0x0, &(0x7f0000000140)) 411.87262ms ago: executing program 5 (id=6593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0xae64, 0x0) 213.040279ms ago: executing program 4 (id=6594): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x80000001}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 4 (id=6595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000b4725c7b0900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) kernel console output (not intermixed with test programs): .753152][T17112] netlink: 758 bytes leftover after parsing attributes in process `syz.2.4989'. [ 513.861733][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 513.864014][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.864079][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.864091][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.864115][ T11] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.864126][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.868788][ T11] usb 2-1: config 0 descriptor?? [ 514.284496][ T11] hid_parser_main: 485 callbacks suppressed [ 514.284520][ T11] microsoft 0003:045E:07DA.005C: unknown main item tag 0x4 [ 514.293020][ T11] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.005C/input/input37 [ 514.337617][ T11] microsoft 0003:045E:07DA.005C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 514.504228][ T5819] usb 2-1: USB disconnect, device number 72 [ 515.241796][ T11] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 515.414492][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.415652][ T11] usb 5-1: config 1 has an invalid interface number: 28 but max is 1 [ 515.415678][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.415695][ T11] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 515.415715][ T11] usb 5-1: config 1 has no interface number 2 [ 515.415771][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.415794][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.415827][ T11] usb 5-1: config 1 interface 28 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 515.415850][ T11] usb 5-1: config 1 interface 28 has no altsetting 0 [ 515.428682][ T11] usb 5-1: string descriptor 0 read error: -22 [ 515.428819][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.428843][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.466178][T17167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5014'. [ 515.503172][ T11] usb 5-1: selecting invalid altsetting 1 [ 515.704832][ T11] cdc_ncm 5-1:1.0: bind() failure [ 515.751905][ T11] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 515.751935][ T11] cdc_ncm 5-1:1.1: bind() failure [ 515.779833][ T11] cdc_mbim 5-1:1.28: probe with driver cdc_mbim failed with error -71 [ 515.805948][ T11] usb 5-1: USB disconnect, device number 36 [ 516.081684][ T822] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 516.234635][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 516.235307][ T822] usb 2-1: not running at top speed; connect to a high speed hub [ 516.237028][ T822] usb 2-1: config 194 has an invalid interface number: 244 but max is 1 [ 516.237050][ T822] usb 2-1: config 194 has an invalid interface number: 61 but max is 1 [ 516.237070][ T822] usb 2-1: config 194 has no interface number 0 [ 516.237084][ T822] usb 2-1: config 194 has no interface number 1 [ 516.237130][ T822] usb 2-1: config 194 interface 61 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 516.237154][ T822] usb 2-1: config 194 interface 61 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 516.237175][ T822] usb 2-1: config 194 interface 61 has no altsetting 0 [ 516.240898][ T822] usb 2-1: New USB device found, idVendor=14b0, idProduct=3410, bcdDevice=e6.84 [ 516.240924][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.240940][ T822] usb 2-1: Product: syz [ 516.240952][ T822] usb 2-1: Manufacturer: syz [ 516.240964][ T822] usb 2-1: SerialNumber: syz [ 516.628306][ T822] ti_usb_3410_5052 2-1:194.244: required endpoints missing [ 516.653712][ T822] ti_usb_3410_5052 2-1:194.61: TI USB 3410 1 port adapter converter detected [ 516.654199][ T822] ti_usb_3410_5052 2-1:194.61: missing endpoints [ 516.683649][ T822] usb 2-1: USB disconnect, device number 73 [ 516.945277][ T11] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 516.977150][T17198] input: syz1 as /devices/virtual/input/input38 [ 517.099649][T17204] TCP: TCP_TX_DELAY enabled [ 517.151721][ T11] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 517.151743][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.151753][ T11] usb 3-1: Product: syz [ 517.151760][ T11] usb 3-1: Manufacturer: syz [ 517.151767][ T11] usb 3-1: SerialNumber: syz [ 517.160922][ T11] usb 3-1: config 0 descriptor?? [ 517.222318][ T11] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 517.418259][ T11] gspca_stk1135: reg_w 0x2 err -71 [ 517.419417][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419431][ T11] gspca_stk1135: Sensor write failed [ 517.419456][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419492][ T11] gspca_stk1135: Sensor write failed [ 517.419515][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419535][ T11] gspca_stk1135: Sensor read failed [ 517.419572][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419581][ T11] gspca_stk1135: Sensor read failed [ 517.419587][ T11] gspca_stk1135: Detected sensor type unknown (0x0) [ 517.419644][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419655][ T11] gspca_stk1135: Sensor read failed [ 517.419701][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419711][ T11] gspca_stk1135: Sensor read failed [ 517.419734][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419743][ T11] gspca_stk1135: Sensor write failed [ 517.419767][ T11] gspca_stk1135: serial bus timeout: status=0x00 [ 517.419776][ T11] gspca_stk1135: Sensor write failed [ 517.419867][ T11] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 517.450470][ T11] usb 3-1: USB disconnect, device number 53 [ 517.944944][T17222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5037'. [ 518.486418][ T38] audit: type=1326 audit(2000000418.524:66): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17248 comm="syz.5.5053" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4368c5de59 code=0x0 [ 518.747681][T17262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5060'. [ 519.016881][T17273] netlink: 'syz.2.5063': attribute type 10 has an invalid length. [ 519.016904][T17273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5063'. [ 519.811253][ T11] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 519.968210][T17310] nbd: couldn't find device at index 54253 [ 519.973358][ T11] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 519.973402][ T11] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.973428][ T11] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.973449][ T11] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 519.973475][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.973505][ T11] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 519.973526][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.980959][ T11] usb 3-1: config 0 descriptor?? [ 520.091321][ T822] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 520.244790][T17315] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5083'. [ 520.292657][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 520.296197][ T822] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 520.296225][ T822] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 520.296244][ T822] usb 2-1: config 0 has no interface number 0 [ 520.296284][ T822] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 520.296308][ T822] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 520.296334][ T822] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 520.298070][ T822] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 520.298097][ T822] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 520.298117][ T822] usb 2-1: Product: syz [ 520.298130][ T822] usb 2-1: Manufacturer: syz [ 520.441232][ T822] usb 2-1: config 0 descriptor?? [ 520.442343][T17306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 520.549895][ T11] hid-alps 0003:044E:120C.005D: unknown main item tag 0x1 [ 520.550874][ T11] hid-alps 0003:044E:120C.005D: unknown main item tag 0x0 [ 520.550931][ T11] hid-alps 0003:044E:120C.005D: unknown main item tag 0x7 [ 520.550959][ T11] hid-alps 0003:044E:120C.005D: unknown main item tag 0x0 [ 520.550985][ T11] hid-alps 0003:044E:120C.005D: item fetching failed at offset 6/8 [ 520.552717][ T11] hid-alps 0003:044E:120C.005D: parse failed [ 520.552944][ T11] hid-alps 0003:044E:120C.005D: probe with driver hid-alps failed with error -22 [ 520.680743][ T11] usb 3-1: USB disconnect, device number 54 [ 520.782358][T15082] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 520.931243][T15082] usb 5-1: Using ep0 maxpacket: 32 [ 520.934155][T15082] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 520.934183][T15082] usb 5-1: config 0 has no interface number 0 [ 520.934228][T15082] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.934255][T15082] usb 5-1: config 0 interface 85 has no altsetting 0 [ 520.937131][T15082] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 520.937159][T15082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.937178][T15082] usb 5-1: Product: syz [ 520.937192][T15082] usb 5-1: Manufacturer: syz [ 520.937205][T15082] usb 5-1: SerialNumber: syz [ 520.945836][T15082] usb 5-1: config 0 descriptor?? [ 521.060762][ T822] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input39 [ 521.268459][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 521.268624][ T822] usb 2-1: USB disconnect, device number 74 [ 521.413568][ T11] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 521.446133][T15082] appletouch 5-1:0.85: Geyser mode initialized. [ 521.448493][T15082] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input40 [ 521.581552][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 521.590496][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.590552][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.590579][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 521.590600][ T11] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 521.590622][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.656811][ T11] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.656841][ T11] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.656868][ T11] usb 6-1: Manufacturer: syz [ 521.704506][ T11] usb 6-1: config 0 descriptor?? [ 521.878285][ T822] usb 5-1: USB disconnect, device number 37 [ 521.878483][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 522.065800][ T11] rc_core: IR keymap rc-hauppauge not found [ 522.065820][ T11] Registered IR keymap rc-empty [ 522.066781][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.068819][ T822] appletouch 5-1:0.85: input: appletouch disconnected [ 522.081122][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.133114][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 522.136246][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 522.172668][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.200228][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.213704][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.237407][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.256021][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.286208][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.301739][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.321148][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.352111][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.381123][ T11] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 522.413767][ T11] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.413793][ T11] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.441314][T12618] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.463488][ T5819] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 522.498707][ T822] usb 6-1: USB disconnect, device number 17 [ 522.567245][T17341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5094'. [ 522.611569][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 522.614930][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.614956][ T5819] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 522.615004][ T5819] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 522.615040][ T5819] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 522.615092][ T5819] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 522.615113][ T5819] usb 3-1: config 1 interface 1 has no altsetting 0 [ 522.618463][ T5819] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 522.618491][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.618509][ T5819] usb 3-1: Product: syz [ 522.618521][ T5819] usb 3-1: Manufacturer: syz [ 522.618534][ T5819] usb 3-1: SerialNumber: syz [ 522.977332][ T5819] usb 3-1: selecting invalid altsetting 0 [ 523.177069][ T5819] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 523.378572][ T5819] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 523.688622][ T5819] usb 3-1: USB disconnect, device number 55 [ 523.824194][T14731] udevd[14731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.501272][ T11] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 524.655933][ T11] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 524.655965][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.655981][ T11] usb 3-1: Product: syz [ 524.655989][ T11] usb 3-1: Manufacturer: syz [ 524.655996][ T11] usb 3-1: SerialNumber: syz [ 524.725316][ T5699] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 524.941819][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 524.945785][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.945868][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.949409][ T5699] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.949438][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.949506][ T5699] usb 6-1: Product: syz [ 524.949527][ T5699] usb 6-1: Manufacturer: syz [ 524.949541][ T5699] usb 6-1: SerialNumber: syz [ 524.976004][ T5699] usb 6-1: config 0 descriptor?? [ 525.023747][ T5699] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.023782][ T5699] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 525.129788][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 525.129874][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 525.325622][T17409] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 2, 0, 0, 0) [ 525.333412][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 525.333466][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 525.356327][ T822] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 525.406348][ T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 525.443328][ T11] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 525.457539][ T11] usb 3-1: USB disconnect, device number 56 [ 525.520496][ T822] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 525.520529][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.554644][ T822] usb 2-1: config 0 descriptor?? [ 525.579685][ T822] cp210x 2-1:0.0: cp210x converter detected [ 525.593690][ T5699] em28xx 6-1:0.0: chip ID is em2874 [ 525.797979][ T5699] usb 6-1: USB disconnect, device number 18 [ 525.804666][ T5699] em28xx 6-1:0.0: Disconnecting em28xx [ 525.890974][ T5819] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 525.893830][ T5699] em28xx 6-1:0.0: Freeing device [ 525.971872][T17415] program syz.2.5128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.973342][ T822] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 526.013589][ T822] usb 2-1: cp210x converter now attached to ttyUSB0 [ 526.053023][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.053073][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 526.053098][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 526.053121][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 526.053141][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 526.056305][ T5819] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 526.056392][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 526.056417][ T5819] usb 5-1: Product: syz [ 526.056432][ T5819] usb 5-1: Manufacturer: syz [ 526.056446][ T5819] usb 5-1: SerialNumber: syz [ 526.154165][ T5819] usb 5-1: config 0 descriptor?? [ 526.176838][ T5699] usb 2-1: USB disconnect, device number 75 [ 526.200945][ T5699] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 526.382555][ T5819] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 526.382584][ T5819] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 526.482170][ T5699] cp210x 2-1:0.0: device disconnected [ 526.582585][ T5819] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 526.582612][ T5819] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 526.582633][ T5819] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 526.786945][ T5819] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 526.992245][ T5819] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 526.992507][ T5819] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 527.017218][ T5819] usb 5-1: USB disconnect, device number 38 [ 527.221818][ T5600] Bluetooth: hci1: link tx timeout [ 527.222394][ T5600] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.293457][ T60] Bluetooth: hci1: link tx timeout [ 527.293475][ T60] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.302485][T17445] Bluetooth: hci1: link tx timeout [ 527.302504][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.302647][T17445] Bluetooth: hci1: link tx timeout [ 527.302659][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.302940][T17445] Bluetooth: hci1: link tx timeout [ 527.302960][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303104][T17445] Bluetooth: hci1: link tx timeout [ 527.303117][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303250][T17445] Bluetooth: hci1: link tx timeout [ 527.303263][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303384][T17445] Bluetooth: hci1: link tx timeout [ 527.303395][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303514][T17445] Bluetooth: hci1: link tx timeout [ 527.303524][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303642][T17445] Bluetooth: hci1: link tx timeout [ 527.303654][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303767][T17445] Bluetooth: hci1: link tx timeout [ 527.303786][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.303953][T17445] Bluetooth: hci1: link tx timeout [ 527.303964][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.327594][T17445] Bluetooth: hci1: link tx timeout [ 527.327631][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.327801][T17445] Bluetooth: hci1: link tx timeout [ 527.327812][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.327975][T17445] Bluetooth: hci1: link tx timeout [ 527.327986][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328099][T17445] Bluetooth: hci1: link tx timeout [ 527.328109][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328217][T17445] Bluetooth: hci1: link tx timeout [ 527.328226][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328337][T17445] Bluetooth: hci1: link tx timeout [ 527.328347][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328454][T17445] Bluetooth: hci1: link tx timeout [ 527.328463][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328684][T17445] Bluetooth: hci1: link tx timeout [ 527.328702][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.328894][T17445] Bluetooth: hci1: link tx timeout [ 527.328905][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.329024][T17445] Bluetooth: hci1: link tx timeout [ 527.329035][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.329147][T17445] Bluetooth: hci1: link tx timeout [ 527.329159][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.329287][T17445] Bluetooth: hci1: link tx timeout [ 527.343172][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.634157][T17445] Bluetooth: hci1: link tx timeout [ 527.634175][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.647180][T17445] Bluetooth: hci1: link tx timeout [ 527.647200][T17445] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 527.828245][T17452] IPVS: lc: FWM 3 0x00000003 - no destination available [ 528.246314][T17466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.757168][T17482] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5156'. [ 529.319501][T17445] Bluetooth: hci1: command 0x2016 tx timeout [ 529.543845][T17508] veth0: entered promiscuous mode [ 529.544887][T17507] veth0: left promiscuous mode [ 529.940886][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 530.095659][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.095700][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 530.095723][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.115188][ T9] usb 3-1: config 0 descriptor?? [ 530.152947][T17526] netlink: 'syz.4.5175': attribute type 10 has an invalid length. [ 530.363131][T17534] netlink: 'syz.1.5180': attribute type 27 has an invalid length. [ 530.550615][ T9] hid (null): report_id 42478 is invalid [ 530.550641][ T9] hid (null): unknown global tag 0xc [ 530.550679][ T9] hid (null): report_id 43197 is invalid [ 530.563173][ T9] hid-led 0003:0FC5:B080.005E: reserved main item tag 0xe [ 530.563258][ T9] hid-led 0003:0FC5:B080.005E: report_id 42478 is invalid [ 530.563274][ T9] hid-led 0003:0FC5:B080.005E: item 0 2 1 8 parsing failed [ 530.574895][ T9] hid-led 0003:0FC5:B080.005E: probe with driver hid-led failed with error -22 [ 530.767203][ T9] usb 3-1: USB disconnect, device number 57 [ 531.261202][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 531.500542][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 531.509678][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.509706][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.513713][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.513742][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.513760][ T9] usb 6-1: Product: syz [ 531.513774][ T9] usb 6-1: Manufacturer: syz [ 531.513786][ T9] usb 6-1: SerialNumber: syz [ 531.601975][ T9] usb 6-1: 0:2 : does not exist [ 531.807475][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 531.932254][ T9] usb 6-1: USB disconnect, device number 19 [ 532.052060][T15314] udevd[15314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.293669][T17586] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5204'. [ 532.730732][T17604] caif0: tun_chr_ioctl cmd 1074025672 [ 532.730747][T17604] caif0: ignored: set checksum disabled [ 534.653697][ T5600] Bluetooth: hci1: unexpected event 0x12 length: 7 < 8 [ 534.996957][ T5600] Bluetooth: hci3: Malformed Event: 0x13 [ 536.235745][T17688] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5248'. [ 536.235769][T17688] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.009086][T17712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5261'. [ 537.993711][T17730] netlink: 'syz.4.5269': attribute type 83 has an invalid length. [ 540.282016][T17601] Set syz1 is full, maxelem 65536 reached [ 540.960228][ T5699] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 541.007057][T17819] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5311'. [ 541.007081][T17819] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 541.040088][ T32] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 541.141692][ T5699] usb 2-1: config 243 has an invalid interface number: 77 but max is 0 [ 541.141721][ T5699] usb 2-1: config 243 has no interface number 0 [ 541.141770][ T5699] usb 2-1: config 243 interface 77 altsetting 3 endpoint 0x1 has an invalid bInterval 81, changing to 10 [ 541.141785][ T5699] usb 2-1: config 243 interface 77 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 541.141798][ T5699] usb 2-1: config 243 interface 77 has no altsetting 0 [ 541.143992][ T5699] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=72.b8 [ 541.144022][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.144040][ T5699] usb 2-1: Product: syz [ 541.144048][ T5699] usb 2-1: Manufacturer: syz [ 541.144055][ T5699] usb 2-1: SerialNumber: syz [ 541.152341][T17803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 541.242684][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 541.272684][ T32] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 541.275513][ T32] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 541.275542][ T32] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 541.275562][ T32] usb 6-1: Product: syz [ 541.275576][ T32] usb 6-1: Manufacturer: syz [ 541.275590][ T32] usb 6-1: SerialNumber: syz [ 541.347259][ T32] usb 6-1: config 0 descriptor?? [ 541.348423][T17809] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 541.354615][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 541.374959][ T32] hub 6-1:0.0: bad descriptor, ignoring hub [ 541.375004][ T32] hub 6-1:0.0: probe with driver hub failed with error -5 [ 541.464809][ T5699] kvaser_usb 2-1:243.77: error -ENODEV: Cannot get usb endpoint(s) [ 541.519263][ T5699] usb 2-1: USB disconnect, device number 76 [ 541.520329][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 541.522514][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.522566][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 541.522590][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.532178][ T9] usb 5-1: config 0 descriptor?? [ 541.555922][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 542.013185][ T9] gspca_vc032x: reg_w err -71 [ 542.013354][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 542.155459][ T9] usb 5-1: USB disconnect, device number 39 [ 543.220201][T17865] netlink: 'syz.2.5331': attribute type 2 has an invalid length. [ 543.298697][T17869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5332'. [ 543.728645][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5338'. [ 543.915171][ T3343] raw-gadget.1 gadget.5: failed to queue suspend event [ 543.931828][T17809] raw-gadget.1 gadget.5: failed to queue disconnect event [ 543.955175][ T11] usb 6-1: USB disconnect, device number 20 [ 544.135519][T15314] Flush: task=udevd[15314] dev=loop4 state=2 [ 544.257417][T15314] Teardown: task=udevd[15314] dev=loop4 state=2 [ 544.257742][T17899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5345'. [ 544.335721][T17904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5346'. [ 545.019977][ T822] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 545.167547][T17938] sg_write: data in/out 401372/136 bytes for SCSI command 0x0-- guessing data in; [ 545.167547][T17938] program syz.2.5363 not setting count and/or reply_len properly [ 545.192794][ T822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 545.192845][ T822] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 545.192867][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.225448][ T822] usb 2-1: config 0 descriptor?? [ 545.677341][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x1 [ 545.677490][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x5 [ 545.677508][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x6 [ 545.677525][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677542][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677558][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677573][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677589][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677604][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.677620][ T822] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0 [ 545.840659][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 545.873692][ T5699] usb 2-1: USB disconnect, device number 77 [ 546.000330][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 546.061415][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.062418][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 546.062452][ T9] usb 5-1: can't read configurations, error -71 [ 546.141133][T17967] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5378'. [ 546.434423][T17974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5381'. [ 546.542672][T17978] hugetlbfs: syz.1.5383 (17978): Using mlock ulimits for SHM_HUGETLB is obsolete [ 547.387646][T18008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.969629][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 548.009604][ T5699] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 548.083347][ T5819] hid-generic 0005:4C4C:100F.0060: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 548.132035][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 548.133831][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 548.133859][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 548.133878][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 548.133898][ T9] usb 2-1: config 1 has no interface number 0 [ 548.133924][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.133938][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 548.133961][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 548.133975][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.178573][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 548.185756][ T5699] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 548.185787][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.185859][ T5699] usb 5-1: Product: syz [ 548.185874][ T5699] usb 5-1: Manufacturer: syz [ 548.186215][ T5699] usb 5-1: SerialNumber: syz [ 548.215571][ T5699] usb 5-1: config 0 descriptor?? [ 548.296081][ T11] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 548.324476][ T5699] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 548.418361][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 548.466382][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.466481][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.466518][ T11] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 548.466541][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.483716][ T11] usb 3-1: config 0 descriptor?? [ 548.736240][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 548.736429][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 548.776748][ T11] usb 3-1: USB disconnect, device number 58 [ 548.833190][ T198] usb 2-1: USB disconnect, device number 78 [ 548.863606][ T198] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 549.086835][ T5699] gspca_sunplus: reg_w_riv err -71 [ 549.086919][ T5699] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 549.091578][ T5699] usb 5-1: USB disconnect, device number 42 [ 549.341299][ T11] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 549.512295][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.512326][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.512358][ T11] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 549.512370][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.516127][ T11] usb 3-1: config 0 descriptor?? [ 549.925550][ T11] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 549.937616][ T11] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input44 [ 550.059624][ T5819] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 550.059911][ T11] input: failed to attach handler kbd to device input44, error: -5 [ 550.221701][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.221729][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 550.221750][ T5819] usb 2-1: config 1 has no interface number 0 [ 550.221808][ T5819] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.221834][ T5819] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 550.226549][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.226580][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.226598][ T5819] usb 2-1: Product: syz [ 550.226612][ T5819] usb 2-1: Manufacturer: syz [ 550.226625][ T5819] usb 2-1: SerialNumber: syz [ 550.371426][ T11] usb 3-1: USB disconnect, device number 59 [ 551.166224][ T5819] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 551.166279][ T5819] cdc_ncm 2-1:1.1: bind() failure [ 551.199608][ T5819] usb 2-1: USB disconnect, device number 79 [ 551.800624][T18101] tipc: Enabling of bearer rejected, already enabled [ 551.801339][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5442'. [ 551.801358][T18101] tipc: Disabling bearer [ 552.262462][ T38] audit: type=1326 audit(2000000452.305:67): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18121 comm="syz.5.5448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4368c5de59 code=0x0 [ 552.893176][T18149] netlink: 'syz.1.5460': attribute type 2 has an invalid length. [ 552.940740][T18149] netlink: 'syz.1.5460': attribute type 2 has an invalid length. [ 553.089020][T15314] Flush: task=udevd[15314] dev=loop6 state=2 [ 553.219114][T15314] Teardown: task=udevd[15314] dev=loop6 state=2 [ 553.308049][T18162] batadv_slave_0: entered promiscuous mode [ 553.309115][T18161] batadv_slave_0: left promiscuous mode [ 553.570829][T12615] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.773683][T18182] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 553.879059][T18179] input: syz0 as /devices/virtual/input/input46 [ 554.529837][ T5819] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 554.679292][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 554.682116][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.682144][ T5819] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 554.682193][ T5819] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 554.682230][ T5819] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 554.682267][ T5819] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 554.682288][ T5819] usb 5-1: config 1 interface 1 has no altsetting 0 [ 554.684802][ T5819] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 554.684830][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.684848][ T5819] usb 5-1: Product: syz [ 554.684862][ T5819] usb 5-1: Manufacturer: syz [ 554.684875][ T5819] usb 5-1: SerialNumber: syz [ 554.781954][ T11] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 554.849503][ T32] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 554.933736][ T5819] usb 5-1: selecting invalid altsetting 0 [ 554.942353][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.942410][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 554.942435][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 554.942460][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 554.942481][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.970849][ T11] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 554.970880][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 554.970899][ T11] usb 2-1: Product: syz [ 554.970912][ T11] usb 2-1: Manufacturer: syz [ 554.970926][ T11] usb 2-1: SerialNumber: syz [ 555.039070][ T11] usb 2-1: config 0 descriptor?? [ 555.050234][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 555.053690][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 555.053962][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 555.053987][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.073200][ T32] usb 6-1: config 0 descriptor?? [ 555.133265][ T5819] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 555.266300][ T11] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 555.266330][ T11] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 555.336216][ T5819] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 555.495665][ T11] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 555.495690][ T11] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 555.495710][ T11] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 555.549930][ T32] logitech 0003:046D:C20E.0061: rdesc size test failed for formula gp [ 555.550363][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550391][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550413][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550434][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550457][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550481][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550504][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550526][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550547][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.550568][ T32] logitech 0003:046D:C20E.0061: unknown main item tag 0x0 [ 555.569599][ T32] logitech 0003:046D:C20E.0061: hidraw1: USB HID v0.09 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0 [ 555.662718][ T5819] usb 5-1: USB disconnect, device number 43 [ 555.747763][ T32] usb 6-1: USB disconnect, device number 21 [ 555.753689][ T11] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 556.041924][ T11] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 556.043287][ T11] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 556.596454][ T11] usb 2-1: USB disconnect, device number 80 [ 558.650498][ T5699] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 558.811436][ T5699] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 558.811465][ T5699] usb 6-1: config 0 has no interface number 0 [ 558.811508][ T5699] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.847023][ T5699] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 558.847041][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.847051][ T5699] usb 6-1: Product: syz [ 558.847058][ T5699] usb 6-1: Manufacturer: syz [ 558.847066][ T5699] usb 6-1: SerialNumber: syz [ 558.893959][ T5699] usb 6-1: config 0 descriptor?? [ 558.956442][ T5699] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 559.020865][T18282] Bluetooth: MGMT ver 1.23 [ 559.020913][T18282] Bluetooth: hci1: expected 325 bytes, got 2 bytes [ 559.582916][T18301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.537321][T18327] loop5: detected capacity change from 0 to 7 [ 561.037801][T18336] netlink: 'syz.1.5542': attribute type 27 has an invalid length. [ 561.309964][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 561.343081][ T5819] usb 6-1: USB disconnect, device number 22 [ 561.353716][ T5819] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 561.684315][T18327] Dev loop5: unable to read RDB block 7 [ 561.684347][T18327] loop5: unable to read partition table [ 561.684475][T18327] loop5: partition table beyond EOD, truncated [ 561.684504][T18327] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 561.738089][T15314] Flush: task=udevd[15314] dev=loop5 state=2 [ 561.839548][T15314] Teardown: task=udevd[15314] dev=loop5 state=2 [ 562.050555][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5552'. [ 562.110384][T18365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5553'. [ 562.276982][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5557'. [ 562.438908][ T5699] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 562.651452][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.651482][ T5699] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.653825][ T5699] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 562.653855][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 562.653882][ T5699] usb 5-1: Product: syz [ 562.653896][ T5699] usb 5-1: SerialNumber: syz [ 562.660066][ T32] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 562.719675][ T5819] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 562.737846][ T5699] usb 5-1: config 0 descriptor?? [ 562.768871][T18387] input: syz0 as /devices/virtual/input/input47 [ 562.824112][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.824144][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.824169][ T32] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 562.824181][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.886603][ T5819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 562.886633][ T5819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.886646][ T5819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.888906][ T5819] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 562.888948][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.888969][ T5819] usb 6-1: Product: syz [ 562.888982][ T5819] usb 6-1: Manufacturer: syz [ 562.888995][ T5819] usb 6-1: SerialNumber: syz [ 562.916450][ T32] usb 2-1: config 0 descriptor?? [ 562.927109][ T5819] usb 6-1: config 0 descriptor?? [ 562.980736][ T5778] usb 5-1: USB disconnect, device number 44 [ 563.153622][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.190616][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 563.191031][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 563.203484][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 563.214756][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 563.215713][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 563.328432][ T5819] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 563.328589][ T5819] imon 6-1:0.0: unable to initialize intf0, err -90 [ 563.330049][ T5819] imon:imon_probe: failed to initialize context! [ 563.330068][ T5819] imon 6-1:0.0: unable to register, err -19 [ 563.332233][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 563.332343][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 563.351825][ T5819] usb 6-1: USB disconnect, device number 23 [ 563.353479][ T32] usb 2-1: USB disconnect, device number 81 [ 563.484195][ T38] audit: type=1326 audit(2000000463.526:68): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.484969][ T38] audit: type=1326 audit(2000000463.526:69): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.485012][ T38] audit: type=1326 audit(2000000463.526:70): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.485049][ T38] audit: type=1326 audit(2000000463.526:71): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.485086][ T38] audit: type=1326 audit(2000000463.526:72): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.485801][ T38] audit: type=1326 audit(2000000463.526:73): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.485958][ T38] audit: type=1326 audit(2000000463.526:74): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.486468][ T38] audit: type=1326 audit(2000000463.526:75): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.486626][ T38] audit: type=1326 audit(2000000463.526:76): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 563.486802][ T38] audit: type=1326 audit(2000000463.526:77): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18392 comm="syz.2.5567" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18e2e0e68e code=0x7ffc0000 [ 563.486945][ T5600] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 564.294950][T18412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.851250][ T32] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 565.007774][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.007808][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.007858][ T32] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 565.007881][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.059422][ T32] usb 2-1: config 0 descriptor?? [ 565.308781][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 565.470182][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 565.472425][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 565.478242][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 565.478273][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 565.478292][ T9] usb 6-1: Product: syz [ 565.478305][ T9] usb 6-1: Manufacturer: syz [ 565.478318][ T9] usb 6-1: SerialNumber: syz [ 565.539151][ T9] usb 6-1: config 0 descriptor?? [ 565.544782][T18440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 565.574981][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 565.575018][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 565.643331][ T32] hid_parser_main: 34 callbacks suppressed [ 565.643357][ T32] arvo 0003:1E7D:30D4.0062: unknown main item tag 0x0 [ 565.691274][ T32] arvo 0003:1E7D:30D4.0062: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 565.793315][T18453] Zero length message leads to an empty skb [ 565.899927][ T5819] usb 6-1: USB disconnect, device number 24 [ 566.055397][ T32] usb 2-1: USB disconnect, device number 82 [ 566.561768][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5600'. [ 566.562917][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 566.563884][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5600'. [ 566.718610][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 566.721644][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.721671][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.723936][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 566.723966][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.723985][ T9] usb 3-1: SerialNumber: syz [ 566.818808][ T9] usb 3-1: 0:2 : does not exist [ 567.676879][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 567.680701][T18504] Context (ID=0x0) not attached to queue pair (handle=0x0:0xf2) [ 567.763718][T18506] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5616'. [ 567.946700][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 567.992887][ T9] usb 3-1: USB disconnect, device number 60 [ 568.107881][T15314] udevd[15314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.697366][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5630'. [ 568.697478][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5630'. [ 569.248540][ T5819] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 569.408455][ T32] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 569.409233][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.409400][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.409440][ T5819] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 569.409462][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.414425][ T5819] usb 5-1: config 0 descriptor?? [ 569.561852][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 569.577932][ T32] usb 6-1: config 0 has no interfaces? [ 569.577957][ T32] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 569.577970][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.598453][ T5778] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 569.603680][ T32] usb 6-1: config 0 descriptor?? [ 569.626515][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.627211][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.748546][ T5778] usb 2-1: Using ep0 maxpacket: 8 [ 569.749486][ T5778] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 569.750536][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.750561][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.750580][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.750674][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.750699][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.750717][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.751744][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.751766][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.751785][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.751879][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.751961][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.752071][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.753114][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.753136][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.753154][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.753233][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.753247][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.753259][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.754304][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.754326][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.754344][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.754417][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.754431][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.754442][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.755954][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.756027][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.756040][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.756064][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.756078][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.756089][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.757162][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.757218][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.757229][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.757319][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.757341][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.757361][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.816929][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.816958][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.816976][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.817226][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.817252][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.817273][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.862027][ T5778] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 569.862074][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.862964][ T5778] usb 2-1: config 0 has no interface number 0 [ 569.863012][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.863038][ T5778] usb 2-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.863059][ T5778] usb 2-1: config 0 interface 14 has no altsetting 0 [ 569.863469][ T5778] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 569.863493][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.871051][T18550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.883689][T18550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.964126][ T5819] hid-led 0003:1D34:000A.0063: unknown main item tag 0x0 [ 569.964163][ T5819] hid-led 0003:1D34:000A.0063: unknown main item tag 0x0 [ 569.964190][ T5819] hid-led 0003:1D34:000A.0063: unknown main item tag 0x0 [ 570.086529][ T32] usb 6-1: USB disconnect, device number 25 [ 570.285028][ T5778] usb 2-1: config 0 descriptor?? [ 570.295514][ T5819] hid-led 0003:1D34:000A.0063: probe with driver hid-led failed with error -71 [ 570.433354][ T5819] usb 5-1: USB disconnect, device number 45 [ 570.708925][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.708962][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.708990][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709016][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709042][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709068][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709094][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709120][ T5778] uclogic 0003:5543:0781.0064: unknown main item tag 0x0 [ 570.709159][ T5778] uclogic 0003:5543:0781.0064: unexpected long global item [ 570.713332][ T5778] uclogic 0003:5543:0781.0064: parse failed [ 570.713438][ T5778] uclogic 0003:5543:0781.0064: probe with driver uclogic failed with error -22 [ 570.868597][T18568] usb usb8: usbfs: process 18568 (syz.2.5644) did not claim interface 0 before use [ 570.869073][T18568] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.5644' resets device [ 570.952101][ T5778] usb 2-1: USB disconnect, device number 83 [ 571.229814][T18580] openvswitch: netlink: Missing valid actions attribute. [ 571.229840][T18580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.268392][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 571.418337][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 571.421834][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 571.421864][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.460330][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 571.460374][ T9] pvrusb2: ********** [ 571.460383][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 571.460394][ T9] pvrusb2: Important functionality might not be entirely working. [ 571.460404][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 571.460414][ T9] pvrusb2: ********** [ 571.610392][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5656'. [ 571.610423][T18592] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5656'. [ 571.680828][ T2361] pvrusb2: Invalid write control endpoint [ 571.916154][ T5778] usb 6-1: USB disconnect, device number 26 [ 571.986041][T18601] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 572.235681][ T2361] pvrusb2: Invalid write control endpoint [ 572.235697][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 572.235705][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 572.235713][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 572.235721][ T2361] pvrusb2: Device being rendered inoperable [ 572.236019][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 572.236107][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 572.267188][ T2361] pvrusb2: Attached sub-driver cx25840 [ 572.267288][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 572.267316][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 572.398931][T18610] netlink: 'syz.1.5664': attribute type 2 has an invalid length. [ 572.398954][T18610] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5664'. [ 573.274629][T18640] netlink: 368 bytes leftover after parsing attributes in process `syz.5.5678'. [ 573.308807][T18642] veth0_vlan: entered allmulticast mode [ 573.975842][T18645] vlan1: entered promiscuous mode [ 573.975988][T18645] vlan1: entered allmulticast mode [ 574.210663][T18661] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 574.408545][ T5778] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 574.563204][ T5778] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.563233][ T5778] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 574.563251][ T5778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.563299][ T5778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 574.563322][ T5778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 574.566175][ T5778] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.566205][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.566225][ T5778] usb 6-1: Product: syz [ 574.566238][ T5778] usb 6-1: Manufacturer: syz [ 574.606038][ T5778] cdc_wdm 6-1:1.0: skipping garbage [ 574.606060][ T5778] cdc_wdm 6-1:1.0: skipping garbage [ 574.638597][ T5778] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 574.638687][ T5778] cdc_wdm 6-1:1.0: Unknown control protocol [ 574.926495][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 574.926667][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 574.926738][ T11] usb 6-1: USB disconnect, device number 27 [ 574.927009][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 574.927029][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 574.927046][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 576.013948][T18717] netlink: 'syz.4.5714': attribute type 2 has an invalid length. [ 576.013980][T18717] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5714'. [ 576.048081][ T5778] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 576.278466][ T5778] usb 2-1: Using ep0 maxpacket: 16 [ 576.451151][ T5778] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 576.451179][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 576.492168][ T5778] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 576.492302][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.492323][ T5778] usb 2-1: Product: syz [ 576.492335][ T5778] usb 2-1: Manufacturer: syz [ 576.492348][ T5778] usb 2-1: SerialNumber: syz [ 576.542972][ T5778] usb 2-1: config 0 descriptor?? [ 576.552036][ T5778] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 576.552070][ T5778] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 576.728847][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 576.728880][ T38] audit: type=1326 audit(2000000476.767:82): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=18728 comm="syz.4.5720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55eafade59 code=0x0 [ 576.778078][ T32] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 576.900018][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5722'. [ 576.970016][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.970044][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.970074][ T32] usb 6-1: config 1 has no interface number 0 [ 576.970100][ T32] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.970114][ T32] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 576.972322][ T32] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.972360][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.972372][ T32] usb 6-1: Product: syz [ 576.972379][ T32] usb 6-1: Manufacturer: syz [ 576.972387][ T32] usb 6-1: SerialNumber: syz [ 577.172719][ T5778] em28xx 2-1:0.0: unknown em28xx chip ID (58) [ 577.381609][ T5778] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 577.395341][ T5778] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 577.395444][ T5778] em28xx 2-1:0.0: No AC97 audio processor [ 577.575980][ T5778] usb 2-1: USB disconnect, device number 84 [ 577.594326][ T5778] em28xx 2-1:0.0: Disconnecting em28xx [ 577.871743][ T5778] em28xx 2-1:0.0: Freeing device [ 577.953258][ T32] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 577.953304][ T32] cdc_ncm 6-1:1.1: bind() failure [ 577.995528][ T32] usb 6-1: USB disconnect, device number 28 [ 578.894870][T18773] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5740'. [ 578.949016][T18776] binder: 18775:18776 ioctl c0306201 200000000000 returned -22 [ 579.137605][T18782] program syz.5.5745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.837839][ T5778] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 579.988254][ T5778] usb 3-1: Using ep0 maxpacket: 8 [ 580.040242][ T5778] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 580.040299][ T5778] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.040321][ T5778] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.040344][ T5778] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 580.040365][ T5778] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 580.040387][ T5778] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.040427][ T5778] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.040449][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.079315][ T5778] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 581.506691][T18850] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 582.217741][ T5778] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 582.380829][ T5778] usb 2-1: Using ep0 maxpacket: 8 [ 582.413437][ T5778] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 582.413467][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.413484][ T5778] usb 2-1: Product: syz [ 582.413492][ T5778] usb 2-1: Manufacturer: syz [ 582.413499][ T5778] usb 2-1: SerialNumber: syz [ 582.421108][ T5778] usb 2-1: config 0 descriptor?? [ 582.705884][ T5778] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 582.710020][ T32] usb 3-1: USB disconnect, device number 61 [ 582.858763][T18869] nbd2: detected capacity change from 0 to 63 [ 582.866974][ T5600] block nbd2: Receive control failed (result -32) [ 582.965658][ T223] block nbd2: Dead connection, failed to find a fallback [ 582.965685][ T223] block nbd2: shutting down sockets [ 582.977842][ T223] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.978057][ T223] buffer_io_error: 9 callbacks suppressed [ 582.978251][ T223] Buffer I/O error on dev nbd2, logical block 0, async page read [ 582.989635][ T223] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.989719][ T223] Buffer I/O error on dev nbd2, logical block 1, async page read [ 582.989942][ T223] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.990004][ T223] Buffer I/O error on dev nbd2, logical block 2, async page read [ 582.990172][ T223] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.990334][ T223] Buffer I/O error on dev nbd2, logical block 3, async page read [ 582.990574][ T223] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.990634][ T223] Buffer I/O error on dev nbd2, logical block 0, async page read [ 582.990806][ T223] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.990917][ T223] Buffer I/O error on dev nbd2, logical block 1, async page read [ 582.991079][ T223] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.991394][ T223] Buffer I/O error on dev nbd2, logical block 2, async page read [ 582.991571][ T223] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.017020][ T223] Buffer I/O error on dev nbd2, logical block 3, async page read [ 583.146713][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 583.146799][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 583.146860][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 583.208839][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 583.278489][T18218] ldm_validate_partition_table(): Disk read failed. [ 583.281459][T18218] Dev nbd2: unable to read RDB block 0 [ 583.284290][T18218] nbd2: unable to read partition table [ 583.342687][ T5778] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 583.409803][ T5778] usb 2-1: USB disconnect, device number 85 [ 583.488328][T18873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.534043][T18218] ldm_validate_partition_table(): Disk read failed. [ 583.546781][T18218] Dev nbd2: unable to read RDB block 0 [ 583.701659][T18218] nbd2: unable to read partition table [ 584.599441][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.586886][T18950] program syz.2.5821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.248631][T18976] netlink: 'syz.5.5831': attribute type 27 has an invalid length. [ 586.348707][T18978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.987396][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 588.149697][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 588.149724][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 588.149740][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 588.149786][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 588.149808][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 588.151464][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 588.151490][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 588.151507][ T9] usb 5-1: Product: syz [ 588.151520][ T9] usb 5-1: Manufacturer: syz [ 588.248870][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 588.249014][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 588.254800][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 588.254822][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 588.694345][ T9] usb 5-1: USB disconnect, device number 46 [ 589.177473][ T5699] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 589.337358][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 589.343758][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 589.345338][ T5699] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.345368][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 589.345387][ T5699] usb 2-1: SerialNumber: syz [ 590.000696][ T38] audit: type=1326 audit(2000000490.048:83): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.000786][ T38] audit: type=1326 audit(2000000490.048:84): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.003774][ T38] audit: type=1326 audit(2000000490.048:85): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.004017][ T38] audit: type=1326 audit(2000000490.048:86): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.004173][ T38] audit: type=1326 audit(2000000490.048:87): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.004510][ T38] audit: type=1326 audit(2000000490.048:88): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.005206][ T38] audit: type=1326 audit(2000000490.048:89): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.005451][ T38] audit: type=1326 audit(2000000490.048:90): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.005608][ T38] audit: type=1326 audit(2000000490.048:91): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.005768][ T38] audit: type=1326 audit(2000000490.048:92): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19057 comm="syz.2.5868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e2e4de59 code=0x7ffc0000 [ 590.173369][ T5699] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 590.401280][ T5699] usb 2-1: USB disconnect, device number 86 [ 590.691708][ T5778] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 590.847517][ T5778] usb 5-1: Using ep0 maxpacket: 8 [ 590.851736][ T5778] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 590.851772][ T5778] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 590.851795][ T5778] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.851819][ T5778] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.851859][ T5778] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.851881][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.101627][ T5778] usb 5-1: GET_CAPABILITIES returned 0 [ 591.101673][ T5778] usbtmc 5-1:16.0: can't read capabilities [ 591.242464][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5882'. [ 591.377303][ T5699] usb 5-1: USB disconnect, device number 47 [ 591.927813][ T5819] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 592.078016][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 592.080273][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 592.080305][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 592.084467][ T5819] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 592.084502][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.084520][ T5819] usb 6-1: Product: syz [ 592.084532][ T5819] usb 6-1: Manufacturer: syz [ 592.084544][ T5819] usb 6-1: SerialNumber: syz [ 592.095032][ T5819] usb 6-1: config 0 descriptor?? [ 592.105869][ T5819] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 592.105905][ T5819] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 592.117587][ T5699] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 592.287243][ T5778] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 592.349297][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 592.358620][ T5699] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 592.358762][ T5699] usb 2-1: config 0 has no interface number 0 [ 592.358813][ T5699] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.358834][ T5699] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 592.358860][ T5699] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 592.358884][ T5699] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.366244][ T5699] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 592.366280][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.366299][ T5699] usb 2-1: Product: syz [ 592.366312][ T5699] usb 2-1: Manufacturer: syz [ 592.366326][ T5699] usb 2-1: SerialNumber: syz [ 592.482588][ T5778] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.482626][ T5778] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 592.482645][ T5778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.482790][ T5778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 592.482815][ T5778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 592.483802][ T5699] usb 2-1: config 0 descriptor?? [ 592.485739][ T5778] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.485766][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.485776][ T5778] usb 3-1: Product: syz [ 592.485783][ T5778] usb 3-1: Manufacturer: syz [ 592.633209][ T5699] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input48 [ 592.653425][ T5778] cdc_wdm 3-1:1.0: skipping garbage [ 592.653446][ T5778] cdc_wdm 3-1:1.0: skipping garbage [ 592.799713][ T5819] em28xx 6-1:0.0: unknown em28xx chip ID (58) [ 592.923206][ T5778] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 592.923227][ T5778] cdc_wdm 3-1:1.0: Unknown control protocol [ 592.951948][ C0] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 592.961465][ T5699] usb 2-1: USB disconnect, device number 87 [ 593.027966][ T5819] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 593.028399][ T5819] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 593.028416][ T5819] em28xx 6-1:0.0: No AC97 audio processor [ 593.057845][ T5778] usb 3-1: USB disconnect, device number 62 [ 593.075382][ T5819] usb 6-1: USB disconnect, device number 29 [ 593.200452][ T5819] em28xx 6-1:0.0: Disconnecting em28xx [ 593.299398][ T5819] em28xx 6-1:0.0: Freeing device [ 593.657830][T15082] kernel read not supported for file /vcs (pid: 15082 comm: kworker/0:3) [ 593.814665][T19144] ucma_write: process 3366 (syz.2.5907) changed security contexts after opening file descriptor, this is not allowed. [ 593.924221][T19151] netlink: 'syz.2.5911': attribute type 1 has an invalid length. [ 594.149184][T19158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.493989][T19164] nbd: couldn't find a device at index 0 [ 594.791688][T19172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5920'. [ 594.931081][T19178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5923'. [ 595.884075][T19219] Failed to get privilege flags for destination (handle=0x2:0xfffffffa) [ 595.930308][T19223] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 595.930308][T19223] program syz.1.5942 not setting count and/or reply_len properly [ 596.366341][T19242] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5952'. [ 596.977336][T19267] overlayfs: upper fs does not support tmpfile. [ 597.567279][ T198] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 597.730307][ T198] usb 3-1: config 32 has an invalid interface number: 255 but max is 0 [ 597.730335][ T198] usb 3-1: config 32 has no interface number 0 [ 597.730419][ T198] usb 3-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 597.730470][ T198] usb 3-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 597.730496][ T198] usb 3-1: config 32 interface 255 has no altsetting 0 [ 597.730521][ T198] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 597.730553][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.812643][ T198] usb-storage 3-1:32.255: USB Mass Storage device detected [ 597.828488][ T198] usb-storage 3-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 597.978177][ T198] usb 3-1: USB disconnect, device number 63 [ 598.397233][ T5819] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 598.550287][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 598.552934][ T5819] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 598.552972][ T5819] usb 2-1: config 0 has no interface number 0 [ 598.553017][ T5819] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 598.560326][ T5819] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 598.560374][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.560393][ T5819] usb 2-1: Product: syz [ 598.560405][ T5819] usb 2-1: Manufacturer: syz [ 598.560417][ T5819] usb 2-1: SerialNumber: syz [ 598.582195][ T5819] usb 2-1: config 0 descriptor?? [ 598.583438][T19315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.821242][T19315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 599.025043][ T5819] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 599.025422][ T5819] asix 2-1:0.188: probe with driver asix failed with error -71 [ 599.111921][ T5819] usb 2-1: USB disconnect, device number 88 [ 599.730419][T19343] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6004'. [ 600.007385][ T5819] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 600.099516][T19361] binder: BC_ACQUIRE_RESULT not supported [ 600.099533][T19361] binder: 19357:19361 ioctl c0306201 2000000001c0 returned -22 [ 600.167285][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 600.168570][ T5819] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 600.170950][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.170976][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.170993][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.171030][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.171051][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.171072][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.179425][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.179452][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.179469][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.179508][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.179543][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.179565][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.188869][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.188896][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.188913][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.188956][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.188982][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.189003][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.191946][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.191975][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.191993][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.192034][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.192058][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.192080][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.263065][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.263104][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.263122][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.263167][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.263192][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.263218][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.264913][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.264937][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.264955][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.264995][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.265020][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.265041][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.266717][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.266740][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.266759][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.266799][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.266824][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.267202][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.268691][ T5819] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 600.268712][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.268745][ T5819] usb 3-1: config 0 has no interface number 0 [ 600.268785][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.268809][ T5819] usb 3-1: config 0 interface 14 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.268830][ T5819] usb 3-1: config 0 interface 14 has no altsetting 0 [ 600.268859][ T5819] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 600.268880][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.328156][ T5819] usb 3-1: config 0 descriptor?? [ 600.996461][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996493][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996514][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996536][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996557][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996579][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996602][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996622][ T5819] uclogic 0003:5543:0781.0065: unknown main item tag 0x0 [ 600.996642][ T5819] uclogic 0003:5543:0781.0065: unexpected long global item [ 600.997508][ T5819] uclogic 0003:5543:0781.0065: parse failed [ 600.997593][ T5819] uclogic 0003:5543:0781.0065: probe with driver uclogic failed with error -22 [ 601.149821][ T5819] usb 3-1: USB disconnect, device number 64 [ 601.330402][T19374] veth0: entered promiscuous mode [ 601.347978][T19371] veth0: left promiscuous mode [ 601.375573][T19376] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6013'. [ 601.375601][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6013'. [ 601.701193][T19383] bridge0: port 3(netdevsim0) entered blocking state [ 601.701560][T19383] bridge0: port 3(netdevsim0) entered disabled state [ 601.701828][T19383] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 601.762750][T19383] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 601.793473][T19383] bridge0: port 3(netdevsim0) entered blocking state [ 601.793682][T19383] bridge0: port 3(netdevsim0) entered forwarding state [ 602.739856][ T32] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 602.915280][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 602.917921][ T32] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 602.917950][ T32] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 602.917969][ T32] usb 5-1: config 0 has no interface number 0 [ 602.918010][ T32] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.918035][ T32] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 602.918060][ T32] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 602.920034][ T32] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 602.920061][ T32] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 602.920079][ T32] usb 5-1: Product: syz [ 602.920093][ T32] usb 5-1: Manufacturer: syz [ 602.940152][ T32] usb 5-1: config 0 descriptor?? [ 602.941171][T19419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 603.561511][T19455] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6048'. [ 603.657630][ T32] usb 5-1: USB disconnect, device number 48 [ 604.319781][T19481] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6059'. [ 604.607254][ T32] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 604.761421][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 604.800953][ T32] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 604.800972][ T32] usb 6-1: config 0 has no interface number 0 [ 604.805685][ T32] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 604.805716][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.805744][ T32] usb 6-1: Product: syz [ 604.805757][ T32] usb 6-1: Manufacturer: syz [ 604.805771][ T32] usb 6-1: SerialNumber: syz [ 604.815150][ T32] usb 6-1: config 0 descriptor?? [ 605.188003][T19518] CUSE: DEVNAME unspecified [ 605.749280][ T32] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 605.749313][ T32] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 605.763769][ T32] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 605.764064][ T32] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 605.822628][ T32] usb 6-1: USB disconnect, device number 30 [ 606.534276][T19544] netlink: 1232 bytes leftover after parsing attributes in process `syz.5.6088'. [ 607.453213][T19571] input: syz1 as /devices/virtual/input/input50 [ 608.548828][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'. [ 609.164058][T19646] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 609.267208][ T32] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 609.276935][T19650] sock: sock_set_timeout: `syz.5.6137' (pid 19650) tries to set negative timeout [ 609.419681][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.419735][ T32] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 609.419748][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.425824][ T32] usb 5-1: config 0 descriptor?? [ 609.486815][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 609.899382][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 610.087456][ T822] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 610.102313][ T32] pwc: recv_control_msg error -71 req 02 val 2c00 [ 610.102946][ T32] pwc: recv_control_msg error -71 req 04 val 1000 [ 610.105034][ T32] pwc: recv_control_msg error -71 req 04 val 1300 [ 610.105962][ T32] pwc: recv_control_msg error -71 req 04 val 1400 [ 610.106397][ T32] pwc: recv_control_msg error -71 req 02 val 2000 [ 610.106844][ T32] pwc: recv_control_msg error -71 req 02 val 2100 [ 610.121866][ T32] pwc: recv_control_msg error -71 req 04 val 1500 [ 610.122356][ T32] pwc: recv_control_msg error -71 req 02 val 2500 [ 610.122795][ T32] pwc: recv_control_msg error -71 req 02 val 2400 [ 610.123262][ T32] pwc: recv_control_msg error -71 req 02 val 2600 [ 610.123790][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 610.124232][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 610.124850][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 610.125310][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 610.216795][ T32] pwc: Registered as video103. [ 610.224526][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 610.241972][ T822] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 610.242001][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.242019][ T822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 610.246227][ T822] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 610.246256][ T822] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 610.246277][ T822] usb 2-1: Product: syz [ 610.246289][ T822] usb 2-1: Manufacturer: syz [ 610.256553][ T32] usb 5-1: USB disconnect, device number 49 [ 610.590076][T19665] netlink: 672 bytes leftover after parsing attributes in process `syz.1.6143'. [ 610.590585][T19670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input52 [ 610.597565][ T198] usb 2-1: USB disconnect, device number 89 [ 611.753526][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6162'. [ 612.089038][T19701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.171361][T19703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.778587][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6167'. [ 613.877231][ T822] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 614.042576][ T822] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 614.042607][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.042626][ T822] usb 2-1: Product: syz [ 614.042639][ T822] usb 2-1: Manufacturer: syz [ 614.042653][ T822] usb 2-1: SerialNumber: syz [ 614.097633][ T822] usb 2-1: config 0 descriptor?? [ 614.126809][ T822] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 614.126832][ T822] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 614.126887][ T822] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 614.322747][T15082] usb 2-1: USB disconnect, device number 90 [ 614.877181][T15082] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 615.032675][T15082] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 615.032705][T15082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.032725][T15082] usb 2-1: Product: syz [ 615.032739][T15082] usb 2-1: Manufacturer: syz [ 615.032753][T15082] usb 2-1: SerialNumber: syz [ 615.047755][T15082] usb 2-1: config 0 descriptor?? [ 615.069194][T15082] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 615.069218][T15082] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 615.069285][T15082] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 615.254227][T15082] usb 2-1: USB disconnect, device number 91 [ 615.828988][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 616.391369][T19789] tun0: tun_chr_ioctl cmd 1074025676 [ 616.391387][T19789] tun0: owner set to 0 [ 617.400292][T19810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.482601][ T56] tipc: Subscription rejected, illegal request [ 617.929123][T19825] input: syz1 as /devices/virtual/input/input53 [ 617.929167][T19825] input: failed to attach handler leds to device input53, error: -6 [ 618.677354][T15082] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 618.838821][T15082] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 618.838853][T15082] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 618.838877][T15082] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 618.860851][T15082] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 618.860881][T15082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.860900][T15082] usb 5-1: Product: syz [ 618.860913][T15082] usb 5-1: Manufacturer: syz [ 618.860927][T15082] usb 5-1: SerialNumber: syz [ 618.882621][T15082] usb 5-1: config 0 descriptor?? [ 618.885425][T19850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.886079][T19850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.904664][T15082] usb 5-1: ucan: probing device on interface #0 [ 619.121132][T19869] Invalid logical block size (-2147483648) [ 619.122781][T19867] Flush: task=syz.1.6234[19867] dev=loop3 state=2 [ 619.375271][T19867] Teardown: task=syz.1.6234[19867] dev=loop3 state=2 [ 619.561350][T15082] ucan 5-1:0.0 can0: registered device [ 619.577176][ T822] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 619.727303][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 619.728001][T15082] ucan 5-1:0.0 can0: firmware string: unknown [ 619.769225][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.769281][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.769307][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.769327][ T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 619.769347][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.792598][ T822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.792626][ T822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.792643][ T822] usb 3-1: Manufacturer: syz [ 619.874755][T15082] usb 5-1: USB disconnect, device number 50 [ 619.907377][ T822] usb 3-1: config 0 descriptor?? [ 620.217193][ T822] rc_core: IR keymap rc-hauppauge not found [ 620.217214][ T822] Registered IR keymap rc-empty [ 620.217352][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.238560][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.262793][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 620.266237][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54 [ 620.315692][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.327770][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.348372][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.369749][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.387670][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.407235][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.428028][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.447619][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.467638][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.487294][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.581054][ T822] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 620.581080][ T822] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 620.600817][ T822] usb 3-1: USB disconnect, device number 65 [ 620.697437][ T5819] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 620.954627][ T5819] usb 6-1: config 246 has an invalid interface number: 166 but max is 0 [ 620.954656][ T5819] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 620.954675][ T5819] usb 6-1: config 246 has no interface number 0 [ 620.954703][ T5819] usb 6-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 620.954717][ T5819] usb 6-1: config 246 interface 166 has no altsetting 0 [ 621.028922][ T5819] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 621.029057][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.029071][ T5819] usb 6-1: Product: syz [ 621.029079][ T5819] usb 6-1: Manufacturer: syz [ 621.029086][ T5819] usb 6-1: SerialNumber: syz [ 621.694226][ T5819] usb 6-1: Limiting number of CPorts to U8_MAX [ 621.925476][ T5819] usb 6-1: Not enough endpoints found in device, aborting! [ 621.935490][T19916] input: syz1 as /devices/virtual/input/input55 [ 622.067088][ T822] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 622.164317][ T5819] usb 6-1: USB disconnect, device number 31 [ 622.340602][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 622.344736][ T822] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 622.344766][ T822] usb 2-1: config 0 has no interface number 0 [ 622.344814][ T822] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.344841][ T822] usb 2-1: config 0 interface 85 has no altsetting 0 [ 622.362109][ T822] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 622.362141][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.362160][ T822] usb 2-1: Product: syz [ 622.362173][ T822] usb 2-1: Manufacturer: syz [ 622.362187][ T822] usb 2-1: SerialNumber: syz [ 622.387663][ T822] usb 2-1: config 0 descriptor?? [ 622.778864][T19926] overlayfs: upper fs does not support tmpfile. [ 622.871138][ T822] appletouch 2-1:0.85: Geyser mode initialized. [ 622.874434][ T822] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input56 [ 623.319320][ T822] usb 2-1: USB disconnect, device number 92 [ 623.319401][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 623.448884][T19942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6265'. [ 623.516121][ T822] appletouch 2-1:0.85: input: appletouch disconnected [ 624.000630][T19965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.576825][T19988] binder: 19987:19988 ioctl 4018620d 0 returned -22 [ 624.613963][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.057201][ T822] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 625.280411][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.280473][ T822] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.280497][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.289079][ T822] usb 3-1: config 0 descriptor?? [ 625.319411][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 625.720336][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 625.926150][ T822] pwc: recv_control_msg error -71 req 02 val 2c00 [ 625.926662][ T822] pwc: recv_control_msg error -71 req 04 val 1000 [ 625.927683][ T822] pwc: recv_control_msg error -71 req 04 val 1300 [ 625.928180][ T822] pwc: recv_control_msg error -71 req 04 val 1400 [ 625.928621][ T822] pwc: recv_control_msg error -71 req 02 val 2000 [ 625.929057][ T822] pwc: recv_control_msg error -71 req 02 val 2100 [ 625.929487][ T822] pwc: recv_control_msg error -71 req 04 val 1500 [ 625.932358][ T822] pwc: recv_control_msg error -71 req 02 val 2500 [ 625.932850][ T822] pwc: recv_control_msg error -71 req 02 val 2400 [ 625.933312][ T822] pwc: recv_control_msg error -71 req 02 val 2600 [ 625.933765][ T822] pwc: recv_control_msg error -71 req 02 val 2900 [ 625.934201][ T822] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.935977][ T822] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.939194][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.164831][ T822] pwc: Registered as video103. [ 626.180455][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 626.213916][ T822] usb 3-1: USB disconnect, device number 66 [ 626.833615][T20039] loop5: detected capacity change from 0 to 7 [ 626.976520][T20039] Dev loop5: unable to read RDB block 7 [ 626.976543][T20039] loop5: AHDI p1 [ 626.976562][T20039] loop5: partition table partially beyond EOD, truncated [ 627.052573][T15314] Flush: task=udevd[15314] dev=loop5 state=2 [ 627.094133][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6314'. [ 627.127835][T15314] Teardown: task=udevd[15314] dev=loop5 state=2 [ 627.344906][T20058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6320'. [ 628.156734][T20089] tmpfs: Invalid uid '0x00000000ffffffff' [ 628.266272][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6337'. [ 628.454076][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6340'. [ 628.603114][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6343'. [ 628.695799][T20110] cifs: Unknown parameter '' [ 628.757265][ T5699] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 628.920214][ T5699] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.920242][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.920260][ T5699] usb 5-1: config 0 has no interface number 0 [ 628.920300][ T5699] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.920324][ T5699] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.920345][ T5699] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.920385][ T5699] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 628.920408][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.948862][ T5699] usb 5-1: config 0 descriptor?? [ 628.977301][ T822] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 629.072512][T20124] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6352'. [ 629.149926][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 629.161175][ T822] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.161205][ T822] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.161228][ T822] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.161251][ T822] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.161292][ T822] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.161315][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.465775][ T822] usb 6-1: GET_CAPABILITIES returned 0 [ 629.465821][ T822] usbtmc 6-1:16.0: can't read capabilities [ 629.469407][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469444][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469471][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469495][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469520][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469544][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469571][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469594][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469618][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.469644][ T5699] holtek_mouse 0003:04D9:A04A.0066: unknown main item tag 0x0 [ 629.565140][ T5699] holtek_mouse 0003:04D9:A04A.0066: item fetching failed at offset 124/235 [ 629.578463][ T5699] holtek_mouse 0003:04D9:A04A.0066: hid parse failed: -22 [ 629.578533][ T5699] holtek_mouse 0003:04D9:A04A.0066: probe with driver holtek_mouse failed with error -22 [ 629.666014][ T5819] usb 6-1: USB disconnect, device number 32 [ 629.673678][ T5699] usb 5-1: USB disconnect, device number 51 [ 630.015589][T20138] tmpfs: Unknown parameter 'nr_inode' [ 630.410280][T20158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6368'. [ 630.627197][ T5699] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 631.910003][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6388'. [ 632.951050][T20236] comedi: No check for data length of config insn id 558759938 is implemented [ 632.951072][T20236] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 632.951167][T20236] comedi: Assuming n=65536 is correct [ 633.333772][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6409'. [ 633.479020][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6410'. [ 634.047436][ T198] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 634.198357][ T198] usb 3-1: Using ep0 maxpacket: 16 [ 634.203497][ T198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.203526][ T198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.212258][ T198] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.212289][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.212306][ T198] usb 3-1: Product: syz [ 634.212319][ T198] usb 3-1: Manufacturer: syz [ 634.212331][ T198] usb 3-1: SerialNumber: syz [ 634.267178][ T198] usb 3-1: 0:2 : does not exist [ 634.453750][ T198] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 634.737306][ T198] usb 3-1: USB disconnect, device number 67 [ 635.195359][T15314] udevd[15314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.567531][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6424'. [ 636.066523][T20312] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6434'. [ 636.258364][T20315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.029896][T20339] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6445'. [ 637.328589][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6451'. [ 638.494836][T20400] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6473'. [ 638.868742][T15082] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 638.955895][T20422] fuse: Bad value for 'fd' [ 638.963945][T20422] fuse: Bad value for 'fd' [ 639.021384][T15082] usb 3-1: Using ep0 maxpacket: 16 [ 639.024238][T15082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.024270][T15082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.024292][T15082] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 639.024333][T15082] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 639.024385][T15082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.043051][T15082] usb 3-1: config 0 descriptor?? [ 639.237260][ T5819] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 639.387270][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 639.389609][ T5819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 639.389650][ T5819] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 639.389698][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.389724][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.389743][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.389761][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.389784][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 639.389810][ T5819] usb 6-1: config 168 interface 0 has no altsetting 0 [ 639.394106][ T5819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 639.394147][ T5819] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 639.394186][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.394212][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.394236][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.394261][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.394286][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 639.394312][ T5819] usb 6-1: config 168 interface 0 has no altsetting 0 [ 639.397977][ T5819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 639.398018][ T5819] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 639.398056][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.398084][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.398107][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.398132][ T5819] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.398158][ T5819] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 639.398184][ T5819] usb 6-1: config 168 interface 0 has no altsetting 0 [ 639.409938][ T5819] usb 6-1: string descriptor 0 read error: -22 [ 639.410071][ T5819] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 639.410108][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.437750][ T5819] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 639.725760][T15082] hid_parser_main: 109 callbacks suppressed [ 639.725787][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725816][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725839][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725861][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725885][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725910][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725935][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725959][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.725984][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.726006][T15082] waterforce 0003:1044:7A4D.0067: unknown main item tag 0x0 [ 639.761151][ T5819] usb 6-1: USB disconnect, device number 34 [ 639.850752][T15082] waterforce 0003:1044:7A4D.0067: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 639.907772][T15082] waterforce 0003:1044:7A4D.0067: fw version request failed with -38 [ 639.932910][T15082] usb 3-1: USB disconnect, device number 68 [ 640.307984][T20439] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6498'. [ 643.167686][T15082] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 643.327206][T15082] usb 6-1: Using ep0 maxpacket: 32 [ 643.329534][T15082] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 643.336792][T15082] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 643.336821][T15082] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 643.336840][T15082] usb 6-1: Product: syz [ 643.336852][T15082] usb 6-1: Manufacturer: syz [ 643.336864][T15082] usb 6-1: SerialNumber: syz [ 643.397784][T15082] usb 6-1: config 0 descriptor?? [ 643.401496][T20517] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.716357][ T822] usb 6-1: USB disconnect, device number 35 [ 645.080588][T20577] sctp: [Deprecated]: syz.1.6554 (pid 20577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.080588][T20577] Use struct sctp_sack_info instead [ 645.085522][ T12] kworker/u8:0 (12) used greatest stack depth: 17712 bytes left [ 645.667186][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 645.817130][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 645.820081][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 645.820120][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 645.820163][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 645.820186][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 645.820209][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.889669][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 645.889763][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 645.889783][ T9] usb 6-1: Product: syz [ 645.889833][ T9] usb 6-1: Manufacturer: syz [ 645.889846][ T9] usb 6-1: SerialNumber: syz [ 645.936740][ T9] usb 6-1: config 0 descriptor?? [ 645.946654][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 645.989101][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 646.239478][ T9] usb 6-1: USB disconnect, device number 36 [ 646.284609][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 646.868492][T12615] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.705831][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6581'. [ 648.005481][T20648] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 648.005481][T20648] program syz.4.6586 not setting count and/or reply_len properly [ 649.052384][T13820] ================================================================== [ 649.052401][T13820] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 649.052581][T13820] Read of size 1 at addr ffff8880277607e8 by task syz.2.3496/13820 [ 649.052598][T13820] [ 649.052648][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.2.3496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.052672][T13820] Tainted: [L]=SOFTLOCKUP [ 649.052678][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.052696][T13820] Call Trace: [ 649.052733][T13820] [ 649.052795][T13820] dump_stack_lvl+0xe8/0x150 [ 649.052874][T13820] print_address_description+0x55/0x1e0 [ 649.052899][T13820] ? rt_spin_lock+0x83/0x400 [ 649.052953][T13820] print_report+0x58/0x70 [ 649.052979][T13820] kasan_report+0x117/0x150 [ 649.053007][T13820] ? rt_spin_lock+0x83/0x400 [ 649.053032][T13820] __kasan_check_byte+0x2a/0x40 [ 649.053056][T13820] lock_acquire+0x7d/0x350 [ 649.053074][T13820] ? lock_acquire+0x115/0x350 [ 649.053092][T13820] rt_spin_lock+0x83/0x400 [ 649.053114][T13820] ? bt_accept_unlink+0x7d/0x2f0 [ 649.053134][T13820] ? __pfx_rt_spin_lock+0x10/0x10 [ 649.053156][T13820] ? rcu_is_watching+0x15/0xb0 [ 649.053177][T13820] ? __local_bh_disable_ip+0x3c/0x420 [ 649.053200][T13820] ? bt_accept_unlink+0x61/0x2f0 [ 649.053220][T13820] bt_accept_unlink+0x7d/0x2f0 [ 649.053240][T13820] ? bt_accept_unlink+0x61/0x2f0 [ 649.053261][T13820] l2cap_sock_teardown_cb+0x17e/0x490 [ 649.053291][T13820] l2cap_chan_del+0x98/0x600 [ 649.053310][T13820] l2cap_conn_del+0x2f2/0x520 [ 649.053333][T13820] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 649.053358][T13820] hci_conn_hash_flush+0x105/0x260 [ 649.053387][T13820] hci_dev_close_sync+0x7fc/0x10a0 [ 649.053412][T13820] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 649.053433][T13820] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.053450][T13820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.053468][T13820] ? mutex_lock_nested+0x152/0x1d0 [ 649.053489][T13820] ? hci_unregister_dev+0x22a/0x5b0 [ 649.053509][T13820] hci_unregister_dev+0x232/0x5b0 [ 649.053537][T13820] vhci_release+0x170/0x1c0 [ 649.053562][T13820] ? __pfx_vhci_release+0x10/0x10 [ 649.053584][T13820] __fput+0x42a/0xa80 [ 649.053611][T13820] task_work_run+0x1d9/0x270 [ 649.053640][T13820] ? __pfx_task_work_run+0x10/0x10 [ 649.053662][T13820] ? do_exit+0x735/0x2360 [ 649.053684][T13820] ? kmem_cache_free+0x187/0x6c0 [ 649.053708][T13820] ? put_net+0x191/0x260 [ 649.053725][T13820] ? do_exit+0x735/0x2360 [ 649.053749][T13820] do_exit+0x73a/0x2360 [ 649.053773][T13820] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.053791][T13820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.053813][T13820] ? __pfx_do_exit+0x10/0x10 [ 649.053836][T13820] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 649.053866][T13820] ? rt_spin_unlock+0x157/0x200 [ 649.053892][T13820] do_group_exit+0x22d/0x2f0 [ 649.053917][T13820] ? rt_spin_unlock+0x163/0x200 [ 649.053943][T13820] get_signal+0x121b/0x12c0 [ 649.053971][T13820] arch_do_signal_or_restart+0xbb/0x860 [ 649.053994][T13820] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 649.054020][T13820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.054045][T13820] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 649.054076][T13820] exit_to_user_mode_loop+0x104/0x730 [ 649.054093][T13820] ? rcu_is_watching+0x15/0xb0 [ 649.054114][T13820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.054134][T13820] do_syscall_64+0x353/0x580 [ 649.054153][T13820] ? trace_irq_disable+0x3b/0x140 [ 649.054171][T13820] ? clear_bhb_loop+0x40/0x90 [ 649.054192][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.054219][T13820] RIP: 0033:0x7f18e2e0e68e [ 649.054284][T13820] Code: Unable to access opcode bytes at 0x7f18e2e0e664. [ 649.054326][T13820] RSP: 002b:00007f18e10a5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 649.054376][T13820] RAX: fffffffffffffdfc RBX: 00007f18e10a66c0 RCX: 00007f18e2e0e68e [ 649.054391][T13820] RDX: 00007f18e10a5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.054403][T13820] RBP: 00007f18e2ee3e6f R08: 0000000000000000 R09: 0000000000000000 [ 649.054416][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.054427][T13820] R13: 00007f18e30d6038 R14: 00007f18e30d5fa0 R15: 00007ffd1dedb7d8 [ 649.054449][T13820] [ 649.054456][T13820] [ 649.054465][T13820] Allocated by task 4963: [ 649.054505][T13820] kasan_save_track+0x3e/0x80 [ 649.054537][T13820] __kasan_kmalloc+0x93/0xb0 [ 649.054562][T13820] __kmalloc_noprof+0x415/0x790 [ 649.054584][T13820] tomoyo_realpath_from_path+0xef/0x640 [ 649.054605][T13820] tomoyo_path_perm+0x283/0x560 [ 649.054629][T13820] security_inode_getattr+0x121/0x2d0 [ 649.054650][T13820] __x64_sys_newfstat+0x133/0x270 [ 649.054675][T13820] do_syscall_64+0x174/0x580 [ 649.054693][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.054711][T13820] [ 649.054715][T13820] Freed by task 4963: [ 649.054724][T13820] kasan_save_track+0x3e/0x80 [ 649.054744][T13820] kasan_save_free_info+0x40/0x50 [ 649.054762][T13820] __kasan_slab_free+0x5c/0x80 [ 649.054784][T13820] kfree+0x1c5/0x6c0 [ 649.054803][T13820] tomoyo_realpath_from_path+0x605/0x640 [ 649.054822][T13820] tomoyo_path_perm+0x283/0x560 [ 649.054846][T13820] security_inode_getattr+0x121/0x2d0 [ 649.054867][T13820] __x64_sys_newfstat+0x133/0x270 [ 649.054887][T13820] do_syscall_64+0x174/0x580 [ 649.054904][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.054921][T13820] [ 649.054925][T13820] The buggy address belongs to the object at ffff888027760000 [ 649.054925][T13820] which belongs to the cache kmalloc-4k of size 4096 [ 649.054982][T13820] The buggy address is located 2024 bytes inside of [ 649.054982][T13820] freed 4096-byte region [ffff888027760000, ffff888027761000) [ 649.055003][T13820] [ 649.055008][T13820] The buggy address belongs to the physical page: [ 649.055024][T13820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27760 [ 649.055043][T13820] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 649.055058][T13820] flags: 0x80000000000040(head|node=0|zone=1) [ 649.055079][T13820] page_type: f5(slab) [ 649.055096][T13820] raw: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 649.055111][T13820] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 649.055128][T13820] head: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 649.055143][T13820] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 649.055160][T13820] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 649.055176][T13820] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 649.055185][T13820] page dumped because: kasan: bad access detected [ 649.055199][T13820] page_owner tracks the page as allocated [ 649.055207][T13820] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6613048892 [ 649.055235][T13820] post_alloc_hook+0x1f9/0x250 [ 649.055258][T13820] get_page_from_freelist+0x264c/0x26c0 [ 649.055284][T13820] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 649.055311][T13820] allocate_slab+0x7c/0x5e0 [ 649.055329][T13820] refill_objects+0x2d8/0x350 [ 649.055345][T13820] __pcs_replace_empty_main+0x330/0x690 [ 649.055362][T13820] __kmalloc_cache_noprof+0x467/0x670 [ 649.055385][T13820] kobject_uevent_env+0x28c/0x9e0 [ 649.055407][T13820] disk_uevent+0x297/0x470 [ 649.055431][T13820] add_disk_fwnode+0x387/0x4b0 [ 649.055453][T13820] brd_alloc+0x5ba/0x7c0 [ 649.055477][T13820] brd_init+0xc1/0x120 [ 649.055545][T13820] do_one_initcall+0x250/0x870 [ 649.055566][T13820] do_initcall_level+0x10a/0x1a0 [ 649.055599][T13820] do_initcalls+0x59/0xa0 [ 649.055615][T13820] kernel_init_freeable+0x29d/0x3e0 [ 649.055633][T13820] page_owner free stack trace missing [ 649.055639][T13820] [ 649.055644][T13820] Memory state around the buggy address: [ 649.055652][T13820] ffff888027760680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 649.055664][T13820] ffff888027760700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 649.055676][T13820] >ffff888027760780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 649.055686][T13820] ^ [ 649.055699][T13820] ffff888027760800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 649.055711][T13820] ffff888027760880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 649.055721][T13820] ================================================================== [ 649.056738][T13820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 649.056760][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.2.3496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.056789][T13820] Tainted: [L]=SOFTLOCKUP [ 649.056796][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.056809][T13820] Call Trace: [ 649.056817][T13820] [ 649.056825][T13820] vpanic+0x607/0xb50 [ 649.056850][T13820] ? __pfx_vpanic+0x10/0x10 [ 649.056872][T13820] ? __pfx___schedule+0x10/0x10 [ 649.056903][T13820] panic+0xc5/0xd0 [ 649.056921][T13820] ? __pfx_panic+0x10/0x10 [ 649.056939][T13820] ? preempt_schedule_thunk+0x16/0x40 [ 649.056961][T13820] ? rt_spin_lock+0x83/0x400 [ 649.056985][T13820] check_panic_on_warn+0x89/0xb0 [ 649.057014][T13820] ? rt_spin_lock+0x83/0x400 [ 649.057036][T13820] end_report+0x73/0x170 [ 649.057063][T13820] ? rt_spin_lock+0x83/0x400 [ 649.057085][T13820] kasan_report+0x128/0x150 [ 649.057112][T13820] ? rt_spin_lock+0x83/0x400 [ 649.057139][T13820] __kasan_check_byte+0x2a/0x40 [ 649.057167][T13820] lock_acquire+0x7d/0x350 [ 649.057186][T13820] ? lock_acquire+0x115/0x350 [ 649.057205][T13820] rt_spin_lock+0x83/0x400 [ 649.057230][T13820] ? bt_accept_unlink+0x7d/0x2f0 [ 649.057253][T13820] ? __pfx_rt_spin_lock+0x10/0x10 [ 649.057278][T13820] ? rcu_is_watching+0x15/0xb0 [ 649.057298][T13820] ? __local_bh_disable_ip+0x3c/0x420 [ 649.057319][T13820] ? bt_accept_unlink+0x61/0x2f0 [ 649.057340][T13820] bt_accept_unlink+0x7d/0x2f0 [ 649.057362][T13820] ? bt_accept_unlink+0x61/0x2f0 [ 649.057382][T13820] l2cap_sock_teardown_cb+0x17e/0x490 [ 649.057413][T13820] l2cap_chan_del+0x98/0x600 [ 649.057432][T13820] l2cap_conn_del+0x2f2/0x520 [ 649.057458][T13820] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 649.057483][T13820] hci_conn_hash_flush+0x105/0x260 [ 649.057512][T13820] hci_dev_close_sync+0x7fc/0x10a0 [ 649.057548][T13820] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 649.057571][T13820] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.057591][T13820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.057611][T13820] ? mutex_lock_nested+0x152/0x1d0 [ 649.057635][T13820] ? hci_unregister_dev+0x22a/0x5b0 [ 649.057654][T13820] hci_unregister_dev+0x232/0x5b0 [ 649.057672][T13820] vhci_release+0x170/0x1c0 [ 649.057695][T13820] ? __pfx_vhci_release+0x10/0x10 [ 649.057716][T13820] __fput+0x42a/0xa80 [ 649.057745][T13820] task_work_run+0x1d9/0x270 [ 649.057773][T13820] ? __pfx_task_work_run+0x10/0x10 [ 649.057798][T13820] ? do_exit+0x735/0x2360 [ 649.057821][T13820] ? kmem_cache_free+0x187/0x6c0 [ 649.057846][T13820] ? put_net+0x191/0x260 [ 649.057863][T13820] ? do_exit+0x735/0x2360 [ 649.057888][T13820] do_exit+0x73a/0x2360 [ 649.057912][T13820] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.057931][T13820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.057952][T13820] ? __pfx_do_exit+0x10/0x10 [ 649.057976][T13820] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 649.058004][T13820] ? rt_spin_unlock+0x157/0x200 [ 649.058029][T13820] do_group_exit+0x22d/0x2f0 [ 649.058054][T13820] ? rt_spin_unlock+0x163/0x200 [ 649.058077][T13820] get_signal+0x121b/0x12c0 [ 649.058103][T13820] arch_do_signal_or_restart+0xbb/0x860 [ 649.058125][T13820] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 649.058152][T13820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.058178][T13820] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 649.058207][T13820] exit_to_user_mode_loop+0x104/0x730 [ 649.058224][T13820] ? rcu_is_watching+0x15/0xb0 [ 649.058244][T13820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.058264][T13820] do_syscall_64+0x353/0x580 [ 649.058282][T13820] ? trace_irq_disable+0x3b/0x140 [ 649.058299][T13820] ? clear_bhb_loop+0x40/0x90 [ 649.058320][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.058340][T13820] RIP: 0033:0x7f18e2e0e68e [ 649.058356][T13820] Code: Unable to access opcode bytes at 0x7f18e2e0e664. [ 649.058366][T13820] RSP: 002b:00007f18e10a5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 649.058386][T13820] RAX: fffffffffffffdfc RBX: 00007f18e10a66c0 RCX: 00007f18e2e0e68e [ 649.058402][T13820] RDX: 00007f18e10a5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.058414][T13820] RBP: 00007f18e2ee3e6f R08: 0000000000000000 R09: 0000000000000000 [ 649.058427][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.058440][T13820] R13: 00007f18e30d6038 R14: 00007f18e30d5fa0 R15: 00007ffd1dedb7d8 [ 649.058461][T13820] [ 649.058810][T13820] Kernel Offset: disabled