last executing test programs: 7m43.028307955s ago: executing program 3 (id=3861): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1ac}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5a8}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 7m42.700837167s ago: executing program 3 (id=3864): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4004af07, &(0x7f0000000040)) 7m42.170310921s ago: executing program 3 (id=3873): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7m40.937404949s ago: executing program 3 (id=3891): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x44) 7m40.726932813s ago: executing program 3 (id=3895): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/144, 0x90}, {&(0x7f0000000540)=""/230, 0xe6}], 0x2) 7m36.929653524s ago: executing program 3 (id=3916): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 7m36.620216219s ago: executing program 32 (id=3916): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 2m32.079743974s ago: executing program 2 (id=7503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) 2m31.823645793s ago: executing program 2 (id=7507): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) fcntl$setlease(r0, 0x400, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f00000001c0)=""/178, 0xb2) 2m31.442353102s ago: executing program 2 (id=7512): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00003fe000/0x3000)=nil, 0x3000) munlock(&(0x7f0000142000/0x4000)=nil, 0x4000) mremap(&(0x7f0000d56000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 2m29.959730963s ago: executing program 2 (id=7529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) 2m29.761657543s ago: executing program 2 (id=7533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x2) write(r0, &(0x7f0000000080)='e:my_eprobe sc', 0xe) 2m29.615405619s ago: executing program 2 (id=7536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000500)="83771a7d748868b5f5c86155277b287efcccfe8a0f421b11", 0x18}], 0x1}}], 0x1, 0x4000080) 2m14.406143614s ago: executing program 33 (id=7536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000500)="83771a7d748868b5f5c86155277b287efcccfe8a0f421b11", 0x18}], 0x1}}], 0x1, 0x4000080) 5.836429778s ago: executing program 6 (id=9137): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000009c0)="3e12", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 5.618860463s ago: executing program 6 (id=9141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4109, 0x100d}], 0x1, 0x2ffc, 0x0, 0x9) 4.813733119s ago: executing program 1 (id=9150): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 4.752067274s ago: executing program 0 (id=9152): r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) 4.626972659s ago: executing program 1 (id=9155): socket$inet(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) 3.90709921s ago: executing program 5 (id=9160): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) fcntl$setlease(r0, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.681441834s ago: executing program 6 (id=9162): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0xa2, 0x8, r2, 0x0, 0x2, 0xfcd9, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3250d3e3fdb97b5cfc6041d48ffac2f489dacbf28aad3c14fb87bf8a9af78aef1f1aefe8622e9605c7bef173b96e2ba8731c5f92ed95de177724d8a802ac59e63353ad2fd8890463e96d8241965b9d56c0c2cf7ec19d7006800"/206, 0x4}) 3.472383996s ago: executing program 5 (id=9164): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) 2.822895412s ago: executing program 0 (id=9168): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) syz_emit_ethernet(0x4a, 0x0, 0x0) 2.816177074s ago: executing program 5 (id=9169): add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 2.754560395s ago: executing program 6 (id=9171): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 2.582469019s ago: executing program 0 (id=9172): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfff7ffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xffffffff, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x6, 0x2, 0x87a9, 0x1, 0x5, 0xfffffffffffffffb, 0x7fff, 0x684d275, 0x1000000}) 2.412310859s ago: executing program 6 (id=9174): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4c, 0x0, 0x1}, 0x28) unshare(0x26020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 2.381243177s ago: executing program 0 (id=9176): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.217809075s ago: executing program 1 (id=9177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x216}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x20008, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x10000000ab}) 2.182210773s ago: executing program 5 (id=9179): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.07896804s ago: executing program 6 (id=9180): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x20, 0x13}, 0x0, 0x0}) 2.078024169s ago: executing program 0 (id=9181): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xb, 0xf5, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000004c0)={0x40, 0x2, 0x29, {0x29, 0xa, "83efb930f0187ff0478fa22a61a54607b71ea9e442359c479c37f525cde38bf4fd6ef4366b4847"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.004091608s ago: executing program 1 (id=9182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd80}}, 0x20044881) 1.789846697s ago: executing program 1 (id=9185): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.159325371s ago: executing program 4 (id=9189): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x28001, 0x0, 0xb46, 0x200000000002, 0x7, 0x8, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = dup(r0) read(r1, 0x0, 0x0) 1.15776538s ago: executing program 5 (id=9190): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20) 889.87055ms ago: executing program 4 (id=9191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 638.549727ms ago: executing program 1 (id=9192): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x300) 536.051586ms ago: executing program 4 (id=9193): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x202) 525.774231ms ago: executing program 5 (id=9194): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 221.494411ms ago: executing program 4 (id=9195): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0x8416, 0x1, 0x1, 0x123, 0x0, r3}, 0x0, 0x4, &(0x7f0000001d00)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r0, '\x00', {0x2, 0x73, 0x0, 0x0}}, 0x0) 163.437344ms ago: executing program 4 (id=9196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 89.751396ms ago: executing program 0 (id=9197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) write(r0, &(0x7f0000000400)='!non_existent_event:mod:syz_mod_123\n', 0x24) 0s ago: executing program 4 (id=9198): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@local, 0x0, 0x100, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xffffffffffff9b91, 0x2000000, 0x1, 0xfffffffffffffffd}, {0xbad, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0xdd0}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) kernel console output (not intermixed with test programs): etdevsim1 netdevsim1: renamed from eth1 [ 612.517443][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.543312][T18481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.789045][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.843697][T18481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.212508][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.690496][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 613.726627][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 613.757485][T19373] netlink: 'syz.0.5974': attribute type 12 has an invalid length. [ 613.880470][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 613.881353][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.882935][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.882985][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.927602][ T9] usb 6-1: config 0 descriptor?? [ 614.430688][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 614.456826][ T9] usb 6-1: USB disconnect, device number 9 [ 614.496555][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.732848][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.834843][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.834988][T14824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.874270][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.874430][T14824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.887550][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 617.887571][ T37] audit: type=1400 audit(1786362054.294:444): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=19479 comm="syz.2.6008" name="file1" dev="tmpfs" ino=6070 [ 618.241678][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.252900][T18481] veth0_vlan: entered promiscuous mode [ 619.337489][T18481] veth1_vlan: entered promiscuous mode [ 619.913544][T18481] veth0_macvtap: entered promiscuous mode [ 619.954844][T18481] veth1_macvtap: entered promiscuous mode [ 620.073728][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.306097][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.347517][T19551] ÿ [ 620.968652][ T3068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.044213][T14824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.044792][T14824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.045284][T14824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.665703][T19567] block2mtd: error: cannot open device /dev [ 621.851527][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.851550][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.122906][T14824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.123046][T14824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.378495][T19584] usb usb7: check_ctrlrecip: process 19584 (syz.2.6055) requesting ep 01 but needs 81 [ 622.378532][T19584] usb usb7: usbfs: process 19584 (syz.2.6055) did not claim interface 0 before use [ 622.604573][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 622.868385][T19594] input: syz1 as /devices/virtual/input/input24 [ 623.581671][ T1292] nvmet: connect request for invalid subsystem t! [ 623.584714][T19580] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 624.538566][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.538635][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.146026][T19688] pimreg: tun_chr_ioctl cmd 1074025677 [ 626.146218][T19688] pimreg: linktype set to 804 [ 626.686850][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6110'. [ 627.483910][T19728] binder: 19727:19728 unknown command 0 [ 627.483935][T19728] binder: 19727:19728 ioctl c0306201 2000000004c0 returned -22 [ 628.110626][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 628.262541][ T5876] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.264602][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.264637][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.264662][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.264707][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.301897][ T5876] usb 6-1: config 0 descriptor?? [ 628.413541][T19754] sg_write: data in/out 437760/136 bytes for SCSI command 0x0-- guessing data in; [ 628.413541][T19754] program syz.1.6133 not setting count and/or reply_len properly [ 628.786448][ T5876] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 628.787796][ T5876] plantronics 0003:047F:FFFF.002E: nested delimiters [ 628.787814][ T5876] plantronics 0003:047F:FFFF.002E: item 0 4 2 10 parsing failed [ 628.794594][ T5876] plantronics 0003:047F:FFFF.002E: parse failed [ 628.794704][ T5876] plantronics 0003:047F:FFFF.002E: probe with driver plantronics failed with error -22 [ 628.998887][ T5876] usb 6-1: USB disconnect, device number 10 [ 629.854457][T19788] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6149'. [ 631.002033][ T197] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 631.172296][ T197] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 631.175214][ T197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.175274][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.223366][ T197] usb 3-1: config 0 descriptor?? [ 631.244061][ T197] pwc: Askey VC010 type 2 USB webcam detected. [ 631.457956][ T197] pwc: send_video_command error -71 [ 631.458493][ T197] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 631.458630][ T197] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 631.489034][ T197] usb 3-1: USB disconnect, device number 26 [ 635.856224][T19953] scsi_dev_info_list_add_str: bad dev info string 'endo€â*r' 'm' '' [ 636.600927][ T5604] Bluetooth: hci2: command 0x0405 tx timeout [ 636.842963][ T5604] Bluetooth: hci4: command 0x0405 tx timeout [ 638.944852][T20044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.094391][ T12] wlan1: Trigger new scan to find an IBSS to join [ 639.170490][ T197] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 639.325990][ T197] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 639.327947][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.327982][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.328022][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.387415][ T197] usb 3-1: config 0 descriptor?? [ 639.889720][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 640.237155][ T197] hid-led 0003:27B8:01ED.002F: probe with driver hid-led failed with error -71 [ 640.392295][ T197] usb 3-1: USB disconnect, device number 27 [ 640.620844][T14658] wlan1: Creating new IBSS network, BSSID 72:40:7c:57:94:a9 [ 641.082404][T20091] sit0: entered promiscuous mode [ 641.147122][T20091] netlink: 'syz.0.6290': attribute type 1 has an invalid length. [ 641.147149][T20091] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6290'. [ 641.488783][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6295'. [ 641.488819][T20102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6295'. [ 643.752822][T20174] pimreg: tun_chr_ioctl cmd 2147767506 [ 643.958916][T20184] jffs2: notice: (20184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 645.160466][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 645.331271][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 645.332153][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 645.336060][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.336120][ T10] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.336149][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.336178][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 645.336214][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.412816][ T10] usb 3-1: config 0 descriptor?? [ 646.013634][ T10] hid_parser_main: 179 callbacks suppressed [ 646.013665][ T10] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 646.013695][ T10] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 646.013720][ T10] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 646.013747][ T10] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 646.013772][ T10] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 646.019715][ T10] corsair-cpro 0003:1B1C:0C10.0030: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 646.217716][ C0] usb 3-1: input irq status -75 received [ 646.348800][ T10] corsair-cpro 0003:1B1C:0C10.0030: probe with driver corsair-cpro failed with error -38 [ 646.433375][ T10] usb 3-1: USB disconnect, device number 28 [ 646.982268][T20273] batadv_slave_1: entered promiscuous mode [ 646.984392][T20271] batadv_slave_1: left promiscuous mode [ 647.100978][T20275] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6374'. [ 647.195281][ T5600] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 647.341800][ T5600] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.343374][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.343402][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.346431][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.346459][ T5600] usb 2-1: SerialNumber: syz [ 647.645879][ T5600] usb 2-1: 0:2 : does not exist [ 647.947948][ T5600] usb 2-1: USB disconnect, device number 34 [ 648.138656][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.650459][T14658] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.650512][T14658] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.650551][T14658] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.650590][T14658] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.135736][T20439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6453'. [ 652.240461][ T5711] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 652.402880][ T5711] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 652.404829][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.404888][ T5711] usb 1-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 652.404939][ T5711] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 652.436140][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.436182][ T5711] usb 1-1: Product: syz [ 652.436195][ T5711] usb 1-1: Manufacturer: syz [ 652.436208][ T5711] usb 1-1: SerialNumber: syz [ 653.176927][ C0] usb 1-1: received EP1 urb->status = -71 [ 653.264648][ T5711] input: as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 654.227644][T20497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6480'. [ 654.390895][ T5711] usb 1-1: USB disconnect, device number 39 [ 655.508904][ T37] audit: type=1326 audit(1786362091.974:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.519840][ T37] audit: type=1326 audit(1786362091.974:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.526764][ T37] audit: type=1326 audit(1786362091.974:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.526821][ T37] audit: type=1326 audit(1786362091.984:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.526862][ T37] audit: type=1326 audit(1786362091.984:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.526904][ T37] audit: type=1326 audit(1786362091.984:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.527477][ T37] audit: type=1326 audit(1786362091.984:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.527529][ T37] audit: type=1326 audit(1786362091.984:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.528288][ T37] audit: type=1326 audit(1786362091.984:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 655.528335][ T37] audit: type=1326 audit(1786362091.984:454): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=20534 comm="syz.2.6498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ddd6e0d9 code=0x7ffc0000 [ 656.553384][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory ð©Û¨±Ï’§œX´•TTûŠ1Ì׉€]ÊsT Pá ‘…Ð4g%OÒÇgðq†f6vïÛ [ 656.810624][ T5711] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 656.971626][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 656.976533][ T5711] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 656.978760][ T5711] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.978790][ T5711] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.978814][ T5711] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.029411][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.029438][ T5711] usb 1-1: Product: syz [ 657.029452][ T5711] usb 1-1: Manufacturer: syz [ 657.029465][ T5711] usb 1-1: SerialNumber: syz [ 657.039580][ T5711] usb 1-1: config 0 descriptor?? [ 657.269391][T20586] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6522'. [ 657.499963][ T5711] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 657.735160][ T5711] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 657.764607][ T5711] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 657.890548][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 657.981828][ T5711] usb 1-1: USB disconnect, device number 40 [ 658.050507][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 658.052795][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 658.055467][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 658.055501][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 658.055525][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.055549][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.055595][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.370641][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 658.370700][ T31] usbtmc 2-1:16.0: can't read capabilities [ 658.702343][ T31] usb 2-1: USB disconnect, device number 35 [ 660.434092][T20688] program syz.2.6568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.548455][T20724] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 662.203671][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6593'. [ 662.208943][T20744] loop1: detected capacity change from 0 to 107 [ 663.411810][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 663.418591][T20778] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 663.631413][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 663.656840][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 663.673047][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 663.673078][ T10] usb 3-1: config 2 has no interface number 0 [ 663.673128][ T10] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 663.673166][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 663.691991][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 663.692018][ T10] usb 3-1: Product: syz [ 663.692032][ T10] usb 3-1: Manufacturer: syz [ 663.692045][ T10] usb 3-1: SerialNumber: syz [ 663.729299][T20768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 663.998158][T20768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 664.672086][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 664.672376][ T10] asix 3-1:2.88: probe with driver asix failed with error -71 [ 664.722198][ T10] usb 3-1: USB disconnect, device number 29 [ 664.726205][T20780] syz.1.6607 (20780) used greatest stack depth: 17344 bytes left [ 664.742373][T20794] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6617'. [ 665.351651][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6625'. [ 665.891505][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 666.051260][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 666.066564][ T10] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 666.068398][ T10] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 666.068428][ T10] usb 1-1: config 0 has no interface number 0 [ 666.068477][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 666.068499][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 666.068527][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 666.068555][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 666.068581][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 666.068607][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 666.068629][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 666.068661][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 666.068684][ T10] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.071926][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.071951][ T10] usb 1-1: Product: syz [ 666.071965][ T10] usb 1-1: Manufacturer: syz [ 666.071978][ T10] usb 1-1: SerialNumber: syz [ 666.079378][ T10] usb 1-1: config 0 descriptor?? [ 666.081472][T20819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 666.089588][ T10] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 666.089611][ T10] usb 1-1: couldn't find an output bulk endpoint. Bailing out. [ 666.409118][ T10] usb 1-1: USB disconnect, device number 41 [ 666.692526][T20847] netlink: 'syz.2.6643': attribute type 2 has an invalid length. [ 666.692551][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6643'. [ 667.090488][ T197] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 667.261768][ T197] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 667.263321][ T197] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 667.263381][ T197] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.263404][ T197] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.263427][ T197] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 667.268483][ T197] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 667.268543][ T197] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.268566][ T197] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.268589][ T197] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 667.272273][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.272298][ T197] usb 3-1: Product: syz [ 667.272311][ T197] usb 3-1: Manufacturer: syz [ 667.272325][ T197] usb 3-1: SerialNumber: syz [ 667.341065][ T197] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 667.542770][ T197] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 667.606389][ T197] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 667.675417][T20851] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 667.839812][ T5876] usb 3-1: USB disconnect, device number 30 [ 667.904127][ T5876] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 667.938956][ T5876] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 667.954124][ T5876] ti_usb_3410_5052 3-1:2.0: device disconnected [ 668.237389][T20880] usbcore.quirks: string doesn't fit in 127 chars. [ 668.601878][T20897] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6668'. [ 668.601926][T20897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6668'. [ 668.649881][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6669'. [ 669.325351][T20921] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6679'. [ 669.471713][T20925] unsupported nlmsg_type 40 [ 670.172620][T20957] kAFS: bad VL server IP address [ 670.389440][T20963] netlink: 'syz.5.6697': attribute type 1 has an invalid length. [ 670.623873][ T3068] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.905974][T20963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.219041][T20992] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6712'. [ 671.898145][ T197] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 672.064744][ T197] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 672.066511][ T197] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 672.066548][ T197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.066583][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.082666][ T197] usb 2-1: config 0 descriptor?? [ 672.083878][T21007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 672.531487][ T197] lenovo 0003:17EF:6062.0031: unknown main item tag 0x2 [ 672.531528][ T197] lenovo 0003:17EF:6062.0031: unknown main item tag 0x3 [ 672.531555][ T197] lenovo 0003:17EF:6062.0031: unknown main item tag 0x1 [ 672.531581][ T197] lenovo 0003:17EF:6062.0031: unknown main item tag 0x2 [ 672.778793][ T197] lenovo 0003:17EF:6062.0031: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 672.790687][ T197] usb 2-1: USB disconnect, device number 36 [ 673.161353][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.395910][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 673.395937][ T37] audit: type=1326 audit(1786362109.854:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21049 comm="syz.2.6740" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56ddd6e0d9 code=0x0 [ 673.460742][ T5711] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 673.611779][ T5711] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 673.613510][ T5711] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 673.712284][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.712317][ T5711] usb 6-1: Product: syz [ 673.712334][ T5711] usb 6-1: Manufacturer: syz [ 673.712349][ T5711] usb 6-1: SerialNumber: syz [ 673.730745][ T5711] usb 6-1: config 0 descriptor?? [ 673.759192][ T5711] ims_pcu 6-1:0.0: Zero length descriptor [ 673.759235][ T5711] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 673.958834][ T5876] usb 6-1: USB disconnect, device number 11 [ 674.120890][ T31] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 674.271253][ T31] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 674.276841][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.276914][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 674.276961][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.333761][ T31] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 674.355371][ T31] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 674.355493][ T31] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 674.377220][ T31] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 674.379735][ T31] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 674.379822][ T31] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 674.413828][ T31] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 674.866094][ T5876] usb 2-1: USB disconnect, device number 37 [ 674.893220][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 674.983450][T21089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 674.984808][ T5876] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 675.029925][ T5876] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 675.040418][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 675.041420][ T31] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 675.048091][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.048121][ T31] usb 3-1: Product: syz [ 675.048135][ T31] usb 3-1: Manufacturer: syz [ 675.048151][ T31] usb 3-1: SerialNumber: syz [ 675.088162][ T5876] keyspan 2-1:1.0: device disconnected [ 675.711452][ T31] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 675.739637][ T31] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 675.740209][ T31] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 675.760909][ T31] usb 3-1: media controller created [ 675.792261][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.884621][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 675.947419][ T31] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 675.964308][ T31] usb 3-1: USB disconnect, device number 31 [ 677.013407][T21136] program syz.5.6780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.511346][ T37] audit: type=1326 audit(1786362114.964:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.515720][ T37] audit: type=1326 audit(1786362114.974:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570400][ T37] audit: type=1326 audit(1786362115.024:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570474][ T37] audit: type=1326 audit(1786362115.024:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570522][ T37] audit: type=1326 audit(1786362115.024:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570573][ T37] audit: type=1326 audit(1786362115.024:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570621][ T37] audit: type=1326 audit(1786362115.024:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.570670][ T37] audit: type=1326 audit(1786362115.024:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.581645][ T37] audit: type=1326 audit(1786362115.044:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 678.581866][ T37] audit: type=1326 audit(1786362115.044:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.1.6799" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 680.448889][T21236] program syz.2.6828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.660462][T21312] program syz.0.6864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.820655][T21316] autofs4:pid:21316:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.0), cmd(0xc018937b) [ 682.820689][T21316] autofs4:pid:21316:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 683.866315][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 683.866333][ T37] audit: type=1400 audit(1786362120.324:493): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=21356 comm="syz.1.6886" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 685.037778][T21403] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6906'. [ 685.065789][T21404] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6908'. [ 685.369292][ T37] audit: type=1400 audit(1786362121.824:494): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=21409 comm="syz.5.6911" dest=20000 netif=wpan0 [ 685.937116][T21427] loop5: detected capacity change from 0 to 3215 [ 685.966291][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.966384][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.410927][ T5600] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 686.475689][ T5918] Buffer I/O error on dev loop5, logical block 401, async page read [ 686.535839][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6928'. [ 686.571358][ T5600] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.572944][ T5600] usb 2-1: config 1 has an invalid interface number: 144 but max is 1 [ 686.572970][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.572989][ T5600] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 686.573010][ T5600] usb 2-1: config 1 has no interface number 2 [ 686.573083][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.573126][ T5600] usb 2-1: config 1 interface 144 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 686.573150][ T5600] usb 2-1: config 1 interface 144 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.573175][ T5600] usb 2-1: config 1 interface 144 has no altsetting 0 [ 686.576309][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.576336][ T5600] usb 2-1: Product: syz [ 686.576351][ T5600] usb 2-1: Manufacturer: syz [ 686.576365][ T5600] usb 2-1: SerialNumber: syz [ 686.723503][ T5600] usb 2-1: selecting invalid altsetting 1 [ 686.861801][T21451] program syz.5.6931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.146075][ T5600] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 687.146322][ T5600] cdc_ncm 2-1:1.0: bind() failure [ 687.184153][ T5600] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 687.184207][ T5600] cdc_ncm 2-1:1.1: bind() failure [ 687.519502][ T5876] usb 2-1: USB disconnect, device number 38 [ 687.536063][T21469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6940'. [ 687.626776][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6938'. [ 688.045999][T21483] tap0: tun_chr_ioctl cmd 1074025680 [ 689.558768][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 691.375153][ T37] audit: type=1326 audit(1786362127.834:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21571 comm="syz.5.6989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7fc00000 [ 691.930913][ T5600] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 692.170718][ T5600] usb 6-1: Using ep0 maxpacket: 8 [ 692.171630][ T5600] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 692.173395][ T5600] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 692.173445][ T5600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.223748][ T5600] usb 6-1: config 0 descriptor?? [ 692.576074][ T5600] usbhid 6-1:0.0: can't add hid device: -71 [ 692.576192][ T5600] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 692.599382][ T5600] usb 6-1: USB disconnect, device number 12 [ 693.419194][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 694.753540][T21700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7050'. [ 694.855787][ T31] kernel write not supported for file /uinput (pid: 31 comm: kworker/1:0) [ 695.248277][T21715] program syz.2.7056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.613953][T21761] 9p: Unknown uid 00000000004294967295 [ 697.780428][ T5876] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 697.972510][ T5876] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 697.975440][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.975499][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.975523][ T5876] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 697.975546][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.975591][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.923537][ T5876] gud 1-1:1.0: Failed to get connectors (error=-71) [ 698.923587][ T5876] gud 1-1:1.0: probe with driver gud failed with error -71 [ 698.978438][ T5876] usb 1-1: USB disconnect, device number 42 [ 699.920635][T21873] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7130'. [ 699.948816][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7132'. [ 700.586834][ T37] audit: type=1326 audit(1786362137.044:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617468][ T37] audit: type=1326 audit(1786362137.074:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617530][ T37] audit: type=1326 audit(1786362137.074:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617582][ T37] audit: type=1326 audit(1786362137.074:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617640][ T37] audit: type=1326 audit(1786362137.074:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617689][ T37] audit: type=1326 audit(1786362137.074:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617738][ T37] audit: type=1326 audit(1786362137.074:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 700.617790][ T37] audit: type=1326 audit(1786362137.074:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.1.7141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 701.758050][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 702.300768][ T5876] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 702.450685][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 702.455032][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.455104][ T5876] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 702.457890][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.457979][ T5876] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 702.458024][ T5876] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.517461][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.517493][ T5876] usb 2-1: Product: syz [ 702.517509][ T5876] usb 2-1: Manufacturer: syz [ 702.517523][ T5876] usb 2-1: SerialNumber: syz [ 702.813441][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7176'. [ 702.830418][ T5876] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 702.830950][ T5876] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 703.205308][ T5876] usb 2-1: 2:1 : can't get Cluster Descriptor [ 703.430204][ T5600] usb 2-1: USB disconnect, device number 39 [ 704.192202][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 704.343615][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 704.350961][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.350990][ T31] usb 3-1: Product: syz [ 704.351005][ T31] usb 3-1: Manufacturer: syz [ 704.351021][ T31] usb 3-1: SerialNumber: syz [ 704.567405][T22026] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 704.592557][T22026] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 704.821257][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 704.821325][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 705.026419][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 705.026485][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 705.081041][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 705.118714][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 705.124119][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 705.162514][ T31] usb 3-1: USB disconnect, device number 32 [ 705.350586][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 705.351606][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 705.352590][ T9] usb 1-1: config 0 has no interfaces? [ 705.359099][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.359129][ T9] usb 1-1: Product: syz [ 705.359144][ T9] usb 1-1: Manufacturer: syz [ 705.359160][ T9] usb 1-1: SerialNumber: syz [ 705.389696][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 705.389722][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 705.567375][T22058] program syz.1.7214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.644584][ T9] r8152-cfgselector 1-1: USB disconnect, device number 43 [ 706.273241][T22086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7229'. [ 706.337167][T22086] ip6gre3: entered promiscuous mode [ 706.337197][T22086] ip6gre3: entered allmulticast mode [ 706.410421][ T5600] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 706.562147][ T5600] usb 6-1: not running at top speed; connect to a high speed hub [ 706.562193][ T5600] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 706.567619][ T5600] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.600869][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.600899][ T5600] usb 6-1: Product: syz [ 706.600915][ T5600] usb 6-1: Manufacturer: syz [ 706.600932][ T5600] usb 6-1: SerialNumber: syz [ 706.680074][ T5600] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 706.688810][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 706.688900][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 706.708568][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 706.725375][ T5600] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 706.736894][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 706.755625][ T5600] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 706.767155][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 706.788217][ T5600] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 706.800454][ T5600] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 706.803629][ T5600] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 707.455825][ T31] usb 6-1: USB disconnect, device number 13 [ 707.506492][ T31] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 707.567707][ T31] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 707.598347][ T31] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 707.638845][ T31] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 707.651873][ T31] keyspan 6-1:1.0: device disconnected [ 708.685861][T22154] sd 0:0:1:0: PR command failed: 1026 [ 708.685914][T22154] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 708.685957][T22154] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 709.183547][T22163] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7263'. [ 710.430208][T22193] program syz.5.7275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.102587][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7285'. [ 711.289178][T22215] veth1_to_bond: entered allmulticast mode [ 711.299786][T22215] veth1_to_bond: left allmulticast mode [ 713.669820][T22292] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7322'. [ 713.728931][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7324'. [ 713.744459][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7324'. [ 713.957234][T22303] program syz.1.7328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.094567][T22338] tap0: tun_chr_ioctl cmd 1074025677 [ 715.094833][T22338] tap0: linktype set to 6 [ 715.548642][T22356] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 715.810542][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 715.970478][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 715.972489][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 715.973764][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.092246][ T10] usb 1-1: config 0 descriptor?? [ 716.105609][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 716.180492][ T5711] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 716.366804][T22358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.367533][T22358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.398287][ T10] usb 1-1: Detected FT232B [ 716.433698][ T5711] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 716.457443][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.563850][ T5711] usb 3-1: config 0 descriptor?? [ 716.603522][ T5711] cp210x 3-1:0.0: cp210x converter detected [ 716.650391][ T5876] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 716.796575][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 716.829124][ T5876] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 716.841672][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.865692][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 716.887679][ T5876] usb 2-1: config 0 descriptor?? [ 716.958063][ T5876] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 716.988742][ T5711] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 716.989355][ T10] usb 1-1: USB disconnect, device number 44 [ 717.195947][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 717.197961][ T10] ftdi_sio 1-1:0.0: device disconnected [ 717.255459][ T5711] usb 3-1: cp210x converter now attached to ttyUSB0 [ 717.304695][ T5876] gp8psk: usb out operation failed. [ 717.304716][ T5876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 717.304772][ T5876] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 717.359676][ T5876] usb 2-1: USB disconnect, device number 40 [ 717.405243][ T5711] usb 3-1: USB disconnect, device number 33 [ 717.482537][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 717.690967][ T5711] cp210x 3-1:0.0: device disconnected [ 719.870405][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 720.023325][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.027932][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.027963][ T31] usb 1-1: Product: syz [ 720.027978][ T31] usb 1-1: Manufacturer: syz [ 720.027992][ T31] usb 1-1: SerialNumber: syz [ 720.156457][ T5600] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 721.103244][ T5709] usb 1-1: USB disconnect, device number 45 [ 721.480726][ T5600] usb 1-1: Service connection timeout for: 256 [ 721.480755][ T5600] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 721.604562][ T5600] ath9k_htc: Failed to initialize the device [ 721.606287][ T5709] usb 1-1: ath9k_htc: USB layer deinitialized [ 723.804415][T22574] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7456'. [ 724.476775][ T37] audit: type=1400 audit(1786362160.934:504): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22592 comm="syz.5.7464" dest=20000 netif=wpan0 [ 724.932319][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7472'. [ 725.249973][T22610] team1: entered promiscuous mode [ 725.250034][T22610] team1: entered allmulticast mode [ 725.268395][T22610] 8021q: adding VLAN 0 to HW filter on device team1 [ 725.709057][T22638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.419485][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7498'. [ 726.444083][T22664] netlink: 'syz.1.7498': attribute type 9 has an invalid length. [ 726.444099][T22664] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7498'. [ 728.157897][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7522'. [ 729.035223][T22742] sctp: [Deprecated]: syz.5.7532 (pid 22742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.035223][T22742] Use struct sctp_sack_info instead [ 729.723842][T22765] input: syz0 as /devices/virtual/input/input28 [ 731.580727][T22824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7571'. [ 731.930830][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7575'. [ 731.931604][T22832] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7575'. [ 732.390436][ T197] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 732.552925][ T197] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 732.560760][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.646930][ T197] usb 2-1: config 0 descriptor?? [ 732.669369][ T197] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 733.134675][ T197] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 733.407331][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7594'. [ 733.536965][ T197] gspca_cpia1: usb_control_msg 02, error -32 [ 733.554080][ T197] gspca_cpia1: usb_control_msg 02, error -71 [ 733.554104][ T197] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 733.690530][ T197] usb 2-1: USB disconnect, device number 41 [ 734.625586][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 735.808326][ T37] audit: type=1326 audit(1786362172.264:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22936 comm="syz.1.7621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x0 [ 736.458731][ T37] audit: type=1400 audit(1786362172.914:506): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22960 comm="syz.0.7631" dest=20000 netif=wpan0 [ 736.527157][ T37] audit: type=1400 audit(1786362172.974:507): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22960 comm="syz.0.7631" src=19999 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 737.082640][T22974] loop4: detected capacity change from 0 to 7 [ 737.112848][ T37] audit: type=1400 audit(1786362173.574:508): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22975 comm="syz.1.7637" dest=20000 netif=wpan0 [ 737.148406][T22974] Dev loop4: unable to read RDB block 7 [ 737.148452][T22974] loop4: unable to read partition table [ 737.148669][T22974] loop4: partition table beyond EOD, truncated [ 737.148708][T22974] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 737.530890][T22985] 9p: Bad value for 'rfdno' [ 738.088263][T22999] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7650'. [ 738.516282][ T37] audit: type=1326 audit(1786362174.974:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23006 comm="syz.1.7654" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba562fe0d9 code=0x0 [ 739.846699][T23041] syz_tun: entered allmulticast mode [ 740.035695][T23044] pim6reg: entered allmulticast mode [ 740.327263][T23050] gretap0: entered promiscuous mode [ 740.946478][T23066] sctp: [Deprecated]: syz.1.7679 (pid 23066) Use of int in max_burst socket option deprecated. [ 740.946478][T23066] Use struct sctp_assoc_value instead [ 741.004955][T23069] binder: 23065:23069 ioctl 541b 0 returned -22 [ 741.044944][T23072] tipc: Enabled bearer , priority 0 [ 741.520446][ T5600] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 741.673564][ T5600] usb 2-1: not running at top speed; connect to a high speed hub [ 741.673610][ T5600] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 741.675346][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 741.675381][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3964, setting to 64 [ 741.678856][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.678882][ T5600] usb 2-1: Product: syz [ 741.678897][ T5600] usb 2-1: Manufacturer: syz [ 741.678911][ T5600] usb 2-1: SerialNumber: syz [ 741.750737][T23078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 741.750951][T23078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 742.112084][ T5600] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 742.151848][ T5876] tipc: Node number set to 2886997007 [ 742.208081][ T5600] usb 2-1: USB disconnect, device number 42 [ 742.294851][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 742.317923][ T5600] usblp0: removed [ 743.452812][T23124] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 743.520155][ T37] audit: type=1400 audit(1786362179.984:510): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=23123 comm="syz.1.7706" saddr=172.20.20.187 src=20002 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 744.070690][T23128] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 745.141999][T14578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.184614][T14578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.189417][T14578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.196599][T14578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.215366][T14578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.593791][T23162] netlink: 'syz.1.7722': attribute type 2 has an invalid length. [ 745.593818][T23162] netlink: 'syz.1.7722': attribute type 2 has an invalid length. [ 745.728547][T23168] netlink: 'syz.5.7724': attribute type 39 has an invalid length. [ 745.728667][T23168] tipc: Resetting bearer [ 746.168760][T23168] syz_tun (unregistering): left allmulticast mode [ 746.172259][T23168] tipc: Disabling bearer [ 747.440498][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.440584][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.490889][ T5604] Bluetooth: hci5: command tx timeout [ 747.590645][ T5876] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 747.752259][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 747.753164][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 747.755885][ T5876] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.755918][ T5876] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.799779][ T5876] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 747.799810][ T5876] usb 1-1: Product: syz [ 747.799826][ T5876] usb 1-1: Manufacturer: syz [ 747.852820][ T5876] hub 1-1:4.0: USB hub found [ 748.127588][ T5876] hub 1-1:4.0: 2 ports detected [ 748.816536][ T5876] hub 1-1:4.0: set hub depth failed [ 748.827947][ T5876] usb 1-1: USB disconnect, device number 46 [ 749.222632][T23254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7760'. [ 749.267326][ T3068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.489069][T23255] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7760'. [ 749.570664][ T5604] Bluetooth: hci5: command tx timeout [ 751.247678][ T3068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.650391][ T5604] Bluetooth: hci5: command tx timeout [ 752.534741][ T3068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.328515][ T37] audit: type=1326 audit(1786362189.774:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.328597][ T37] audit: type=1326 audit(1786362189.784:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.328646][ T37] audit: type=1326 audit(1786362189.784:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.328695][ T37] audit: type=1326 audit(1786362189.784:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.328745][ T37] audit: type=1326 audit(1786362189.784:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.328794][ T37] audit: type=1326 audit(1786362189.784:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.329812][ T37] audit: type=1326 audit(1786362189.784:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.332773][ T37] audit: type=1326 audit(1786362189.784:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.335143][ T37] audit: type=1326 audit(1786362189.784:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.335193][ T37] audit: type=1326 audit(1786362189.794:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23358 comm="syz.5.7806" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab26d9e0d9 code=0x7ffc0000 [ 753.720388][ T5604] Bluetooth: hci5: command tx timeout [ 754.134494][ T3068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.211031][ T5711] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 756.372326][ T5711] usb 1-1: Using ep0 maxpacket: 16 [ 756.374259][ T5711] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 756.375869][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.375935][ T5711] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 756.375964][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 756.375988][ T5711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 756.376011][ T5711] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.381070][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.381098][ T5711] usb 1-1: Product: syz [ 756.381113][ T5711] usb 1-1: Manufacturer: syz [ 756.381128][ T5711] usb 1-1: SerialNumber: syz [ 756.426849][ T5711] usb 1-1: config 0 descriptor?? [ 756.466111][ T5711] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 756.734016][ T5600] usb 1-1: USB disconnect, device number 47 [ 757.061526][T23153] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.061674][T23153] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.061939][T23153] bridge_slave_0: entered allmulticast mode [ 757.067080][T23153] bridge_slave_0: entered promiscuous mode [ 757.098845][T23153] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.098967][T23153] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.099228][T23153] bridge_slave_1: entered allmulticast mode [ 757.147626][T23153] bridge_slave_1: entered promiscuous mode [ 757.850829][T23153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.002157][T23153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.352677][ T3068] batadv1: left allmulticast mode [ 758.352794][ T3068] batadv1: left promiscuous mode [ 758.370193][ T3068] bridge0: port 3(batadv1) entered disabled state [ 758.486419][T23464] netlink: 'syz.0.7850': attribute type 83 has an invalid length. [ 758.613244][ T3068] bridge_slave_1: left promiscuous mode [ 758.613568][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.884184][ T3068] bridge_slave_0: left allmulticast mode [ 758.884224][ T3068] bridge_slave_0: left promiscuous mode [ 758.884607][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.660787][ T197] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 759.936527][ T197] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.938397][ T197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.938425][ T197] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.940081][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 759.940107][ T197] usb 2-1: SerialNumber: syz [ 760.262787][ T197] usb 2-1: 0:2 : does not exist [ 760.584612][ T197] usb 2-1: USB disconnect, device number 43 [ 761.289413][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.403232][ T3068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.481225][ T3068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.526859][ T3068] bond0 (unregistering): Released all slaves [ 762.553080][ T3068] bond1 (unregistering): Released all slaves [ 763.963949][T23153] team0: Port device team_slave_0 added [ 763.972961][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.223907][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.229757][ T5709] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 764.421004][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 764.423117][ T5709] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 764.425054][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 764.425108][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.432191][ T5709] usb 1-1: config 0 descriptor?? [ 764.918414][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918452][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918479][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918504][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918530][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918558][ T5709] wacom 0003:056A:032C.0032: reserved main item tag 0xd [ 764.918584][ T5709] wacom 0003:056A:032C.0032: reserved main item tag 0xd [ 764.918610][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.918643][ T5709] wacom 0003:056A:032C.0032: unknown main item tag 0x0 [ 764.995135][T23609] netlink: 'syz.1.7915': attribute type 4 has an invalid length. [ 765.194970][ T5600] usb 1-1: USB disconnect, device number 48 [ 765.355093][T23153] team0: Port device team_slave_1 added [ 765.650405][ T1459] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 765.747532][T23153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.747551][T23153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.747580][T23153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.759392][T23153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.759409][T23153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.759435][T23153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.542703][T23651] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7933'. [ 766.908996][T23153] hsr_slave_0: entered promiscuous mode [ 766.915386][T23153] hsr_slave_1: entered promiscuous mode [ 766.923135][T23153] debugfs: 'hsr0' already exists in 'hsr' [ 766.923162][T23153] Cannot create hsr debugfs directory [ 767.374121][ T3068] hsr_slave_0: left promiscuous mode [ 767.412065][ T3068] hsr_slave_1: left promiscuous mode [ 767.416308][ T3068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.416337][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.471509][ T3068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.471539][ T3068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.630493][T23686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7945'. [ 767.872213][ T3068] veth1_vlan: left promiscuous mode [ 767.872444][ T3068] veth0_vlan: left promiscuous mode [ 768.243383][ T5709] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 768.400375][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 768.403431][ T5709] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 768.440751][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.475275][ T5709] usb 1-1: config 0 descriptor?? [ 768.499080][ T5709] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 769.120964][ T5709] gspca_vc032x: reg_w err -71 [ 769.121048][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121061][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121070][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121079][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121088][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121096][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121104][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121113][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121122][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121131][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121139][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121148][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121156][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121164][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121173][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121181][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121190][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121198][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.121207][ T5709] gspca_vc032x: Unknown sensor... [ 769.121289][ T5709] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 769.252638][ T5709] usb 1-1: USB disconnect, device number 49 [ 770.341634][ T3068] team0 (unregistering): Port device team_slave_1 removed [ 770.433039][ T3068] team0 (unregistering): Port device team_slave_0 removed [ 771.460072][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 772.493222][T23805] loop8: detected capacity change from 0 to 7 [ 772.856916][T23813] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8001'. [ 773.011372][T23805] Dev loop8: unable to read RDB block 7 [ 773.011429][T23805] loop8: unable to read partition table [ 773.011662][T23805] loop8: partition table beyond EOD, truncated [ 773.011698][T23805] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 774.590484][ T36] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 774.755708][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 774.755774][ T36] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 774.757292][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.757375][ T36] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 774.757436][ T36] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.823520][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.823559][ T36] usb 6-1: Product: syz [ 774.823574][ T36] usb 6-1: Manufacturer: syz [ 774.823589][ T36] usb 6-1: SerialNumber: syz [ 775.159229][ T36] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 775.309862][ T36] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 775.309918][ T36] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 775.309942][ T36] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 775.727675][ T36] usb 6-1: invalid uac2 rates [ 775.727884][ T36] usb 6-1: invalid uac2 rates [ 775.812270][ T36] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 775.812298][ T36] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 775.812319][ T36] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 775.936252][ T36] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 776.073708][ T36] usb 6-1: USB disconnect, device number 14 [ 776.295369][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.662465][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 778.100582][T23153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 778.365682][T23153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.379841][T23153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 778.498062][T23153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.516073][T23153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 778.674139][T23153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.680911][T23153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.826686][T23153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.208574][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 779.652708][T23978] type mismatch for 20000,20000 old: write-back new: write-combining [ 779.834282][T23153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.994269][T23153] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.008050][T23987] ref_ctr_offset mismatch. inode: 0xa68 offset: 0x0 ref_ctr_offset(old): 0x20040 ref_ctr_offset(new): 0x0 [ 780.083521][ T3068] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.083882][ T3068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.195751][ T3068] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.195883][ T3068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.080772][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 783.251966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.374144][T23153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.707986][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8095'. [ 783.708014][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8095'. [ 784.105019][T24095] gretap0: Device is already in use. [ 784.118498][T23153] veth0_vlan: entered promiscuous mode [ 784.213194][T23153] veth1_vlan: entered promiscuous mode [ 784.669685][T23153] veth0_macvtap: entered promiscuous mode [ 784.701885][T23153] veth1_macvtap: entered promiscuous mode [ 784.744322][T23153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.807100][T23153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.975611][ T2217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.976136][ T2217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.976621][ T2217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.977863][ T2217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.036601][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.036624][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.245254][ T1292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.245278][ T1292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.406180][T24150] loop2: detected capacity change from 0 to 7 [ 787.666818][T24150] Dev loop2: unable to read RDB block 7 [ 787.666890][T24150] loop2: unable to read partition table [ 787.667120][T24150] loop2: partition table beyond EOD, truncated [ 787.667158][T24150] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 788.350405][ T5600] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 788.510472][ T5600] usb 6-1: Using ep0 maxpacket: 32 [ 788.511516][ T5600] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 788.516968][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.516998][ T5600] usb 6-1: Product: syz [ 788.517013][ T5600] usb 6-1: Manufacturer: syz [ 788.517029][ T5600] usb 6-1: SerialNumber: syz [ 788.618909][ T5600] usb 6-1: config 0 descriptor?? [ 788.763022][T24175] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8131'. [ 788.953433][T24175] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 789.082608][ T5600] airspy 6-1:0.0: Board ID: 00 [ 789.082634][ T5600] airspy 6-1:0.0: Firmware version: [ 789.734276][ T5600] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 790.124698][ T5600] airspy 6-1:0.0: Registered as swradio24 [ 790.124722][ T5600] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 790.138203][ T5600] usb 6-1: USB disconnect, device number 15 [ 790.166137][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 790.166157][ T37] audit: type=1400 audit(1786362226.624:529): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24189 comm="syz.6.8140" src=1 dest=20000 netif=wpan0 [ 793.352436][ T31] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 793.544650][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 793.544717][ T31] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 793.568799][ T31] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 793.568830][ T31] usb 7-1: config 100 has no interface number 0 [ 793.568881][ T31] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 793.569006][ T31] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 793.569036][ T31] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 793.569064][ T31] usb 7-1: config 100 interface 173 has no altsetting 0 [ 793.588946][ T31] usb 7-1: string descriptor 0 read error: -22 [ 793.589174][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.625630][T24259] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 793.627390][T24259] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 793.690567][ T31] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 793.783701][ T31] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 794.010672][T24259] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 794.028810][ C0] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 794.204791][ T31] usb 7-1: USB disconnect, device number 2 [ 794.276232][ T31] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 794.284132][ T31] metro_usb 7-1:100.173: device disconnected [ 795.370356][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 795.541944][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 795.553366][ T9] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 795.553397][ T9] usb 7-1: Product: syz [ 795.553412][ T9] usb 7-1: SerialNumber: syz [ 795.601825][ T9] usb 7-1: config 0 descriptor?? [ 795.899960][ T9] hso 7-1:0.0: Failed to find BULK eps [ 796.077762][ T9] usb 7-1: USB disconnect, device number 3 [ 797.203864][ T36] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 797.361735][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 797.362633][ T36] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 797.364516][ T36] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.364541][ T36] usb 2-1: config 0 has no interface number 0 [ 797.376000][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.376028][ T36] usb 2-1: Product: syz [ 797.376042][ T36] usb 2-1: Manufacturer: syz [ 797.376057][ T36] usb 2-1: SerialNumber: syz [ 797.412453][ T36] usb 2-1: config 0 descriptor?? [ 797.449198][ T36] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 797.976375][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 798.159710][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 798.178311][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.178340][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.208359][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 798.208390][ T10] usb 1-1: SerialNumber: syz [ 798.472505][ T36] gspca_spca1528: reg_w err -71 [ 798.472679][ T36] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 798.489056][ T36] usb 2-1: USB disconnect, device number 44 [ 798.558334][ T10] usb 1-1: 0:2 : does not exist [ 798.840398][ T10] usb 1-1: USB disconnect, device number 50 [ 799.417647][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.670410][ T31] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 799.800958][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 799.848510][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.854606][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.854672][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 799.854707][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 799.854746][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.854767][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.869579][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.869606][ T31] usb 1-1: Product: syz [ 799.869619][ T31] usb 1-1: Manufacturer: syz [ 799.869633][ T31] usb 1-1: SerialNumber: syz [ 799.941378][T24425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 800.000433][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 800.001303][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 800.002134][ T10] usb 2-1: config 0 has no interfaces? [ 800.006504][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.006532][ T10] usb 2-1: Product: syz [ 800.006547][ T10] usb 2-1: Manufacturer: syz [ 800.006563][ T10] usb 2-1: SerialNumber: syz [ 800.074173][ T10] usb 2-1: config 0 descriptor?? [ 801.029424][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 801.082544][ T31] cdc_ncm 1-1:1.0: bind() failure [ 801.204872][ T31] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 801.246628][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 801.258926][ T31] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 801.302376][ T31] usb 1-1: USB disconnect, device number 51 [ 801.993466][T24466] input: syz0 as /devices/virtual/input/input29 [ 802.404533][ T31] usb 2-1: USB disconnect, device number 45 [ 804.163116][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 804.353952][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 804.373820][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.373856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.373880][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.373927][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.474065][ T9] usb 1-1: config 0 descriptor?? [ 804.910713][ T9] apple 0003:05AC:023F.0033: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 804.936530][ T9] input: HID 05ac:023f as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:023F.0033/input/input30 [ 805.446655][ T9] apple 0003:05AC:023F.0033: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:023f] on usb-dummy_hcd.0-1/input0 [ 805.474975][ T9] usb 1-1: USB disconnect, device number 52 [ 805.944094][T24551] vcan0: entered allmulticast mode [ 805.944970][T24551] pim6reg: left allmulticast mode [ 805.945118][T24551] vcan0: left allmulticast mode [ 805.967433][T24547] fido_id[24547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 808.138240][T24613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8298'. [ 808.844496][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.844580][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.079884][ T5710] kernel write not supported for file 3392/net/vlan/vlan1 (pid: 5710 comm: kworker/0:5) [ 810.190631][T24666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'. [ 810.190669][T24666] netlink: 'syz.1.8324': attribute type 30 has an invalid length. [ 810.277642][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'. [ 810.277679][T24671] netlink: 'syz.1.8324': attribute type 30 has an invalid length. [ 810.315011][T24666] vxlan1: entered promiscuous mode [ 810.315032][T24666] vxlan1: entered allmulticast mode [ 810.317772][T24669] input: syz0 as /devices/virtual/input/input31 [ 810.317806][T24669] input: failed to attach handler leds to device input31, error: -6 [ 810.657708][T24671] vxlan1: entered promiscuous mode [ 810.657738][T24671] vxlan1: entered allmulticast mode [ 810.921319][T14578] Bluetooth: hci2: command 0x0405 tx timeout [ 813.133719][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8373'. [ 813.740400][ T5600] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 813.890926][ T5710] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 813.891401][ T5600] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.893069][ T5600] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.893139][ T5600] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.893167][ T5600] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 813.893212][ T5600] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.893235][ T5600] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.901725][ T5600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.901753][ T5600] usb 7-1: Product: syz [ 813.901768][ T5600] usb 7-1: Manufacturer: syz [ 813.901784][ T5600] usb 7-1: SerialNumber: syz [ 814.020466][T24782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 814.060447][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 814.070000][ T5710] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 814.087923][ T5710] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 814.088005][ T5710] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 814.088030][ T5710] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 814.088056][ T5710] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 814.088080][ T5710] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.088125][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.379350][ T5710] usb 1-1: GET_CAPABILITIES returned 0 [ 814.379407][ T5710] usbtmc 1-1:16.0: can't read capabilities [ 814.650274][ T5710] usb 1-1: USB disconnect, device number 53 [ 815.112071][ T5600] cdc_ncm 7-1:1.0: bind() failure [ 815.165952][ T5600] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 815.167044][ T5600] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 815.214962][ T5600] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 815.232580][ T5600] usb 7-1: USB disconnect, device number 4 [ 815.704195][T24833] netlink: 'syz.5.8402': attribute type 8 has an invalid length. [ 816.275613][T24850] input: syz1 as /devices/virtual/input/input32 [ 816.800400][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 816.962814][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 816.964372][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.964430][ T9] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.964453][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 816.964498][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.081216][T24874] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 817.351152][ T9] cxacru 7-1:1.0: invalid response length to cm 0x90: 0 [ 817.351353][ T9] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 817.351918][ T9] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 817.558658][ T5600] usb 7-1: USB disconnect, device number 5 [ 819.963565][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8466'. [ 820.428779][T24979] bond1: Unable to set down delay as MII monitoring is disabled [ 820.502990][T24979] bond1 (unregistering): Released all slaves [ 820.696310][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 820.910168][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 820.953030][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 820.954534][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.954561][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.954586][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.960093][ T10] usb 1-1: config 0 descriptor?? [ 820.994408][ T10] hub 1-1:0.0: USB hub found [ 821.199600][ T10] hub 1-1:0.0: 1 port detected [ 821.413539][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 821.413991][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 821.415240][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 821.415821][ T10] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 821.415847][ T10] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 821.537347][T25005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8483'. [ 821.537375][T25005] netlink: 'syz.6.8483': attribute type 7 has an invalid length. [ 821.537383][T25005] netlink: 'syz.6.8483': attribute type 8 has an invalid length. [ 821.537390][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8483'. [ 821.577359][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 821.577446][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 821.602800][T25005] erspan0: entered promiscuous mode [ 821.630582][ T10] usb 1-1: USB disconnect, device number 54 [ 821.664164][T25005] gretap0: entered promiscuous mode [ 821.701923][T25005] erspan0: left promiscuous mode [ 821.741610][T25005] gretap0: left promiscuous mode [ 822.782832][T25039] cifs: Bad value for 'source' [ 822.953391][T25043] batadv_slave_1: entered promiscuous mode [ 823.054696][T25042] batadv_slave_1: left promiscuous mode [ 824.530439][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 824.683819][ T10] usb 7-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=ec.c8 [ 824.687034][ T10] usb 7-1: config 127 has an invalid interface number: 213 but max is 0 [ 824.687064][ T10] usb 7-1: config 127 has no interface number 0 [ 824.693991][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.694019][ T10] usb 7-1: Product: syz [ 824.694033][ T10] usb 7-1: Manufacturer: syz [ 824.694062][ T10] usb 7-1: SerialNumber: syz [ 824.993021][ T10] uvcvideo 7-1:127.213: Found multiple Units with ID 1 [ 824.995493][ T10] uvcvideo 7-1:127.213: Found UVC 0.00 device syz (174f:8a33) [ 824.995529][ T10] uvcvideo 7-1:127.213: No valid video chain found. [ 825.014143][ T10] usb 7-1: USB disconnect, device number 6 [ 825.674432][ T37] audit: type=1400 audit(1786362262.134:530): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=25118 comm="syz.1.8536" dest=20000 netif=wpan0 [ 825.890342][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 826.040549][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 826.041618][ T36] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 826.044872][ T36] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.044903][ T36] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.044925][ T36] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 826.044953][ T36] usb 7-1: config 0 interface 0 has no altsetting 0 [ 826.044985][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.121870][ T36] usb 7-1: config 0 descriptor?? [ 826.606623][ T36] hid (null): unknown global tag 0x5e [ 826.616457][ T36] hid (null): unknown global tag 0xd [ 826.616506][ T36] hid (null): global environment stack underflow [ 826.616531][ T36] hid (null): report_id 3016947009 is invalid [ 826.616556][ T36] hid (null): report_id 0 is invalid [ 826.845833][ T36] usb 7-1: USB disconnect, device number 7 [ 827.082410][T25142] syz.1.8545 (25142) used greatest stack depth: 16744 bytes left [ 828.498570][T25186] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8565'. [ 828.615429][T25183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8564'. [ 829.537473][T25215] jffs2: notice: (25215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 830.328180][ T5604] Bluetooth: hci5: Invalid connection link type handle 0x00c8 [ 830.605030][ T10] kernel read not supported for file /kmsg (pid: 10 comm: kworker/0:1) [ 832.146711][T25294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.170847][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 832.322146][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 832.323944][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 832.328795][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 832.328832][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 832.376255][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.376288][ T9] usb 7-1: Product: syz [ 832.376304][ T9] usb 7-1: Manufacturer: syz [ 832.376319][ T9] usb 7-1: SerialNumber: syz [ 832.412541][ T9] usb 7-1: config 0 descriptor?? [ 832.430147][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 832.430348][ T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 832.503344][ T37] audit: type=1326 audit(1786362268.964:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.503489][ T37] audit: type=1326 audit(1786362268.964:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.553558][ T37] audit: type=1326 audit(1786362269.014:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.556510][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8620'. [ 832.558999][ T37] audit: type=1326 audit(1786362269.014:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.563163][ T37] audit: type=1326 audit(1786362269.014:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.563228][ T37] audit: type=1326 audit(1786362269.014:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.570395][ T37] audit: type=1326 audit(1786362269.024:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.570450][ T37] audit: type=1326 audit(1786362269.024:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.570500][ T37] audit: type=1326 audit(1786362269.024:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 832.570549][ T37] audit: type=1326 audit(1786362269.024:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25305 comm="syz.1.8621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 833.066473][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 833.070930][ T9] em28xx 7-1:0.0: Config register raw data: 0x41 [ 833.385880][ T5600] usb 7-1: USB disconnect, device number 8 [ 833.388960][ T5600] em28xx 7-1:0.0: Disconnecting em28xx [ 833.534368][ T5600] em28xx 7-1:0.0: Freeing device [ 834.451670][T25363] batadv_slave_0: entered promiscuous mode [ 834.458861][T25363] batadv_slave_0: left promiscuous mode [ 835.016250][ T5600] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 835.180308][ T5600] usb 7-1: Using ep0 maxpacket: 16 [ 835.183161][ T5600] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 835.211938][ T5600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.211970][ T5600] usb 7-1: Product: syz [ 835.211985][ T5600] usb 7-1: Manufacturer: syz [ 835.212001][ T5600] usb 7-1: SerialNumber: syz [ 835.490959][ T5600] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 835.589585][ T5600] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 835.590051][ T5600] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 835.590108][ T5600] usb 7-1: media controller created [ 835.817652][ T5600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.984438][ T5600] zl10353_read_register: readreg error (reg=127, ret==-71) [ 836.359422][ T5600] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 836.399889][ T5600] usb 7-1: USB disconnect, device number 9 [ 837.600487][T25433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.600667][T25433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 838.135913][T25433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.137570][T25433] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 838.137722][T25433] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 838.613624][T25433] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 839.132628][T25486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8699'. [ 839.140384][ T36] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 839.292053][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 839.293956][ T36] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 839.296894][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 839.296938][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.357552][ T36] usb 1-1: config 0 descriptor?? [ 839.413748][T25496] netlink: 'syz.5.8705': attribute type 4 has an invalid length. [ 839.640542][ T5604] Bluetooth: hci4: command 0x0405 tx timeout [ 839.891087][ T36] hid (null): invalid report_count 23011 [ 839.891117][ T36] hid (null): unknown global tag 0xe [ 839.915526][ T36] kye 0003:0458:5012.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 839.916144][ T36] kye 0003:0458:5012.0035: unknown main item tag 0x2 [ 839.916175][ T36] kye 0003:0458:5012.0035: unknown main item tag 0x6 [ 839.916201][ T36] kye 0003:0458:5012.0035: invalid report_count 23011 [ 839.916219][ T36] kye 0003:0458:5012.0035: item 0 2 1 9 parsing failed [ 839.918784][ T36] kye 0003:0458:5012.0035: parse failed [ 839.918861][ T36] kye 0003:0458:5012.0035: probe with driver kye failed with error -22 [ 839.938089][T25508] binder: 25507:25508 ioctl c0306201 0 returned -14 [ 840.113903][ T10] usb 1-1: USB disconnect, device number 55 [ 840.200940][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 840.201250][ T5604] Bluetooth: hci2: command 0x0405 tx timeout [ 841.682095][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8730'. [ 841.730932][T14578] Bluetooth: hci4: command 0x0405 tx timeout [ 842.280424][T14578] Bluetooth: hci5: command 0x0c1a tx timeout [ 842.983254][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 842.983273][ T37] audit: type=1400 audit(1786362279.444:553): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=25584 comm="syz.1.8746" dest=20000 netif=wpan0 [ 843.947685][T25625] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8762'. [ 844.163037][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8763'. [ 844.163089][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8763'. [ 844.360328][T14578] Bluetooth: hci5: command 0x0c1a tx timeout [ 845.057269][T25662] netlink: 'syz.6.8779': attribute type 5 has an invalid length. [ 845.057292][T25662] netlink: 'syz.6.8779': attribute type 9 has an invalid length. [ 845.057307][T25662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8779'. [ 845.439712][T25673] jffs2: notice: (25673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 845.441147][T25674] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8785'. [ 845.760540][ T1235] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 845.932164][ T1235] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 845.933736][ T1235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.933794][ T1235] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 845.933822][ T1235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 845.933850][ T1235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 845.933875][ T1235] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 845.939466][ T1235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 845.939494][ T1235] usb 7-1: Product: syz [ 845.939509][ T1235] usb 7-1: Manufacturer: syz [ 845.939524][ T1235] usb 7-1: SerialNumber: syz [ 845.964286][ T1235] usb 7-1: config 0 descriptor?? [ 846.056281][T25693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8792'. [ 846.252168][ T1235] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 846.252197][ T1235] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 846.262881][T25695] TCP: TCP_TX_DELAY enabled [ 846.453763][ T1235] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 846.453793][ T1235] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 846.453816][ T1235] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 846.656395][ T1235] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 847.077146][ T1235] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 847.077570][ T1235] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 847.112785][ T1235] usb 7-1: USB disconnect, device number 10 [ 847.451671][ T37] audit: type=1400 audit(1786362283.904:554): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdir" requested=l pid=25726 comm="syz.1.8808" path="/410/file0" dev="tmpfs" ino=2134 [ 848.209593][T25753] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 848.402574][T25757] loop5: detected capacity change from 0 to 7 [ 848.442987][T25757] Dev loop5: unable to read RDB block 7 [ 848.443034][T25757] loop5: unable to read partition table [ 848.443265][T25757] loop5: partition table beyond EOD, truncated [ 848.446952][T25757] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 849.141460][T25779] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 849.310298][ T5710] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 849.460352][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 849.461771][ T5710] usb 1-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 849.463316][ T5710] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 849.463340][ T5710] usb 1-1: config 0 has no interface number 0 [ 849.463385][ T5710] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 849.463411][ T5710] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 849.463449][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.538840][ T5710] usb 1-1: config 0 descriptor?? [ 849.934829][T25801] loop4: detected capacity change from 0 to 7 [ 849.941524][ T5710] usb 1-1: USB disconnect, device number 56 [ 849.962205][T25801] Dev loop4: unable to read RDB block 7 [ 849.962251][T25801] loop4: unable to read partition table [ 849.962486][T25801] loop4: partition table beyond EOD, truncated [ 849.962506][T25801] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 850.119024][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.283162][ T10] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 850.445449][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 850.447302][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 850.447331][ T10] usb 7-1: config 0 has no interface number 0 [ 850.447379][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 850.447408][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 850.447452][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.511353][ T10] usb 7-1: config 0 descriptor?? [ 850.513916][T25804] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 850.566989][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 850.831223][ T10] usb 7-1: USB disconnect, device number 11 [ 850.950121][T25828] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8856'. [ 851.146736][T25836] program syz.5.8859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.367566][T25872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8874'. [ 852.603163][T25875] netlink: 'syz.0.8876': attribute type 3 has an invalid length. [ 853.660926][T25918] kvm: apic: phys broadcast and lowest prio [ 853.760403][ T5710] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 853.920820][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 853.922502][ T5710] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 853.924345][ T5710] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 853.924372][ T5710] usb 6-1: config 0 has no interface number 0 [ 853.960781][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.960809][ T5710] usb 6-1: Product: syz [ 853.960823][ T5710] usb 6-1: Manufacturer: syz [ 853.960837][ T5710] usb 6-1: SerialNumber: syz [ 853.999335][ T5710] usb 6-1: config 0 descriptor?? [ 854.018165][ T5710] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 854.363663][ T5710] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 854.384732][ T5710] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 854.661140][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 854.662321][ T5710] usb 6-1: USB disconnect, device number 16 [ 854.861697][ T5710] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 854.891229][ T5710] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 854.895835][ T5710] quatech2 6-1:0.51: device disconnected [ 855.083863][T25939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.357858][ T5709] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 855.510277][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 855.516774][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 855.516834][ T5709] usb 2-1: New USB device found, idVendor=0421, idProduct=002f, bcdDevice=cf.1b [ 855.516890][ T5709] usb 2-1: too many configurations: 120, using maximum allowed: 8 [ 855.540421][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.540452][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.540474][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.540508][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.541714][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.541740][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.541760][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.541794][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.552825][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.552858][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.552878][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.552914][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.588046][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.588079][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.588100][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.588141][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.646682][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.646725][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.646746][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.646784][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.690266][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.690296][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.690316][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.690347][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.734910][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.734941][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.734961][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.735016][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.799602][ T5709] usb 2-1: config 249 has an invalid interface number: 251 but max is 0 [ 855.799631][ T5709] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 855.799651][ T5709] usb 2-1: config 249 has no interface number 0 [ 855.799694][ T5709] usb 2-1: config 249 interface 251 has no altsetting 0 [ 855.866120][ T5709] usb 2-1: New USB device strings: Mfr=62, Product=150, SerialNumber=97 [ 855.866153][ T5709] usb 2-1: Product: syz [ 855.866168][ T5709] usb 2-1: Manufacturer: syz [ 855.866183][ T5709] usb 2-1: SerialNumber: syz [ 856.070401][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 856.187936][ T5709] rndis_host 2-1:249.251: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 856.189042][ T5709] cdc_acm 2-1:249.251: Zero length descriptor references [ 856.189085][ T5709] cdc_acm 2-1:249.251: probe with driver cdc_acm failed with error -22 [ 856.242125][ T5709] usb 2-1: USB disconnect, device number 46 [ 856.268534][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.269971][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.269996][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 856.270866][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 856.322218][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.322257][ T31] usb 6-1: Product: syz [ 856.322272][ T31] usb 6-1: Manufacturer: syz [ 856.322287][ T31] usb 6-1: SerialNumber: syz [ 856.369863][ T31] cdc_ncm 6-1:1.0: skipping garbage [ 856.369886][ T31] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 856.369901][ T31] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 856.369947][ T31] cdc_ncm 6-1:1.0: bind() failure [ 856.591113][ T31] usb 6-1: USB disconnect, device number 17 [ 857.136195][T25997] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8930'. [ 857.400830][T26005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8934'. [ 858.175351][T26029] bond0: entered promiscuous mode [ 858.175376][T26029] bond_slave_0: entered promiscuous mode [ 858.175694][T26029] bond_slave_1: entered promiscuous mode [ 858.226171][T26029] batadv0: entered promiscuous mode [ 858.401305][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8950'. [ 859.917309][T26093] random: crng reseeded on system resumption [ 860.560298][ T5709] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 860.721994][ T5709] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 860.726895][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 860.726949][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.767036][ T5709] usb 6-1: config 0 descriptor?? [ 860.767885][T26099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 861.282763][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282803][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282832][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282858][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282884][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282911][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282937][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282963][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.282990][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.283017][ T5709] logitech-djreceiver 0003:046D:C71F.0036: unknown main item tag 0x0 [ 861.435196][ T5709] usb 6-1: USB disconnect, device number 18 [ 861.840794][T26141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8998'. [ 864.940475][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 865.112004][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 865.112906][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 865.114524][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.154890][ T9] usb 6-1: config 0 descriptor?? [ 865.373707][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 865.422565][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 865.423716][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 865.423776][ T9] usb 6-1: media controller created [ 865.465832][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.626128][ T9] az6027: usb out operation failed. (-71) [ 865.626607][ T9] az6027: usb out operation failed. (-71) [ 865.626622][ T9] stb0899_attach: Driver disabled by Kconfig [ 865.626633][ T9] az6027: no front-end attached [ 865.626633][ T9] [ 865.627066][ T9] az6027: usb out operation failed. (-71) [ 865.627080][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 865.670735][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 865.770616][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 865.770642][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 865.774390][ T9] usb 6-1: USB disconnect, device number 19 [ 865.948712][T26232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 866.153989][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 868.997857][T26334] netlink: 'syz.1.9087': attribute type 10 has an invalid length. [ 868.997879][T26334] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9087'. [ 870.294608][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.294693][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.324842][T26370] netlink: 'syz.5.9101': attribute type 1 has an invalid length. [ 870.324866][T26370] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9101'. [ 870.591194][ T37] audit: type=1326 audit(1786362307.054:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26374 comm="syz.1.9106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 870.591251][ T37] audit: type=1326 audit(1786362307.054:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26374 comm="syz.1.9106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 870.594428][ T37] audit: type=1326 audit(1786362307.054:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26374 comm="syz.1.9106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 870.594481][ T37] audit: type=1326 audit(1786362307.054:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26374 comm="syz.1.9106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 870.616964][ T37] audit: type=1326 audit(1786362307.074:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26374 comm="syz.1.9106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba562fe0d9 code=0x7ffc0000 [ 871.527740][T14578] Bluetooth: hci5: unexpected event for opcode 0x203d [ 872.436135][T26372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 872.436272][T26372] block device autoloading is deprecated and will be removed. [ 872.674330][T26436] binder: 26433:26436 ioctl 4018620d 0 returned -22 [ 876.910379][ T1235] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 877.020316][ T5710] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 877.124972][ T1235] usb 7-1: Using ep0 maxpacket: 32 [ 877.127996][ T1235] usb 7-1: unable to get BOS descriptor or descriptor too short [ 877.128056][ T1235] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 877.129590][ T1235] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 877.129615][ T1235] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 877.129637][ T1235] usb 7-1: config 14 has no interface number 0 [ 877.129654][ T1235] usb 7-1: config 14 has no interface number 1 [ 877.129727][ T1235] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 877.129752][ T1235] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 877.129780][ T1235] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 877.129808][ T1235] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 877.129836][ T1235] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 877.129863][ T1235] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.129889][ T1235] usb 7-1: config 14 interface 57 has no altsetting 0 [ 877.129907][ T1235] usb 7-1: config 14 interface 228 has no altsetting 0 [ 877.138093][ T1235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.138122][ T1235] usb 7-1: Product: syz [ 877.138137][ T1235] usb 7-1: Manufacturer: syz [ 877.138152][ T1235] usb 7-1: SerialNumber: syz [ 877.199106][ T5710] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 877.266603][ T5710] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 877.266658][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 877.266687][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 877.266733][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.354503][ T5710] usb 1-1: config 0 descriptor?? [ 877.355891][T26540] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 877.670449][ T1235] legousbtower 7-1:14.57: interrupt endpoints not found [ 877.786930][ T5710] hid-thrustmaster 0003:044F:B65D.0037: ignoring exceeding usage max [ 877.802829][ T5710] hid_parser_main: 470 callbacks suppressed [ 877.802855][ T5710] hid-thrustmaster 0003:044F:B65D.0037: unknown main item tag 0x4 [ 877.847766][ T5710] hid-thrustmaster 0003:044F:B65D.0037: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 877.968601][ T5710] hid-thrustmaster 0003:044F:B65D.0037: setup data couldn't be sent [ 877.974612][ C0] hid-thrustmaster 0003:044F:B65D.0037: URB to get model id failed with error -71 [ 878.009652][ T5710] usb 1-1: USB disconnect, device number 57 [ 878.082581][ T1235] legousbtower 7-1:14.228: get version request failed: -121 [ 878.082775][ T1235] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121 [ 878.162393][T26561] fido_id[26561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 878.364262][ T1235] usb 7-1: USB disconnect, device number 12 [ 878.755593][T26575] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 878.755622][T26575] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 878.755645][T26575] CPU: 0 UID: 0 PID: 26575 Comm: syz.0.9197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 878.755676][T26575] Tainted: [L]=SOFTLOCKUP [ 878.755685][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.755697][T26575] RIP: 0010:strcmp+0x24/0xc0 [ 878.755795][T26575] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 bb 00 00 00 00 00 fc ff df 45 31 f6 4a 8d 04 37 48 89 c1 48 c1 e9 03 <0f> b6 0c 19 84 c9 75 28 42 0f b6 2c 37 4a 8d 04 36 48 89 c1 48 c1 [ 878.755815][T26575] RSP: 0018:ffffc9000db8fa58 EFLAGS: 00010246 [ 878.755837][T26575] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 878.755853][T26575] RDX: 0000000000000002 RSI: ffff888035f40e01 RDI: 0000000000000000 [ 878.755868][T26575] RBP: ffff888035f40e01 R08: 0000000000000000 R09: 0000000000000000 [ 878.755882][T26575] R10: dffffc0000000000 R11: fffffbfff1f5e967 R12: ffffffff8e228ab0 [ 878.755899][T26575] R13: ffffffff8e228ab0 R14: 0000000000000000 R15: ffff88803e0f5418 [ 878.755916][T26575] FS: 00007fa7c78366c0(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 878.755936][T26575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.755951][T26575] CR2: 000000110c381412 CR3: 0000000061b0c000 CR4: 00000000003526f0 [ 878.755972][T26575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.755986][T26575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 878.756001][T26575] Call Trace: [ 878.756009][T26575] [ 878.756019][T26575] __ftrace_set_clr_event_nolock+0x828/0xb80 [ 878.756073][T26575] ftrace_set_clr_event+0x3d5/0x5c0 [ 878.756105][T26575] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 878.756141][T26575] ftrace_event_write+0x201/0x2b0 [ 878.756162][T26575] ? vfs_write+0x231/0xbb0 [ 878.756260][T26575] ? __pfx_ftrace_event_write+0x10/0x10 [ 878.756287][T26575] ? __pfx_ftrace_event_write+0x10/0x10 [ 878.756307][T26575] vfs_write+0x29f/0xbb0 [ 878.756336][T26575] ? __pfx_vfs_write+0x10/0x10 [ 878.756362][T26575] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 878.756396][T26575] ? lockdep_hardirqs_on+0x7a/0x110 [ 878.756427][T26575] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 878.756457][T26575] ? mutex_lock_nested+0x152/0x1d0 [ 878.756480][T26575] ? fdget_pos+0x252/0x320 [ 878.756529][T26575] ksys_write+0x156/0x270 [ 878.756554][T26575] ? __pfx_ksys_write+0x10/0x10 [ 878.756582][T26575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.756607][T26575] do_syscall_64+0x174/0x580 [ 878.756638][T26575] ? trace_irq_disable+0x3b/0x140 [ 878.756670][T26575] ? clear_bhb_loop+0x70/0xc0 [ 878.756696][T26575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.756717][T26575] RIP: 0033:0x7fa7c95de0d9 [ 878.756735][T26575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.756752][T26575] RSP: 002b:00007fa7c7836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 878.756773][T26575] RAX: ffffffffffffffda RBX: 00007fa7c9865fa0 RCX: 00007fa7c95de0d9 [ 878.756788][T26575] RDX: 0000000000000024 RSI: 0000200000000400 RDI: 0000000000000003 [ 878.756802][T26575] RBP: 00007fa7c9675024 R08: 0000000000000000 R09: 0000000000000000 [ 878.756815][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.756827][T26575] R13: 00007fa7c9866038 R14: 00007fa7c9865fa0 R15: 00007ffffc1165d8 [ 878.756850][T26575] [ 878.756857][T26575] Modules linked in: [ 878.756897][T26575] ---[ end trace 0000000000000000 ]--- [ 878.759109][T26575] RIP: 0010:strcmp+0x24/0xc0 [ 878.759136][T26575] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 bb 00 00 00 00 00 fc ff df 45 31 f6 4a 8d 04 37 48 89 c1 48 c1 e9 03 <0f> b6 0c 19 84 c9 75 28 42 0f b6 2c 37 4a 8d 04 36 48 89 c1 48 c1 [ 878.759154][T26575] RSP: 0018:ffffc9000db8fa58 EFLAGS: 00010246 [ 878.759174][T26575] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 878.759188][T26575] RDX: 0000000000000002 RSI: ffff888035f40e01 RDI: 0000000000000000 [ 878.759201][T26575] RBP: ffff888035f40e01 R08: 0000000000000000 R09: 0000000000000000 [ 878.759213][T26575] R10: dffffc0000000000 R11: fffffbfff1f5e967 R12: ffffffff8e228ab0 [ 878.759228][T26575] R13: ffffffff8e228ab0 R14: 0000000000000000 R15: ffff88803e0f5418 [ 878.759242][T26575] FS: 00007fa7c78366c0(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 878.759259][T26575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.759274][T26575] CR2: 000000110c381412 CR3: 0000000061b0c000 CR4: 00000000003526f0 [ 878.759294][T26575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.759306][T26575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 878.759323][T26575] Kernel panic - not syncing: Fatal exception [ 878.759504][T26575] Kernel Offset: disabled