last executing test programs: 2.750257951s ago: executing program 0 (id=2475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) getegid() r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 2.749794233s ago: executing program 2 (id=2476): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x8, 0xfffffffc}) 2.645513286s ago: executing program 2 (id=2477): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x4103c0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) 2.479444027s ago: executing program 1 (id=2478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004"], 0x0) 2.395301968s ago: executing program 1 (id=2479): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40040) io_setup(0xff, &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, 0x0, 0x0, 0x34000, 0x0) 1.519419617s ago: executing program 4 (id=2484): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x10001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.261537298s ago: executing program 1 (id=2485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a80)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000640)=0x6c, 0x4) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad000000000000c1e022120000000000", 0x71) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x80000001, 0x4) readahead(r4, 0x5, 0x8000000000000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x402102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0xf48, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 1.228056895s ago: executing program 4 (id=2486): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) 1.196601515s ago: executing program 2 (id=2487): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x5a060800) mknod$loop(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 1.049960538s ago: executing program 1 (id=2488): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000000100)="a92e81d0991828e33c2330164cf023df9993", 0x12}, {&(0x7f00000030c0)="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", 0xffe}], 0x2, 0x0, 0x0, 0x20004801}], 0x1, 0x40000) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2}, 0x8}], 0x1, 0x40000142, 0x0) 962.738715ms ago: executing program 4 (id=2489): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="5d0a29aa", 0x4}, {&(0x7f00000000c0)="09e742f518", 0x5}], 0x2, 0xc, 0x0) 933.588008ms ago: executing program 0 (id=2490): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 836.049862ms ago: executing program 0 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 802.055509ms ago: executing program 1 (id=2492): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 801.438896ms ago: executing program 4 (id=2493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x3a, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) 720.73809ms ago: executing program 2 (id=2494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x5, 0x58, 0x67, 0x0, 0xff, 0x2f, 0x0, @multicast2, @loopback}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0x3, 0x3, 0x1, 0x1, 0x6, 0x8}, 0x1, {0x3}}}, {0x8, 0x22eb, 0xfffffffd, {{0xc, 0x2, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9}, 0x2, {0x9, 0x73, 0x3, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 680.174657ms ago: executing program 1 (id=2495): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@host}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 635.118537ms ago: executing program 4 (id=2496): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x10001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 634.819233ms ago: executing program 0 (id=2497): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0xffdd) 516.319684ms ago: executing program 2 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 455.993391ms ago: executing program 0 (id=2499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@multicast1, 0x200, 0x0, 0x4e22, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x9, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x3503, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 384.430302ms ago: executing program 4 (id=2500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={r1, @in6={{0xa, 0x0, 0x0, @private2}}, 0xffff}, 0x90) 383.056505ms ago: executing program 3 (id=2501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 304.116384ms ago: executing program 2 (id=2502): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 283.727627ms ago: executing program 0 (id=2503): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ae6d6d99716a8f4eaacdd0b80b82219d77523d90551629d0e5252e4d9d15b9dc44a8aa76f81f480d0acf78ec61b10d2b1ec74eb00343088309cc333326483ace183d5fd5a7a29a9aec71a4c4bd9a368753143e4b1fcbd00cb4a6fb9b84fadeb23f65ff0a61eb180d5c74e116537c38a7c2facc83d8f56fe1c75cb1c079f8cdf40a617c7132b622129fa1b6c2481d0c131c44cb80f78895a06f53ba6a3f4566e14695342640ecb2e388079dabfc718421ab8cf47e9594d3556dc00bd058474d091b085313ca83881209c53aed"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x80) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de284211000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 282.96905ms ago: executing program 3 (id=2504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 204.883652ms ago: executing program 3 (id=2505): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 66.479894ms ago: executing program 3 (id=2506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x2, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000140)="422cb0bbc1319a", 0x7}], 0x2}, 0x0) 55.171046ms ago: executing program 3 (id=2507): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) 0s ago: executing program 3 (id=2508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000005, &(0x7f00000001c0)={0xa, 0x2, 0xf7ff, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) kernel console output (not intermixed with test programs): or -71 [ 740.754361][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 740.766044][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.778544][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 740.791908][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.801860][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 740.814059][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.821649][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.829850][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.837587][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.846077][ T5689] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 740.846765][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 740.846791][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.846811][ T10] usb 3-1: Product: syz [ 740.846825][ T10] usb 3-1: Manufacturer: syz [ 740.846840][ T10] usb 3-1: SerialNumber: syz [ 740.858738][ T10] usb 3-1: config 0 descriptor?? [ 740.861516][ T5717] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 740.863126][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 740.863155][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 740.871129][ T5689] playstation 0003:054C:0BA0.0013: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 740.873888][ T5717] usb 5-1: device descriptor read/8, error -71 [ 740.963051][ T5689] playstation 0003:054C:0BA0.0013: Failed to retrieve feature with reportID 18: -71 [ 740.963102][ T5689] playstation 0003:054C:0BA0.0013: Failed to retrieve DualShock4 pairing info: -71 [ 740.963156][ T5689] playstation 0003:054C:0BA0.0013: Failed to get MAC address from DualShock4 [ 740.963171][ T5689] playstation 0003:054C:0BA0.0013: Failed to create dualshock4. [ 740.967423][ T5689] playstation 0003:054C:0BA0.0013: probe with driver playstation failed with error -71 [ 740.982961][ T5689] usb 4-1: USB disconnect, device number 75 [ 740.983646][ T5717] usb usb5-port1: unable to enumerate USB device [ 741.089407][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.153151][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.275030][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 741.281603][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 741.289277][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 741.296545][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 741.310501][ T10] usb 3-1: USB disconnect, device number 92 [ 741.343042][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 741.368903][ T10] em28xx 3-1:0.0: Freeing device [ 741.451775][T14661] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 741.469295][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.479314][T14661] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 741.503908][T14661] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2021'. [ 741.538929][T14661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.551764][T14661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.570460][T14661] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 741.602441][T14661] bond0 (unregistering): Released all slaves [ 741.807694][T14670] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 744.583312][ T5717] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 744.714704][T14749] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 744.753305][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 744.753925][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 744.753938][ T30] audit: type=1326 audit(1779058532.345:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 744.827974][ T5717] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 744.850457][ T5717] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 744.859402][ T5717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 744.869404][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 744.879181][ T5717] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 744.890057][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 744.917693][ T30] audit: type=1326 audit(1779058532.385:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 744.958137][ T5717] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 744.992040][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.007758][ T30] audit: type=1326 audit(1779058532.385:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.060001][ T30] audit: type=1326 audit(1779058532.385:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.093693][ T5717] usb 5-1: config 0 descriptor?? [ 745.126416][ T30] audit: type=1326 audit(1779058532.385:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.211330][ T30] audit: type=1326 audit(1779058532.395:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.261997][ T30] audit: type=1326 audit(1779058532.395:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.292364][ T5689] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 745.316807][ T30] audit: type=1326 audit(1779058532.395:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.343521][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.381527][ T30] audit: type=1326 audit(1779058532.395:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.384096][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.456897][ T30] audit: type=1326 audit(1779058532.395:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.3.2049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561679ce59 code=0x7ffc0000 [ 745.492349][ T5689] usb 4-1: Using ep0 maxpacket: 32 [ 745.506473][ T5689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.523297][ T5689] usb 4-1: config 0 has no interfaces? [ 745.559653][ T5689] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 745.571329][ T5689] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 745.590550][ T5717] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 745.605850][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.623584][ T5689] usb 4-1: Product: syz [ 745.625822][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.653896][ T5689] usb 4-1: Manufacturer: syz [ 745.669316][ T5689] usb 4-1: config 0 descriptor?? [ 745.681494][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 745.887923][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.904975][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.919691][ T24] usb 5-1: USB disconnect, device number 82 [ 745.939426][ T24] usblp0: removed [ 745.965567][T10823] usb 4-1: USB disconnect, device number 76 [ 746.016277][T14767] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2054'. [ 746.551842][T14780] FAULT_INJECTION: forcing a failure. [ 746.551842][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.574306][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.3.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.574334][T14780] Tainted: [L]=SOFTLOCKUP [ 746.574341][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.574352][T14780] Call Trace: [ 746.574359][T14780] [ 746.574367][T14780] dump_stack_lvl+0xe8/0x150 [ 746.574394][T14780] should_fail_ex+0x412/0x560 [ 746.574421][T14780] _copy_from_user+0x2d/0xb0 [ 746.574446][T14780] __copy_msghdr+0x3c5/0x5b0 [ 746.574476][T14780] ___sys_sendmsg+0x213/0x360 [ 746.574499][T14780] ? __lock_acquire+0x6b5/0x2cf0 [ 746.574523][T14780] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.574556][T14780] ? kstrtouint+0x6e/0xe0 [ 746.574598][T14780] ? __fget_files+0x2a/0x420 [ 746.574618][T14780] ? __fget_files+0x3a0/0x420 [ 746.574659][T14780] __sys_sendmmsg+0x27c/0x4e0 [ 746.574687][T14780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 746.574708][T14780] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 746.574758][T14780] ? ksys_write+0x242/0x270 [ 746.574784][T14780] ? __pfx_ksys_write+0x10/0x10 [ 746.574815][T14780] __x64_sys_sendmmsg+0xa0/0xc0 [ 746.574839][T14780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.574859][T14780] do_syscall_64+0x15f/0xf80 [ 746.574883][T14780] ? trace_irq_disable+0x3b/0x140 [ 746.574909][T14780] ? clear_bhb_loop+0x40/0x90 [ 746.574938][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.574955][T14780] RIP: 0033:0x7f561679ce59 [ 746.574972][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.574988][T14780] RSP: 002b:00007f56175f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 746.575008][T14780] RAX: ffffffffffffffda RBX: 00007f5616a15fa0 RCX: 00007f561679ce59 [ 746.575020][T14780] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 746.575031][T14780] RBP: 00007f56175f7090 R08: 0000000000000000 R09: 0000000000000000 [ 746.575042][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.575054][T14780] R13: 00007f5616a16038 R14: 00007f5616a15fa0 R15: 00007f5616b3fa48 [ 746.575083][T14780] [ 747.036883][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.046537][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.802518][T14811] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2069'. [ 747.819573][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 747.841603][T14811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2069'. [ 748.173460][T10823] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 748.333305][T10823] usb 2-1: Using ep0 maxpacket: 32 [ 748.355845][T10823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.380698][T10823] usb 2-1: config 0 has no interfaces? [ 748.403889][T10823] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 748.431083][T10823] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 748.462798][T10823] usb 2-1: Product: syz [ 748.471643][T10823] usb 2-1: Manufacturer: syz [ 748.498496][T10823] usb 2-1: config 0 descriptor?? [ 748.728046][T14813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.769297][T14813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.814181][ T5689] usb 2-1: USB disconnect, device number 76 [ 749.763675][ T30] kauditd_printk_skb: 6671 callbacks suppressed [ 749.763692][ T30] audit: type=1326 audit(1779058537.345:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 749.808475][ T30] audit: type=1326 audit(1779058537.345:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 749.833552][ T30] audit: type=1326 audit(1779058537.345:19449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561673e1d9 code=0x7ffc0000 [ 749.881385][ T30] audit: type=1326 audit(1779058537.345:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561673e1d9 code=0x7ffc0000 [ 749.908691][ T30] audit: type=1326 audit(1779058537.345:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 749.936152][ T5689] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 749.937037][ T30] audit: type=1326 audit(1779058537.385:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 749.988634][ T30] audit: type=1326 audit(1779058537.385:19454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561673e1d9 code=0x7ffc0000 [ 750.015377][ T30] audit: type=1326 audit(1779058537.385:19455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 750.040362][ T30] audit: type=1326 audit(1779058537.385:19456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f561673e1d9 code=0x7ffc0000 [ 750.073629][ T30] audit: type=1326 audit(1779058537.385:19457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14786 comm="syz.3.2062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5616796bd7 code=0x7ffc0000 [ 750.125235][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.136373][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.147458][ T5689] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 750.166094][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.187427][ T5689] usb 2-1: config 0 descriptor?? [ 750.609036][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.618338][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.641739][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.661142][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.683157][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.708456][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.722325][T14847] fuse: Unknown parameter '' [ 750.729333][ T5689] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 750.761485][ T5689] playstation 0003:054C:0BA0.0014: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 750.863905][ T5689] playstation 0003:054C:0BA0.0014: Failed to retrieve feature with reportID 18: -71 [ 750.893313][ T5689] playstation 0003:054C:0BA0.0014: Failed to retrieve DualShock4 pairing info: -71 [ 750.915318][ T5689] playstation 0003:054C:0BA0.0014: Failed to get MAC address from DualShock4 [ 750.924743][ T5689] playstation 0003:054C:0BA0.0014: Failed to create dualshock4. [ 750.935144][ T5689] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -71 [ 750.954651][ T5689] usb 2-1: USB disconnect, device number 77 [ 751.122748][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 751.445596][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2085'. [ 751.522492][T14865] loop1: detected capacity change from 0 to 7 [ 751.579684][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 751.772560][T14865] Dev loop1: unable to read RDB block 7 [ 751.780775][T14865] loop1: unable to read partition table [ 751.793052][T14865] loop1: partition table beyond EOD, truncated [ 751.800448][T14865] loop_reread_partitions: partition scan of loop1 (Wý* %4FLQk݊5) failed (rc=-5) [ 752.263321][ T5689] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 752.438099][ T5689] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 752.450344][ T5689] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 752.462106][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 752.473197][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 752.500507][ T5689] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.524834][ T5689] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 752.540962][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.575725][ T5689] usb 4-1: Product: syz [ 752.587084][ T5689] usb 4-1: Manufacturer: syz [ 752.601803][ T5689] usb 4-1: SerialNumber: syz [ 752.614521][T14890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2094'. [ 752.628023][ T5689] usb 4-1: config 0 descriptor?? [ 752.640909][T14877] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 752.654344][ T5689] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 753.022838][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2096'. [ 753.387168][T14902] loop1: detected capacity change from 0 to 7 [ 753.449653][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 753.613250][ T5689] usb 4-1: USB disconnect, device number 77 [ 753.638185][T14902] Dev loop1: unable to read RDB block 7 [ 753.652975][T14902] loop1: unable to read partition table [ 753.677218][T14902] loop1: partition table beyond EOD, truncated [ 753.701638][T14902] loop_reread_partitions: partition scan of loop1 (Wý* %4FLQk݊5) failed (rc=-5) [ 753.849394][T14905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 754.021867][T14910] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 754.128146][T14913] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 754.534826][T14927] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 754.552325][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 754.581104][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.591239][T14930] loop1: detected capacity change from 0 to 7 [ 754.628857][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 754.692375][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.728376][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 754.737573][ T24] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 754.751773][ T24] usb 2-1: config 208 has no interface number 0 [ 754.769701][ T24] usb 2-1: config 208 interface 119 has no altsetting 0 [ 754.806473][ T24] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 754.831346][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.857008][ T24] usb 2-1: Product: syz [ 754.872004][ T24] usb 2-1: Manufacturer: syz [ 754.886392][ T24] usb 2-1: SerialNumber: syz [ 754.928390][T14930] Dev loop1: unable to read RDB block 7 [ 754.935426][T14930] loop1: unable to read partition table [ 754.941329][T14930] loop1: partition table beyond EOD, truncated [ 754.949794][T14930] loop_reread_partitions: partition scan of loop1 (Wý* %4FLQk݊5) failed (rc=-5) [ 755.122120][ T24] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 755.230123][ T24] usb 2-1: USB disconnect, device number 78 [ 755.273688][ T5689] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 755.425187][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.441470][T14890] syz.4.2094 (14890) used greatest stack depth: 18840 bytes left [ 755.450369][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.479889][ T5689] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 755.514185][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.538862][ T5689] usb 4-1: config 0 descriptor?? [ 755.673374][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 755.833515][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 755.861099][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 755.886692][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.911477][ T10] usb 3-1: Product: syz [ 755.923490][ T10] usb 3-1: Manufacturer: syz [ 755.936062][ T10] usb 3-1: SerialNumber: syz [ 755.966246][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 755.976860][ T10] usb 3-1: config 0 descriptor?? [ 755.990273][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.019649][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.028743][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.036324][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.044042][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.051707][ T5689] playstation 0003:054C:0BA0.0015: unknown main item tag 0x0 [ 756.062509][ T5689] playstation 0003:054C:0BA0.0015: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 756.087323][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 756.166194][ T5689] playstation 0003:054C:0BA0.0015: Failed to retrieve feature with reportID 18: -71 [ 756.182407][ T5689] playstation 0003:054C:0BA0.0015: Failed to retrieve DualShock4 pairing info: -71 [ 756.198175][ T5689] playstation 0003:054C:0BA0.0015: Failed to get MAC address from DualShock4 [ 756.207653][ T5689] playstation 0003:054C:0BA0.0015: Failed to create dualshock4. [ 756.240737][ T5689] playstation 0003:054C:0BA0.0015: probe with driver playstation failed with error -71 [ 756.254689][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 756.271294][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 756.282754][T14948] fuse: Unknown parameter 'rou' [ 756.287826][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.298454][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.317092][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.332661][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.335046][ T5689] usb 4-1: USB disconnect, device number 78 [ 756.345844][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 756.365476][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.367205][ T10] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 756.394890][ T10] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 756.474815][ T10] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 756.488502][ T10] usb 3-1: USB disconnect, device number 93 [ 756.609067][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 756.614697][ T24] usbtmc 2-1:16.0: can't read capabilities [ 756.796761][T14954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 756.822738][T14945] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 756.833953][ T24] usb 2-1: USB disconnect, device number 79 [ 757.046136][T14959] netlink: 'syz.2.2122': attribute type 2 has an invalid length. [ 757.070832][T14959] batadv0: entered promiscuous mode [ 757.079653][T14959] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 757.090795][T14959] batadv0: left promiscuous mode [ 757.171969][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 757.386697][T14974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2126'. [ 758.014478][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 758.165324][T10823] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 758.195297][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.225368][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.238183][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 758.248287][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.269780][ T24] usb 4-1: config 0 descriptor?? [ 758.336252][T10823] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.347737][T10823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 758.376582][T10823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 758.416459][T10823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 758.431963][T10823] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.450306][T10823] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 758.472741][T10823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.486819][T10823] usb 3-1: Product: syz [ 758.492081][T10823] usb 3-1: Manufacturer: syz [ 758.502376][T10823] usb 3-1: SerialNumber: syz [ 758.519711][T10823] usb 3-1: config 0 descriptor?? [ 758.527107][T14980] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 758.539201][T14997] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 758.564477][T10823] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 758.700809][ T24] playstation 0003:054C:0BA0.0016: unknown main item tag 0x0 [ 758.720660][ T24] playstation 0003:054C:0BA0.0016: unknown main item tag 0x0 [ 758.770372][ T24] playstation 0003:054C:0BA0.0016: unknown main item tag 0x0 [ 758.817397][ T24] playstation 0003:054C:0BA0.0016: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 758.953828][ T24] playstation 0003:054C:0BA0.0016: Failed to retrieve feature with reportID 18: -71 [ 759.000472][ T24] playstation 0003:054C:0BA0.0016: Failed to retrieve DualShock4 pairing info: -71 [ 759.068136][ T24] playstation 0003:054C:0BA0.0016: Failed to get MAC address from DualShock4 [ 759.095854][ T24] playstation 0003:054C:0BA0.0016: Failed to create dualshock4. [ 759.159645][ T24] playstation 0003:054C:0BA0.0016: probe with driver playstation failed with error -71 [ 759.200122][ T24] usb 4-1: USB disconnect, device number 79 [ 759.335961][T15007] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2137'. [ 759.346039][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 759.788429][T15021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.883417][ T5717] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 760.043298][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 760.056135][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3988, setting to 64 [ 760.070470][ T5717] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.079775][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.087835][ T5717] usb 4-1: Product: syz [ 760.096521][ T5717] usb 4-1: Manufacturer: syz [ 760.107147][ T5717] usb 4-1: SerialNumber: syz [ 760.119120][ T5717] usb 4-1: config 0 descriptor?? [ 760.132744][ T5717] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 760.143081][ T5717] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 760.281901][ T24] usb 3-1: USB disconnect, device number 94 [ 760.738231][ T5717] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 761.165275][ T5717] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 761.184094][ T5717] em28xx 4-1:0.0: board has no eeprom [ 761.483972][ T5717] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 761.500300][ T5717] em28xx 4-1:0.0: dvb set to bulk mode. [ 761.519187][ T24] em28xx 4-1:0.0: Binding DVB extension [ 761.609470][ T5689] usb 4-1: USB disconnect, device number 80 [ 761.630568][ T5689] em28xx 4-1:0.0: Disconnecting em28xx [ 761.747779][ T24] em28xx 4-1:0.0: Registering input extension [ 761.771941][ T5689] em28xx 4-1:0.0: Closing input extension [ 761.778065][T15044] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2149'. [ 761.808308][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2149'. [ 761.842049][ T5689] em28xx 4-1:0.0: Freeing device [ 762.554727][ T5717] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 762.733894][ T5717] usb 4-1: too many configurations: 51, using maximum allowed: 8 [ 762.770349][ T5717] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 762.797277][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.821045][ T5717] usb 4-1: Product: syz [ 762.834963][ T5717] usb 4-1: Manufacturer: syz [ 762.845591][ T5717] usb 4-1: SerialNumber: syz [ 762.869906][ T5717] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 762.906342][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 763.680556][T15059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.695584][T15059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.002139][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 764.029159][ T24] ath9k_htc: Failed to initialize the device [ 764.079935][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 764.094417][ T995] usb 4-1: USB disconnect, device number 81 [ 787.987079][T13167] usb 4-1: [UEAGLE-ATM] firmware is not available [ 795.643742][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 795.675045][T15091] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2166'. [ 795.684308][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 795.774207][T13167] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 795.803264][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 795.814726][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.839187][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 795.848792][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.857026][ T995] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 795.867585][ T24] usb 5-1: config 0 descriptor?? [ 795.924057][T13167] usb 4-1: Using ep0 maxpacket: 32 [ 795.931166][T13167] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.941737][T13167] usb 4-1: config 0 has no interfaces? [ 795.965994][T13167] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 795.981184][T13167] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 795.996605][T13167] usb 4-1: Product: syz [ 796.005382][T13167] usb 4-1: Manufacturer: syz [ 796.017200][T13167] usb 4-1: config 0 descriptor?? [ 796.023499][ T995] usb 3-1: Using ep0 maxpacket: 32 [ 796.040507][ T995] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 796.049959][ T995] usb 3-1: config 0 has no interface number 0 [ 796.074224][ T995] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 796.096876][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.107349][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 796.122491][ T995] usb 3-1: Product: syz [ 796.136154][ T995] usb 3-1: Manufacturer: syz [ 796.141043][ T995] usb 3-1: SerialNumber: syz [ 796.150519][ T995] usb 3-1: config 0 descriptor?? [ 796.247972][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.260595][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.290407][T13167] usb 4-1: USB disconnect, device number 82 [ 796.370089][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 796.382176][ T995] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 796.400349][ T995] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 796.431161][ T995] usb 3-1: USB disconnect, device number 95 [ 796.923301][ T995] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 797.043072][T15109] syzkaller0: entered promiscuous mode [ 797.053445][T15109] syzkaller0: entered allmulticast mode [ 797.093293][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 797.102902][ T995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 797.117741][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 797.143162][ T995] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 797.152614][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.179167][ T995] usb 2-1: Product: syz [ 797.190942][ T995] usb 2-1: Manufacturer: syz [ 797.205876][ T995] usb 2-1: SerialNumber: syz [ 797.217551][ T995] usb 2-1: config 0 descriptor?? [ 797.230096][ T995] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 797.239824][ T995] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 797.833104][ T995] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 797.840310][ T995] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 798.028920][T15114] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 798.197211][T15120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2176'. [ 798.244695][T13181] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 798.277919][T13181] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 798.291148][T13181] usb 1-1: USB disconnect, device number 81 [ 798.299182][T15122] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 798.429581][T13172] usb 5-1: USB disconnect, device number 83 [ 798.493788][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 798.493803][ T30] audit: type=1326 audit(1779058586.085:19520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.541106][ T30] audit: type=1326 audit(1779058586.085:19521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.585036][ T30] audit: type=1326 audit(1779058586.115:19522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.611284][ T30] audit: type=1326 audit(1779058586.115:19523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.660535][ T30] audit: type=1326 audit(1779058586.155:19524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.714422][ T30] audit: type=1326 audit(1779058586.155:19525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.739524][ T30] audit: type=1326 audit(1779058586.155:19526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.775026][ T30] audit: type=1326 audit(1779058586.155:19527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.801434][ T30] audit: type=1326 audit(1779058586.155:19528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.839849][ T30] audit: type=1326 audit(1779058586.155:19529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.2179" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f287999ce59 code=0x7ffc0000 [ 798.893773][ T995] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 798.910997][T15138] syzkaller0: entered promiscuous mode [ 798.920697][T15138] syzkaller0: entered allmulticast mode [ 799.063320][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 799.099087][ T995] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 799.121635][ T995] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 799.135742][ T995] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 799.149364][ T995] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 799.161864][ T995] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 799.180226][ T995] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 799.197226][ T995] usb 2-1: USB disconnect, device number 80 [ 799.223337][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 799.234636][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 799.251181][ T24] usb 5-1: config 0 has no interface number 0 [ 799.265782][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 799.276594][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.288517][ T24] usb 5-1: Product: syz [ 799.293969][ T24] usb 5-1: Manufacturer: syz [ 799.305814][ T24] usb 5-1: SerialNumber: syz [ 799.319100][ T24] usb 5-1: config 0 descriptor?? [ 799.538268][T15142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 799.549910][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 799.554496][T15142] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 799.561743][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 799.583944][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 799.593517][T15142] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 799.598479][ T24] usb 5-1: USB disconnect, device number 84 [ 799.615424][T15142] bond3 (unregistering): Released all slaves [ 799.700122][T15145] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 799.772481][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.852182][T15147] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 799.907344][T15153] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 799.929692][T15153] bond0 (unregistering): Released all slaves [ 800.224476][T15161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 800.275733][T15165] fuse: Bad value for 'fd' [ 800.406483][T15173] binder: 15164:15173 ioctl 80105873 200000000140 returned -22 [ 800.436766][T15173] binder: 15164:15173 ioctl c0306201 200000000640 returned -22 [ 800.703793][ T24] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 800.923991][ T24] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 800.952585][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.985745][ T24] usb 4-1: config 0 has no interface number 0 [ 801.001881][ T24] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 801.042321][ T24] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 801.076500][ T24] usb 4-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.122931][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 801.145027][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.159868][ T24] usb 4-1: Product: syz [ 801.173157][ T24] usb 4-1: Manufacturer: syz [ 801.185645][ T24] usb 4-1: SerialNumber: syz [ 801.225845][ T24] usb 4-1: config 0 descriptor?? [ 801.257977][T15173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 801.389594][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 801.497768][T15195] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 802.466145][ T13] usb 4-1: Failed to submit usb control message: -110 [ 802.478991][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 802.499725][ T13] usb 4-1: unable to get target info from device [ 802.520792][ T13] usb 4-1: could not get target info (-110) [ 802.534596][ T13] usb 4-1: could not probe fw (-110) [ 803.307010][ T24] usb 4-1: USB disconnect, device number 83 [ 803.783364][ T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 803.953353][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 803.967179][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3988, setting to 64 [ 803.992070][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 804.015487][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.044882][ T24] usb 4-1: Product: syz [ 804.057327][ T24] usb 4-1: Manufacturer: syz [ 804.072951][ T24] usb 4-1: SerialNumber: syz [ 804.084005][ T24] usb 4-1: config 0 descriptor?? [ 804.094786][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 804.107941][ T24] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 804.143866][T13167] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 804.305580][T15220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2206'. [ 804.316334][T13167] usb 5-1: Using ep0 maxpacket: 32 [ 804.322315][T15221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2206'. [ 804.334355][T13167] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 804.343599][T15220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2206'. [ 804.355760][T13167] usb 5-1: config 0 has no interface number 0 [ 804.370411][T13167] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 804.386511][T13167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.408563][T13167] usb 5-1: Product: syz [ 804.418775][T13167] usb 5-1: Manufacturer: syz [ 804.429384][T13167] usb 5-1: SerialNumber: syz [ 804.447114][T13167] usb 5-1: config 0 descriptor?? [ 804.670691][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 804.702317][T13167] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 804.748487][T13167] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 804.768642][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 804.827951][T13167] usb 5-1: USB disconnect, device number 85 [ 804.960009][T15232] fuse: Bad value for 'fd' [ 805.026723][T15233] binder: 15231:15233 ioctl 80105873 200000000140 returned -22 [ 805.040455][T15233] binder: 15231:15233 ioctl c0306201 200000000640 returned -22 [ 805.201714][ T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 805.210057][ T24] em28xx 4-1:0.0: board has no eeprom [ 805.313560][ T995] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 805.485674][ T995] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 805.495248][ T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 805.504605][ T995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.520593][ T24] em28xx 4-1:0.0: dvb set to bulk mode. [ 805.532692][ T995] usb 2-1: config 0 has no interface number 0 [ 805.540467][ T5717] em28xx 4-1:0.0: Binding DVB extension [ 805.552853][ T995] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 805.569765][T13167] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 805.608852][ T995] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 805.648749][ T995] usb 2-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.679941][ T995] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 805.700644][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.719215][ T995] usb 2-1: Product: syz [ 805.730291][ T995] usb 2-1: Manufacturer: syz [ 805.741214][ T995] usb 2-1: SerialNumber: syz [ 805.747337][T13167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 805.762679][T13167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 805.781363][ T995] usb 2-1: config 0 descriptor?? [ 805.791238][T13167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 805.801952][T15233] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 805.819068][T13167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 805.851864][T13167] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 805.861977][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.874037][ T995] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 805.891302][T13167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.903962][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.912595][T13167] usb 5-1: Product: syz [ 805.918990][T13167] usb 5-1: Manufacturer: syz [ 805.932649][T13167] usb 5-1: SerialNumber: syz [ 805.945896][T13167] usb 5-1: config 0 descriptor?? [ 805.946709][ T995] usb 4-1: USB disconnect, device number 84 [ 805.998698][T13167] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 806.018123][ T995] em28xx 4-1:0.0: Disconnecting em28xx [ 806.030096][ T1130] usb 2-1: Failed to submit usb control message: -71 [ 806.030486][T10823] usb 2-1: USB disconnect, device number 81 [ 806.079044][ T5717] em28xx 4-1:0.0: Registering input extension [ 806.094452][ T995] em28xx 4-1:0.0: Closing input extension [ 806.106116][ T1130] usb 2-1: unable to send the bmi data to the device: -71 [ 806.123634][ T1130] usb 2-1: unable to get target info from device [ 806.133499][ T1130] usb 2-1: could not get target info (-71) [ 806.140259][ T1130] usb 2-1: could not probe fw (-71) [ 806.181129][ T995] em28xx 4-1:0.0: Freeing device [ 806.333764][T15248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.354110][T15248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.381859][T15248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.405709][T15248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.883319][ T995] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 807.034787][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.045990][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.056259][ T995] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 807.065376][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.076052][ T995] usb 2-1: config 0 descriptor?? [ 807.113604][T13172] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 807.268123][T13172] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 807.284140][T13172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.304736][T13172] usb 3-1: config 0 descriptor?? [ 807.325999][T13172] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 807.502399][ T995] hid_parser_main: 4 callbacks suppressed [ 807.502420][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.516630][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.523874][T13172] gp8psk: usb in 128 operation failed. [ 807.524090][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.537387][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.545210][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.552752][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.560405][ T995] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 807.571338][ T995] playstation 0003:054C:0BA0.0017: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 807.643300][T10823] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 807.708640][ T995] playstation 0003:054C:0BA0.0017: Failed to retrieve feature with reportID 18: -71 [ 807.722683][ T995] playstation 0003:054C:0BA0.0017: Failed to retrieve DualShock4 pairing info: -71 [ 807.732258][ T995] playstation 0003:054C:0BA0.0017: Failed to get MAC address from DualShock4 [ 807.741462][ T995] playstation 0003:054C:0BA0.0017: Failed to create dualshock4. [ 807.742645][T13172] gp8psk: usb in 146 operation failed. [ 807.759957][T13172] gp8psk: failed to get FW version [ 807.762776][ T995] playstation 0003:054C:0BA0.0017: probe with driver playstation failed with error -71 [ 807.768699][T13172] gp8psk: usb in 149 operation failed. [ 807.781698][T13172] gp8psk: failed to get FPGA version [ 807.788182][T13172] gp8psk: usb in 138 operation failed. [ 807.794067][T10823] usb 4-1: Using ep0 maxpacket: 8 [ 807.794349][T13172] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 807.800647][ T995] usb 2-1: USB disconnect, device number 82 [ 807.817574][T10823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.819602][T13172] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 807.837801][T10823] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 807.852257][T13172] usb 3-1: USB disconnect, device number 96 [ 807.856729][T10823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.871299][T10823] usb 4-1: Product: syz [ 807.878881][T10823] usb 4-1: Manufacturer: syz [ 807.894269][T10823] usb 4-1: SerialNumber: syz [ 807.905513][T10823] usb 4-1: config 0 descriptor?? [ 807.921792][T10823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 808.121418][T10823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 808.132843][T10823] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 808.323724][T13181] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 808.335870][T15272] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 808.427940][T13167] scsi host1: usb-storage 5-1:0.0 [ 808.464268][T13167] usb 5-1: USB disconnect, device number 86 [ 808.470702][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.480948][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.493498][T13181] usb 1-1: Using ep0 maxpacket: 32 [ 808.504061][T13181] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 808.517869][T13181] usb 1-1: config 0 has no interface number 0 [ 808.543330][T13181] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 808.566784][T13181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.583957][T13181] usb 1-1: Product: syz [ 808.593052][T13181] usb 1-1: Manufacturer: syz [ 808.598108][T13181] usb 1-1: SerialNumber: syz [ 808.615612][T13181] usb 1-1: config 0 descriptor?? [ 808.684787][T13172] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 808.835883][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 808.843299][T13172] usb 3-1: Using ep0 maxpacket: 16 [ 808.858015][T13172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3988, setting to 64 [ 808.872013][T13181] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 808.892324][T13172] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 808.905340][T13181] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 808.910754][T15287] fuse: Bad value for 'fd' [ 808.917233][T13172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.937073][T13181] usb 1-1: USB disconnect, device number 82 [ 808.943023][T13172] usb 3-1: Product: syz [ 808.949430][T13172] usb 3-1: Manufacturer: syz [ 808.959890][T13172] usb 3-1: SerialNumber: syz [ 808.972882][T13172] usb 3-1: config 0 descriptor?? [ 808.986737][T13172] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 809.001958][T13172] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 809.003087][T15290] binder: 15286:15290 ioctl 80105873 200000000140 returned -22 [ 809.028215][T15290] binder: 15286:15290 ioctl c0306201 200000000640 returned -22 [ 809.063247][T15292] FAULT_INJECTION: forcing a failure. [ 809.063247][T15292] name failslab, interval 1, probability 0, space 0, times 0 [ 809.076321][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.4.2229 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.076347][T15292] Tainted: [L]=SOFTLOCKUP [ 809.076355][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.076365][T15292] Call Trace: [ 809.076373][T15292] [ 809.076381][T15292] dump_stack_lvl+0xe8/0x150 [ 809.076411][T15292] should_fail_ex+0x412/0x560 [ 809.076440][T15292] should_failslab+0xa8/0x100 [ 809.076470][T15292] __kmalloc_noprof+0xe8/0x760 [ 809.076495][T15292] ? tomoyo_encode+0x28b/0x550 [ 809.076525][T15292] tomoyo_encode+0x28b/0x550 [ 809.076554][T15292] tomoyo_realpath_from_path+0x58d/0x5d0 [ 809.076589][T15292] ? tomoyo_path_number_perm+0x219/0x630 [ 809.076610][T15292] tomoyo_path_number_perm+0x246/0x630 [ 809.076632][T15292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 809.076651][T15292] ? __lock_acquire+0x6b5/0x2cf0 [ 809.076678][T15292] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 809.076706][T15292] ? __fget_files+0x2a/0x420 [ 809.076720][T15292] ? __fget_files+0x2a/0x420 [ 809.076731][T15292] ? __fget_files+0x3a0/0x420 [ 809.076741][T15292] ? __fget_files+0x2a/0x420 [ 809.076754][T15292] security_file_ioctl+0xc3/0x2a0 [ 809.076768][T15292] __se_sys_ioctl+0x47/0x170 [ 809.076784][T15292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.076796][T15292] do_syscall_64+0x15f/0xf80 [ 809.076810][T15292] ? clear_bhb_loop+0x40/0x90 [ 809.076823][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.076833][T15292] RIP: 0033:0x7f4121d9ce59 [ 809.076843][T15292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.076852][T15292] RSP: 002b:00007f4122bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.076864][T15292] RAX: ffffffffffffffda RBX: 00007f4122015fa0 RCX: 00007f4121d9ce59 [ 809.076871][T15292] RDX: 0000200000000140 RSI: 0000000000004b66 RDI: 0000000000000003 [ 809.076877][T15292] RBP: 00007f4122bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 809.076884][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.076890][T15292] R13: 00007f4122016038 R14: 00007f4122015fa0 R15: 00007f412213fa48 [ 809.076905][T15292] [ 809.076956][T15292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 809.293477][T10823] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 809.369589][ T1130] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.379217][ T1130] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.389507][ T1130] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.399393][ T1130] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.455153][T10823] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 809.463473][T10823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.475487][T10823] usb 2-1: config 0 has no interface number 0 [ 809.481982][T10823] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 809.493246][T10823] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 809.504705][T10823] usb 2-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.521177][T10823] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 809.540624][T10823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.549639][T10823] usb 2-1: Product: syz [ 809.555084][T10823] usb 2-1: Manufacturer: syz [ 809.559709][T10823] usb 2-1: SerialNumber: syz [ 809.569072][T10823] usb 2-1: config 0 descriptor?? [ 809.579301][T15290] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 809.589386][T13172] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 809.605646][T10823] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 809.673294][ T995] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 809.743128][T15307] netlink: 'syz.0.2235': attribute type 10 has an invalid length. [ 809.757917][T15307] team0: Port device dummy0 added [ 809.767518][T15307] netlink: 'syz.0.2235': attribute type 10 has an invalid length. [ 809.787467][T15307] team0: Port device dummy0 removed [ 809.819847][ T1130] usb 2-1: Failed to submit usb control message: -71 [ 809.820027][T10823] usb 2-1: USB disconnect, device number 83 [ 809.827880][ T1130] usb 2-1: unable to send the bmi data to the device: -71 [ 809.842546][ T1130] usb 2-1: unable to get target info from device [ 809.848941][ T1130] usb 2-1: could not get target info (-71) [ 809.855083][ T1130] usb 2-1: could not probe fw (-71) [ 809.875560][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.899844][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.909977][ T995] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 809.928303][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.939172][ T995] usb 5-1: config 0 descriptor?? [ 810.000229][T13172] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 810.008512][T13172] em28xx 3-1:0.0: board has no eeprom [ 810.293583][T13172] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 810.301531][T13172] em28xx 3-1:0.0: dvb set to bulk mode. [ 810.307383][T13181] em28xx 3-1:0.0: Binding DVB extension [ 810.359536][ T995] playstation 0003:054C:0BA0.0018: unknown main item tag 0x0 [ 810.381578][ T995] playstation 0003:054C:0BA0.0018: unknown main item tag 0x0 [ 810.402916][ T995] playstation 0003:054C:0BA0.0018: unknown main item tag 0x0 [ 810.430247][ T995] playstation 0003:054C:0BA0.0018: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 810.474746][T13172] usb 4-1: USB disconnect, device number 85 [ 810.478503][T15311] process 'memfd:-BN4EyѧS:)' started with executable stack [ 810.558390][T15296] binder: BINDER_SET_CONTEXT_MGR already set [ 810.580054][T15296] binder: 15295:15296 ioctl 4018620d 200000004a80 returned -16 [ 810.619933][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 810.619955][ T30] audit: type=1326 audit(1779058598.205:19536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.654652][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.678625][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.694737][T10823] usb 3-1: USB disconnect, device number 97 [ 810.703150][T10823] em28xx 3-1:0.0: Disconnecting em28xx [ 810.731948][ T30] audit: type=1326 audit(1779058598.205:19537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.766944][T13181] em28xx 3-1:0.0: Registering input extension [ 810.785645][T10823] em28xx 3-1:0.0: Closing input extension [ 810.811347][ T30] audit: type=1326 audit(1779058598.215:19538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.837649][ T30] audit: type=1326 audit(1779058598.215:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.855409][T15324] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 810.862989][ T30] audit: type=1326 audit(1779058598.215:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.901382][T10823] em28xx 3-1:0.0: Freeing device [ 810.909300][ T30] audit: type=1326 audit(1779058598.215:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.941594][ T30] audit: type=1326 audit(1779058598.215:19539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 810.947541][T13181] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 810.981520][ T30] audit: type=1326 audit(1779058598.215:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 811.014816][ T30] audit: type=1326 audit(1779058598.215:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 811.058011][ T30] audit: type=1326 audit(1779058598.215:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15316 comm="syz.1.2238" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd859ce59 code=0x7ffc0000 [ 811.125385][T13181] usb 2-1: Using ep0 maxpacket: 32 [ 811.134380][T13181] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 811.145051][T13181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.162945][T13181] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 811.178300][T13181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.194305][T13181] usb 2-1: Product: syz [ 811.201431][T13181] usb 2-1: Manufacturer: syz [ 811.210103][T13181] usb 2-1: SerialNumber: syz [ 811.230780][T13181] usb 2-1: config 0 descriptor?? [ 811.247869][T13181] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 812.033608][T13167] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 812.059760][T13181] gspca_sunplus: reg_r err -32 [ 812.195498][T13167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.225642][T13167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.248334][T13167] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 812.275643][T13167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.298419][T13167] usb 1-1: config 0 descriptor?? [ 812.537155][ T995] playstation 0003:054C:0BA0.0018: Failed to retrieve feature with reportID 18: -71 [ 812.579451][ T995] playstation 0003:054C:0BA0.0018: Failed to retrieve DualShock4 pairing info: -71 [ 812.601770][ T995] playstation 0003:054C:0BA0.0018: Failed to get MAC address from DualShock4 [ 812.639517][ T995] playstation 0003:054C:0BA0.0018: Failed to create dualshock4. [ 812.679380][ T995] playstation 0003:054C:0BA0.0018: probe with driver playstation failed with error -71 [ 812.719742][ T995] usb 5-1: USB disconnect, device number 87 [ 812.801092][T13167] hid_parser_main: 4 callbacks suppressed [ 812.801107][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 812.843459][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 812.935215][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 812.992350][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 813.031780][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 813.063380][T13181] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 813.072698][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 813.098760][T13167] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 813.134828][T13167] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 813.203316][ T995] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 813.366916][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 813.377630][ T995] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 813.404503][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.450774][ T995] usb 5-1: config 0 descriptor?? [ 813.577943][T13167] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device [ 813.617291][T13167] arvo 0003:1E7D:30D4.0019: couldn't install keyboard [ 813.656911][T13167] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71 [ 813.674607][ T995] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 813.716411][T13167] usb 1-1: USB disconnect, device number 83 [ 813.755371][ T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.773391][ T995] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 813.782960][ T995] usb 5-1: media controller created [ 813.855203][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.907572][ T995] az6027: usb out operation failed. (-71) [ 813.919309][ T995] az6027: usb out operation failed. (-71) [ 813.928854][ T995] stb0899_attach: Driver disabled by Kconfig [ 813.935872][ T995] az6027: no front-end attached [ 813.935872][ T995] [ 813.945091][ T995] az6027: usb out operation failed. (-71) [ 813.951288][ T995] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 813.963963][ T995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 813.994078][ T995] dvb-usb: schedule remote query interval to 400 msecs. [ 814.012572][ T995] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 814.066522][ T995] usb 5-1: USB disconnect, device number 88 [ 814.210434][ T995] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 814.379866][T15363] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 814.537619][T15368] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.2247'. [ 814.579600][T15367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 814.611395][T15369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2249'. [ 814.640693][ T995] usb 2-1: USB disconnect, device number 84 [ 815.345040][T15386] FAULT_INJECTION: forcing a failure. [ 815.345040][T15386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.359133][T10325] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 815.380685][T15386] CPU: 1 UID: 0 PID: 15386 Comm: syz.2.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.380707][T15386] Tainted: [L]=SOFTLOCKUP [ 815.380713][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.380722][T15386] Call Trace: [ 815.380730][T15386] [ 815.380738][T15386] dump_stack_lvl+0xe8/0x150 [ 815.380764][T15386] should_fail_ex+0x412/0x560 [ 815.380794][T15386] _copy_from_user+0x2d/0xb0 [ 815.380819][T15386] ___sys_sendmsg+0x1c6/0x360 [ 815.380837][T15386] ? __lock_acquire+0x6b5/0x2cf0 [ 815.380851][T15386] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.380887][T15386] ? __fget_files+0x2a/0x420 [ 815.380905][T15386] ? __fget_files+0x3a0/0x420 [ 815.380935][T15386] __x64_sys_sendmsg+0x1bd/0x2a0 [ 815.380963][T15386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.380988][T15386] ? __pfx_ksys_write+0x10/0x10 [ 815.381007][T15386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.381018][T15386] do_syscall_64+0x15f/0xf80 [ 815.381032][T15386] ? trace_irq_disable+0x3b/0x140 [ 815.381048][T15386] ? clear_bhb_loop+0x40/0x90 [ 815.381060][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.381070][T15386] RIP: 0033:0x7fa18c79ce59 [ 815.381081][T15386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.381090][T15386] RSP: 002b:00007fa18a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.381101][T15386] RAX: ffffffffffffffda RBX: 00007fa18ca15fa0 RCX: 00007fa18c79ce59 [ 815.381109][T15386] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 815.381115][T15386] RBP: 00007fa18a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.381121][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.381128][T15386] R13: 00007fa18ca16038 R14: 00007fa18ca15fa0 R15: 00007fa18cb3fa48 [ 815.381143][T15386] [ 815.666077][T15388] FAULT_INJECTION: forcing a failure. [ 815.666077][T15388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.701966][T15388] CPU: 0 UID: 0 PID: 15388 Comm: syz.2.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.701984][T15388] Tainted: [L]=SOFTLOCKUP [ 815.701988][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.701994][T15388] Call Trace: [ 815.701999][T15388] [ 815.702004][T15388] dump_stack_lvl+0xe8/0x150 [ 815.702022][T15388] should_fail_ex+0x412/0x560 [ 815.702039][T15388] prepare_alloc_pages+0x22a/0x650 [ 815.702058][T15388] __alloc_frozen_pages_noprof+0x12f/0x380 [ 815.702074][T15388] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 815.702091][T15388] ? __pfx_policy_nodemask+0x10/0x10 [ 815.702105][T15388] ? __folio_batch_add_and_move+0x11a/0xc50 [ 815.702120][T15388] ? lock_acquire+0x106/0x350 [ 815.702136][T15388] alloc_pages_mpol+0x235/0x490 [ 815.702153][T15388] folio_alloc_mpol_noprof+0x39/0x160 [ 815.702169][T15388] vma_alloc_folio_noprof+0xe1/0x1e0 [ 815.702185][T15388] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 815.702205][T15388] do_wp_page+0x118a/0x4cc0 [ 815.702220][T15388] ? __pte_offset_map+0x29/0x240 [ 815.702237][T15388] ? __pfx_do_wp_page+0x10/0x10 [ 815.702246][T15388] ? do_raw_spin_lock+0x12b/0x2f0 [ 815.702262][T15388] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 815.702280][T15388] handle_mm_fault+0x151f/0x3170 [ 815.702300][T15388] ? handle_mm_fault+0xee/0x3170 [ 815.702317][T15388] ? __pfx_handle_mm_fault+0x10/0x10 [ 815.702329][T15388] ? follow_page_pte+0xbb7/0xe50 [ 815.702345][T15388] ? __pfx_follow_page_pte+0x10/0x10 [ 815.702362][T15388] __get_user_pages+0x1683/0x2720 [ 815.702395][T15388] __gup_longterm_locked+0xdcf/0x1630 [ 815.702413][T15388] ? sanity_check_pinned_pages+0x7af/0x870 [ 815.702428][T15388] gup_fast_fallback+0x1d84/0x20d0 [ 815.702455][T15388] ? __pfx_gup_fast_fallback+0x10/0x10 [ 815.702465][T15388] ? ____sys_recvmsg+0x1e6/0x4a0 [ 815.702480][T15388] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 815.702492][T15388] ? do_syscall_64+0x15f/0xf80 [ 815.702506][T15388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.702518][T15388] ? pin_user_pages_fast+0x4d/0xb0 [ 815.702530][T15388] iov_iter_extract_pages+0x37b/0x5f0 [ 815.702549][T15388] extract_iter_to_sg+0xefb/0x25d0 [ 815.702569][T15388] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 815.702580][T15388] ? rcu_is_watching+0x15/0xb0 [ 815.702592][T15388] ? trace_kmalloc+0x2a/0xf0 [ 815.702609][T15388] ? __kmalloc_noprof+0x1b8/0x760 [ 815.702624][T15388] ? __asan_memset+0x22/0x50 [ 815.702637][T15388] af_alg_get_rsgl+0x4b6/0x8e0 [ 815.702660][T15388] skcipher_recvmsg+0x392/0x1140 [ 815.702682][T15388] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 815.702695][T15388] ? __lock_acquire+0x6b5/0x2cf0 [ 815.702704][T15388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 815.702719][T15388] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 815.702732][T15388] ? security_socket_recvmsg+0x7e/0x2c0 [ 815.702748][T15388] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 815.702761][T15388] sock_recvmsg+0x172/0x1b0 [ 815.702774][T15388] ____sys_recvmsg+0x1e6/0x4a0 [ 815.702792][T15388] ? __pfx_____sys_recvmsg+0x10/0x10 [ 815.702813][T15388] ? import_iovec+0x73/0xa0 [ 815.702829][T15388] ___sys_recvmsg+0x215/0x590 [ 815.702842][T15388] ? get_pid_task+0x20/0x1f0 [ 815.702857][T15388] ? __pfx____sys_recvmsg+0x10/0x10 [ 815.702873][T15388] ? __fget_files+0x2a/0x420 [ 815.702896][T15388] ? __fget_files+0x3a0/0x420 [ 815.702912][T15388] __x64_sys_recvmsg+0x1ba/0x2a0 [ 815.702928][T15388] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 815.702947][T15388] ? __pfx_ksys_write+0x10/0x10 [ 815.702966][T15388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.702976][T15388] do_syscall_64+0x15f/0xf80 [ 815.702989][T15388] ? trace_irq_disable+0x3b/0x140 [ 815.703004][T15388] ? clear_bhb_loop+0x40/0x90 [ 815.703016][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.703025][T15388] RIP: 0033:0x7fa18c79ce59 [ 815.703036][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.703044][T15388] RSP: 002b:00007fa18a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 815.703055][T15388] RAX: ffffffffffffffda RBX: 00007fa18ca15fa0 RCX: 00007fa18c79ce59 [ 815.703062][T15388] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 815.703068][T15388] RBP: 00007fa18a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.703074][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.703080][T15388] R13: 00007fa18ca16038 R14: 00007fa18ca15fa0 R15: 00007fa18cb3fa48 [ 815.703096][T15388] [ 816.325943][T10325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.334135][T15392] FAULT_INJECTION: forcing a failure. [ 816.334135][T15392] name failslab, interval 1, probability 0, space 0, times 0 [ 816.336905][T10325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.359249][T10325] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 816.368322][T10325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.586594][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.2.2258 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.586613][T15392] Tainted: [L]=SOFTLOCKUP [ 816.586617][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 816.586623][T15392] Call Trace: [ 816.586628][T15392] [ 816.586633][T15392] dump_stack_lvl+0xe8/0x150 [ 816.586650][T15392] should_fail_ex+0x412/0x560 [ 816.586667][T15392] should_failslab+0xa8/0x100 [ 816.586683][T15392] ? skb_clone+0x212/0x3a0 [ 816.586698][T15392] kmem_cache_alloc_noprof+0x87/0x650 [ 816.586716][T15392] skb_clone+0x212/0x3a0 [ 816.586732][T15392] __netlink_deliver_tap+0x404/0x850 [ 816.586754][T15392] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.586768][T15392] netlink_deliver_tap+0x19c/0x1b0 [ 816.586781][T15392] netlink_sendskb+0x68/0x140 [ 816.586794][T15392] netlink_rcv_skb+0x2b6/0x4b0 [ 816.586808][T15392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 816.586822][T15392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.586845][T15392] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.586858][T15392] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.586874][T15392] netlink_unicast+0x75c/0x8e0 [ 816.586891][T15392] netlink_sendmsg+0x813/0xb40 [ 816.586910][T15392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.586925][T15392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.586939][T15392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.586955][T15392] ____sys_sendmsg+0x972/0x9f0 [ 816.586969][T15392] ? __might_fault+0xaf/0x130 [ 816.586984][T15392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.587002][T15392] ? import_iovec+0x73/0xa0 [ 816.587019][T15392] ___sys_sendmsg+0x2a5/0x360 [ 816.587031][T15392] ? __lock_acquire+0x6b5/0x2cf0 [ 816.587045][T15392] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.587075][T15392] ? __fget_files+0x2a/0x420 [ 816.587087][T15392] ? __fget_files+0x3a0/0x420 [ 816.587103][T15392] __x64_sys_sendmsg+0x1bd/0x2a0 [ 816.587118][T15392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.587137][T15392] ? __pfx_ksys_write+0x10/0x10 [ 816.587155][T15392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.587166][T15392] do_syscall_64+0x15f/0xf80 [ 816.587181][T15392] ? trace_irq_disable+0x3b/0x140 [ 816.587195][T15392] ? clear_bhb_loop+0x40/0x90 [ 816.587207][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.587217][T15392] RIP: 0033:0x7fa18c79ce59 [ 816.587228][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.587237][T15392] RSP: 002b:00007fa18a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.587249][T15392] RAX: ffffffffffffffda RBX: 00007fa18ca15fa0 RCX: 00007fa18c79ce59 [ 816.587256][T15392] RDX: 0000000004004040 RSI: 0000200000000280 RDI: 0000000000000003 [ 816.587263][T15392] RBP: 00007fa18a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.587269][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.587274][T15392] R13: 00007fa18ca16038 R14: 00007fa18ca15fa0 R15: 00007fa18cb3fa48 [ 816.587290][T15392] [ 817.089751][T10325] usb 5-1: config 0 descriptor?? [ 817.202475][T15368] bond1: (slave gretap1): making interface the new active one [ 817.215323][T15368] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 817.343388][T13167] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 817.495181][T13181] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 817.508196][T13167] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 817.521992][T10325] playstation 0003:054C:0BA0.001A: unknown main item tag 0x0 [ 817.531017][T13167] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 817.541626][T10325] playstation 0003:054C:0BA0.001A: unknown main item tag 0x0 [ 817.549186][T13167] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 817.558460][T10325] playstation 0003:054C:0BA0.001A: unknown main item tag 0x0 [ 817.566361][T13167] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.581719][T13167] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 817.593464][T10325] playstation 0003:054C:0BA0.001A: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 817.606023][T13167] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.620538][T13167] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.630032][T13167] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.638136][T13167] usb 3-1: Product: syz [ 817.642593][T13167] usb 3-1: Manufacturer: syz [ 817.655845][T15394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 817.670314][T13167] cdc_wdm 3-1:1.0: skipping garbage [ 817.675917][T13167] cdc_wdm 3-1:1.0: skipping garbage [ 817.683529][T13181] usb 1-1: Using ep0 maxpacket: 32 [ 817.694896][T13181] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 817.703480][T13181] usb 1-1: config 0 has no interface number 0 [ 817.713977][T13181] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 817.725699][T13181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.735948][T13181] usb 1-1: Product: syz [ 817.736555][T15382] binder: BINDER_SET_CONTEXT_MGR already set [ 817.740234][T13181] usb 1-1: Manufacturer: syz [ 817.740251][T13181] usb 1-1: SerialNumber: syz [ 817.758539][T13167] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 817.773356][T15382] binder: 15380:15382 ioctl 4018620d 200000004a80 returned -16 [ 817.775012][T13181] usb 1-1: config 0 descriptor?? [ 817.787762][T13167] cdc_wdm 3-1:1.0: Unknown control protocol [ 817.874586][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.881264][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.887571][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.894154][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.900389][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.906971][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.913775][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.920378][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.926629][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.933214][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.939651][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.946234][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.952567][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.959140][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.965398][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.971970][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.978220][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.984814][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 817.991175][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 817.997764][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 818.031526][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 818.047345][T13167] usb 3-1: USB disconnect, device number 98 [ 818.053334][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 818.071291][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 818.145317][T13181] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 818.182142][T13181] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 818.230268][T13181] usb 1-1: USB disconnect, device number 84 [ 818.343272][T13172] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 818.505104][T13172] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 818.515981][T13172] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 818.527582][T13172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 818.538670][T13172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 818.549569][T13172] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 818.566746][T13172] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 818.575959][T13172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.584062][T13172] usb 4-1: Product: syz [ 818.588256][T13172] usb 4-1: Manufacturer: syz [ 818.592884][T13172] usb 4-1: SerialNumber: syz [ 818.601146][T13172] usb 4-1: config 0 descriptor?? [ 818.603940][ T995] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 818.608764][T15408] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 818.625508][T13172] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input46 [ 818.774803][ T995] usb 2-1: Using ep0 maxpacket: 32 [ 818.789326][ T995] usb 2-1: unable to get BOS descriptor or descriptor too short [ 818.810238][ T995] usb 2-1: config 8 has an invalid interface number: 23 but max is 0 [ 818.820895][ T995] usb 2-1: config 8 has no interface number 0 [ 818.828130][ T995] usb 2-1: config 8 interface 23 has no altsetting 0 [ 818.835261][T10823] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 818.846109][ T995] usb 2-1: New USB device found, idVendor=10b9, idProduct=5001, bcdDevice=37.be [ 818.856012][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.875647][ T995] usb 2-1: Product: syz [ 818.886667][ T995] usb 2-1: Manufacturer: syz [ 818.896644][ T995] usb 2-1: SerialNumber: syz [ 818.911200][T10325] playstation 0003:054C:0BA0.001A: Failed to retrieve feature with reportID 18: -71 [ 818.922343][T10325] playstation 0003:054C:0BA0.001A: Failed to retrieve DualShock4 pairing info: -71 [ 818.941956][T10325] playstation 0003:054C:0BA0.001A: Failed to get MAC address from DualShock4 [ 818.966023][T10325] playstation 0003:054C:0BA0.001A: Failed to create dualshock4. [ 818.985719][ T30] kauditd_printk_skb: 641 callbacks suppressed [ 818.985731][ T30] audit: type=1326 audit(1779058606.575:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.027412][ T30] audit: type=1326 audit(1779058606.605:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.031074][T10325] playstation 0003:054C:0BA0.001A: probe with driver playstation failed with error -71 [ 819.059990][ T30] audit: type=1326 audit(1779058606.605:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.086741][T10823] usb 3-1: Using ep0 maxpacket: 8 [ 819.105834][ T30] audit: type=1326 audit(1779058606.605:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.117889][T10325] usb 5-1: USB disconnect, device number 89 [ 819.144481][T13172] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 819.144870][T10823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 819.167572][ T995] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in warm state. [ 819.177211][ T995] dvb-usb: bulk message failed: -22 (3/0) [ 819.183045][T10823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.191762][T10823] usb 3-1: Product: syz [ 819.196057][T10823] usb 3-1: Manufacturer: syz [ 819.201078][T10823] usb 3-1: SerialNumber: syz [ 819.210776][ T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.220725][ T30] audit: type=1326 audit(1779058606.605:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.247788][T10823] usb 3-1: config 0 descriptor?? [ 819.253064][ T995] dvbdev: DVB: registering new adapter (Humax/Coex DVB-T USB Stick 2.0 High Speed) [ 819.262614][ T995] usb 2-1: media controller created [ 819.279067][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.287479][ T30] audit: type=1326 audit(1779058606.605:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.312759][ T30] audit: type=1326 audit(1779058606.605:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.337274][ T30] audit: type=1326 audit(1779058606.605:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.337295][T13172] usb 1-1: Using ep0 maxpacket: 16 [ 819.361813][ T30] audit: type=1326 audit(1779058606.605:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.361880][ T30] audit: type=1326 audit(1779058606.615:20196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.2269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9ce59 code=0x7ffc0000 [ 819.378516][ T995] dvb-usb: bulk message failed: -22 (6/0) [ 819.398641][T13172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 3988, setting to 64 [ 819.435190][ T995] dvb-usb: bulk message failed: -22 (6/0) [ 819.436041][T13172] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.441049][ T995] dvb-usb: no frontend was attached by 'Humax/Coex DVB-T USB Stick 2.0 High Speed' [ 819.450976][T13172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.463440][ T995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 819.467992][T13172] usb 1-1: Product: syz [ 819.482501][ T995] dvb-usb: schedule remote query interval to 150 msecs. [ 819.490012][T10823] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 819.493759][T13172] usb 1-1: Manufacturer: syz [ 819.499431][ T995] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Speed successfully initialized and connected. [ 819.513053][T13172] usb 1-1: SerialNumber: syz [ 819.522152][T13172] usb 1-1: config 0 descriptor?? [ 819.532915][ T995] usb 2-1: USB disconnect, device number 85 [ 819.555388][T13172] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 819.564769][T10325] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 819.578448][T13172] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 819.637960][ T995] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Spe successfully deinitialized and disconnected. [ 819.724931][T10325] usb 5-1: Using ep0 maxpacket: 32 [ 819.739193][T10325] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 819.751336][T10325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.768298][T10325] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 819.778065][T10325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.786601][T10325] usb 5-1: Product: syz [ 819.790937][T10325] usb 5-1: Manufacturer: syz [ 819.796025][T10325] usb 5-1: SerialNumber: syz [ 819.805840][T10325] usb 5-1: config 0 descriptor?? [ 819.818225][T10325] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 820.136587][T13172] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 820.504315][T13167] usb 4-1: USB disconnect, device number 86 [ 820.571741][T13172] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 820.587369][T13172] em28xx 1-1:0.0: board has no eeprom [ 820.637579][T10325] gspca_sunplus: reg_r err -32 [ 820.873250][T13172] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 820.881111][T13172] em28xx 1-1:0.0: dvb set to bulk mode. [ 820.895802][ T10] em28xx 1-1:0.0: Binding DVB extension [ 820.954429][T13181] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 820.962111][T13167] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 821.113315][T13181] usb 2-1: Using ep0 maxpacket: 32 [ 821.118552][T13167] usb 4-1: Using ep0 maxpacket: 32 [ 821.126273][T13181] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 821.134825][T13167] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 821.143500][T13167] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 821.152149][T13181] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 821.160815][T13167] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 821.169824][T13181] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 821.179402][T13167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.189220][T13181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.198968][T13181] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.208732][T13167] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.218510][T13181] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.231537][T13167] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.244812][T13181] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 821.254248][T13167] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 821.263685][T13181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.271808][T13167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.281028][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.292748][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.303098][ T995] usb 1-1: USB disconnect, device number 85 [ 821.312953][T13181] usb 2-1: config 0 descriptor?? [ 821.319493][T13167] usb 4-1: config 0 descriptor?? [ 821.327472][ T995] em28xx 1-1:0.0: Disconnecting em28xx [ 821.343925][T10823] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 821.391501][ T10] em28xx 1-1:0.0: Registering input extension [ 821.402809][ T995] em28xx 1-1:0.0: Closing input extension [ 821.419650][ T995] em28xx 1-1:0.0: Freeing device [ 821.540455][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.548974][T15432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.549431][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.561120][T15432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.613534][T15432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.616401][T13167] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 821.630395][T15432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.634766][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.653099][T13181] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 821.663697][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.664546][T10325] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 821.712807][T15432] IPv6: addrconf: prefix option has invalid lifetime [ 821.785864][T10325] usb 4-1: USB disconnect, device number 87 [ 821.804049][T10325] usblp0: removed [ 821.874030][ T995] usb 3-1: USB disconnect, device number 99 [ 821.931605][T15435] IPv6: addrconf: prefix option has invalid lifetime [ 822.009462][T10325] usb 2-1: USB disconnect, device number 86 [ 822.037203][T10325] usblp1: removed [ 822.283310][ T995] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 822.403897][T10823] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 822.443379][ T995] usb 3-1: Using ep0 maxpacket: 32 [ 822.450189][ T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.463794][ T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.475104][ T995] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 822.484225][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.500614][ T995] usb 3-1: config 0 descriptor?? [ 822.509839][ T995] hub 3-1:0.0: USB hub found [ 822.575408][T10823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.588502][T10823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.598542][T10823] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 822.610405][T10823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.624053][T10823] usb 1-1: config 0 descriptor?? [ 822.808026][T10325] hid_parser_main: 4 callbacks suppressed [ 822.808048][T10325] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 822.837247][ T995] hub 3-1:0.0: 13 ports detected [ 822.843953][ T995] hub 3-1:0.0: insufficient power available to use all downstream ports [ 822.884865][ T5717] usb 5-1: USB disconnect, device number 90 [ 822.892903][T10325] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 823.047214][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.066335][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.075966][ T995] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 823.086519][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.094711][ T995] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 823.102214][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.118385][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.126203][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.134669][T10823] playstation 0003:054C:0BA0.001C: unknown main item tag 0x0 [ 823.142592][ T995] usbhid 3-1:0.0: can't add hid device: -71 [ 823.149173][ T24] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 823.156862][ T995] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 823.168679][T10823] playstation 0003:054C:0BA0.001C: hidraw1: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 823.204139][ T995] usb 3-1: USB disconnect, device number 100 [ 823.251086][T15457] binder: BINDER_SET_CONTEXT_MGR already set [ 823.259601][T15457] binder: 15456:15457 ioctl 4018620d 200000004a80 returned -16 [ 823.323303][ T5717] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 823.336266][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.347989][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 823.359762][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 823.371281][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 823.382929][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.400370][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 823.410368][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.419318][ T24] usb 2-1: Product: syz [ 823.424048][ T24] usb 2-1: Manufacturer: syz [ 823.428683][ T24] usb 2-1: SerialNumber: syz [ 823.438453][ T24] usb 2-1: config 0 descriptor?? [ 823.454132][T15469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 823.465608][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 823.493279][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 823.500944][ T5717] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 823.509859][ T5717] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 823.518937][ T5717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 823.528314][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.538470][ T5717] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 823.548300][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.563285][ T5717] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 823.572452][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.596851][ T5717] usb 5-1: config 0 descriptor?? [ 823.850939][T15473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.871500][T15473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.927437][T15473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.947241][ T5717] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 91 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 823.958942][T15473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.076249][T10325] usb 5-1: USB disconnect, device number 91 [ 824.106030][T10325] usblp0: removed [ 825.207397][T10823] playstation 0003:054C:0BA0.001C: Failed to retrieve feature with reportID 18: -71 [ 825.239193][T10823] playstation 0003:054C:0BA0.001C: Failed to retrieve DualShock4 pairing info: -71 [ 825.251441][T10823] playstation 0003:054C:0BA0.001C: Failed to get MAC address from DualShock4 [ 825.262545][T10823] playstation 0003:054C:0BA0.001C: Failed to create dualshock4. [ 825.282642][T10823] playstation 0003:054C:0BA0.001C: probe with driver playstation failed with error -71 [ 825.299793][T10823] usb 1-1: USB disconnect, device number 86 [ 825.638442][T13167] usb 2-1: USB disconnect, device number 87 [ 826.230412][T13167] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 826.403552][T13167] usb 2-1: Using ep0 maxpacket: 32 [ 826.417249][T13167] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 826.445316][T13167] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 826.475697][T13167] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 826.505403][T13167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 826.534158][T13167] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 826.566056][T13167] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 826.606865][T13167] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 826.637162][T13167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.681858][T13167] usb 2-1: config 0 descriptor?? [ 826.902429][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.952307][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.109594][T13167] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 827.125103][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.189466][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.292578][T15529] IPv6: addrconf: prefix option has invalid lifetime [ 827.409033][T10325] usb 2-1: USB disconnect, device number 88 [ 827.439094][T15542] netlink: 'syz.2.2304': attribute type 10 has an invalid length. [ 827.451898][T10325] usblp0: removed [ 827.556095][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.621381][T15542] team0: Port device netdevsim1 added [ 827.924514][T10325] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 827.968675][T15546] netlink: 'syz.2.2306': attribute type 6 has an invalid length. [ 827.983500][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 828.105542][T10325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.145335][T10325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.171000][T10325] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 828.195806][T10325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.230567][T10325] usb 2-1: config 0 descriptor?? [ 828.659568][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.689022][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.716177][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.745302][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.763651][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.791224][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.812920][T10325] playstation 0003:054C:0BA0.001D: unknown main item tag 0x0 [ 828.861785][T10325] playstation 0003:054C:0BA0.001D: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 828.885751][T15544] binder: BINDER_SET_CONTEXT_MGR already set [ 828.924409][T15544] binder: 15543:15544 ioctl 4018620d 200000004a80 returned -16 [ 829.353806][T15567] syzkaller0: entered promiscuous mode [ 829.361329][T15567] syzkaller0: entered allmulticast mode [ 829.378107][T15567] 0: reclassify loop, rule prio 0, protocol 800 [ 829.717094][T15578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 829.955130][T15587] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2321'. [ 829.977083][T15587] syzkaller0: entered promiscuous mode [ 830.025672][T15587] syzkaller0: entered allmulticast mode [ 830.074972][T15587] tc action pedit offset must be on 32 bit boundaries [ 830.648154][T10325] playstation 0003:054C:0BA0.001D: Failed to retrieve feature with reportID 18: -71 [ 830.681469][T10325] playstation 0003:054C:0BA0.001D: Failed to retrieve DualShock4 pairing info: -71 [ 830.723678][T10325] playstation 0003:054C:0BA0.001D: Failed to get MAC address from DualShock4 [ 830.767687][T10325] playstation 0003:054C:0BA0.001D: Failed to create dualshock4. [ 830.783107][T10325] playstation 0003:054C:0BA0.001D: probe with driver playstation failed with error -71 [ 830.855021][ T5638] Bluetooth: hci4: Malformed LE Event: 0x0d [ 830.873988][T13181] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 831.046036][T13181] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.068584][T13181] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.112658][T13181] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 831.131205][T13181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.254964][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 831.265105][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 831.352809][T13181] usb 1-1: usb_control_msg returned -32 [ 831.377725][T13181] usbtmc 1-1:16.0: can't read capabilities [ 831.585099][T10325] usb 2-1: USB disconnect, device number 89 [ 831.796197][ T5638] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 831.933810][T10325] usb 1-1: USB disconnect, device number 87 [ 832.080744][ T5638] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 832.206991][T13181] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 832.317542][T15685] syzkaller0: entered promiscuous mode [ 832.323081][T15685] syzkaller0: entered allmulticast mode [ 832.386292][T13181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 832.409661][T13181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 832.432164][T13181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 832.468836][T13181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 832.500618][T13181] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 832.521828][T13181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.540893][T13181] usb 3-1: Product: syz [ 832.553329][T13181] usb 3-1: Manufacturer: syz [ 832.570786][T13181] usb 3-1: SerialNumber: syz [ 832.602157][T13181] usb 3-1: config 0 descriptor?? [ 832.676483][T15700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.809852][T15704] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2373'. [ 832.842930][T13181] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 832.946152][T15707] syzkaller1: entered promiscuous mode [ 832.958090][T15707] syzkaller1: entered allmulticast mode [ 833.034478][T13181] usb 3-1: USB disconnect, device number 101 [ 833.116069][T15712] virt_wifi0: entered promiscuous mode [ 833.133993][T15712] virt_wifi0: entered allmulticast mode [ 833.375621][T15719] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 833.559079][T15708] syz.0.2374 (15708): drop_caches: 1 [ 834.023566][ T5717] IPVS: starting estimator thread 0... [ 834.163456][T15748] IPVS: using max 34 ests per chain, 81600 per kthread [ 834.286584][T15752] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 835.069684][T10325] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 835.253283][T10325] usb 3-1: Using ep0 maxpacket: 32 [ 835.265045][T10325] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 835.295691][T10325] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 835.324735][T10325] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 835.347732][T10325] usb 3-1: config 1 has no interface number 0 [ 835.354474][T10325] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.379889][T10325] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 835.407575][T10325] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 835.445729][T10325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.496125][T10325] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 835.508199][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'. [ 835.517444][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'. [ 835.702127][T10325] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 836.096108][ T5717] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 836.140876][T10823] usb 3-1: USB disconnect, device number 102 [ 836.157683][T10823] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 836.266129][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.282823][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 836.298606][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 836.310588][ T5717] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 836.324408][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.336655][ T5717] usb 2-1: config 0 descriptor?? [ 836.562476][ T5717] ath6kl: Failed to submit usb control message: -71 [ 836.576923][ T5717] ath6kl: unable to send the bmi data to the device: -71 [ 836.592898][ T5717] ath6kl: Unable to send get target info: -71 [ 836.600967][ T5717] ath6kl: Failed to init ath6kl core: -71 [ 836.608181][ T5717] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 836.621626][ T5717] usb 2-1: USB disconnect, device number 90 [ 836.628799][T10823] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 836.742726][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2425'. [ 836.783626][T10823] usb 1-1: Using ep0 maxpacket: 32 [ 836.797769][T10823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.806966][T10823] usb 1-1: config 0 has no interface number 0 [ 836.816072][T10823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.827509][T10823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.837695][T10823] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 836.847286][T10823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.864282][T10823] usb 1-1: config 0 descriptor?? [ 837.060507][T15839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2430'. [ 837.089896][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.125339][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.235172][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 837.606209][T10823] uclogic 0003:28BD:0094.001E: pen parameters not found [ 837.633252][T10823] uclogic 0003:28BD:0094.001E: interface is invalid, ignoring [ 837.661313][T15859] dvmrp8: entered allmulticast mode [ 837.819308][T10325] usb 1-1: USB disconnect, device number 88 [ 838.450649][T15892] netlink: 'syz.0.2452': attribute type 9 has an invalid length. [ 838.474490][T15892] netlink: 'syz.0.2452': attribute type 6 has an invalid length. [ 838.597009][ T30] kauditd_printk_skb: 813 callbacks suppressed [ 838.597026][ T30] audit: type=1326 audit(1779058626.185:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.630757][ T30] audit: type=1326 audit(1779058626.185:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.655801][ T30] audit: type=1326 audit(1779058626.185:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.665703][T10325] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 838.683679][ T30] audit: type=1326 audit(1779058626.185:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.758827][ T30] audit: type=1326 audit(1779058626.185:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.830886][ T30] audit: type=1326 audit(1779058626.185:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.885898][ T30] audit: type=1326 audit(1779058626.185:21016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.887739][T10325] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 838.951280][ T30] audit: type=1326 audit(1779058626.185:21017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 838.961531][T10325] usb 4-1: config 1 has no interface number 0 [ 839.001391][T10325] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 839.021414][T10325] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 839.028356][ T30] audit: type=1326 audit(1779058626.185:21018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18c79ce59 code=0x7ffc0000 [ 839.045472][T10325] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 839.088845][T10325] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 839.100482][T10325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.112735][T10325] usb 4-1: Product: syz [ 839.121710][T10325] usb 4-1: Manufacturer: syz [ 839.130960][T10325] usb 4-1: SerialNumber: syz [ 839.148605][T15887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 839.156221][T15887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 839.167115][T10325] usb 4-1: Error in usbnet_get_endpoints (-22) [ 839.399999][T10325] usb 4-1: USB disconnect, device number 88 [ 839.913924][T15933] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 839.921796][T15933] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 839.932188][T15933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2469'. [ 839.941806][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'. [ 839.973873][T15933] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 839.982737][T15933] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 839.996355][T15933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2469'. [ 840.006001][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'. [ 840.189204][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 840.209585][T15945] vlan3: entered promiscuous mode [ 840.216690][T15945] gretap0: entered promiscuous mode [ 840.753305][ T5717] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 840.913263][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 840.927482][ T5717] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 840.944916][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.969581][ T5717] usb 3-1: Product: syz [ 840.984928][ T5717] usb 3-1: Manufacturer: syz [ 840.989903][ T5717] usb 3-1: SerialNumber: syz [ 841.007703][ T5717] usb 3-1: config 0 descriptor?? [ 841.030909][ T5717] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 841.041518][ T5717] pctv452e: pctv452e_power_ctrl: 1 [ 841.041518][ T5717] [ 841.058209][ T5717] usb 3-1: selecting invalid altsetting 3 [ 841.075909][ T5717] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 841.075909][ T5717] [ 841.100108][ T5717] dvb-usb: bulk message failed: -22 (5/0) [ 841.124443][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.147765][ T5717] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 841.165325][ T5717] usb 3-1: media controller created [ 841.199828][ T5717] dvb-usb: bulk message failed: -22 (8/0) [ 841.232416][ T5717] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 841.262765][ T5717] dvb-usb: MAC address reading failed. [ 841.338415][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.398594][T15966] C: renamed from veth1_to_team [ 841.420483][T15966] netlink: 'syz.4.2482': attribute type 8 has an invalid length. [ 841.451874][T15966] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 841.483327][ T5717] DVB: Unable to find symbol stb0899_attach() [ 841.498227][ T5717] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 841.634660][ T5717] rc_core: IR keymap rc-tt-1500 not found [ 841.655312][ T5717] Registered IR keymap rc-empty [ 841.673060][ T5717] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 841.720272][ T5717] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 841.765249][ T5717] dvb-usb: schedule remote query interval to 100 msecs. [ 841.788056][ T5717] pctv452e: pctv452e_power_ctrl: 0 [ 841.788056][ T5717] [ 841.820296][ T5717] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 841.866393][ T5717] usb 3-1: USB disconnect, device number 103 [ 841.902364][T15975] binder: 15974:15975 ioctl 40305829 0 returned -22 [ 842.054789][ T5717] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 842.137148][T15979] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2487'. [ 842.180169][T15979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 842.753257][ T5717] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 842.906016][ T5717] usb 2-1: config 0 has no interfaces? [ 842.921415][ T5717] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.931272][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.940272][ T5717] usb 2-1: Product: syz [ 842.944886][ T5717] usb 2-1: Manufacturer: syz [ 842.962019][ T5717] usb 2-1: config 0 descriptor?? [ 843.083697][T13167] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 843.180065][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.190678][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.246414][T13167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 843.258799][T13167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58508, setting to 1024 [ 843.271631][T13167] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 843.281314][T13167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.298640][T16025] [ 843.300206][T13167] usb 1-1: config 0 descriptor?? [ 843.300987][T16025] ============================================ [ 843.307359][T16012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 843.312076][T16025] WARNING: possible recursive locking detected [ 843.325365][T16025] syzkaller #0 Tainted: G L [ 843.331378][T16025] -------------------------------------------- [ 843.337575][T16025] syz.1.2495/16025 is trying to acquire lock: [ 843.343642][T16025] ffffffff8f3d1d10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 843.353959][T16025] [ 843.353959][T16025] but task is already holding lock: [ 843.361311][T16025] ffffffff8f3d1d10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 843.371488][T16025] [ 843.371488][T16025] other info that might help us debug this: [ 843.379530][T16025] Possible unsafe locking scenario: [ 843.379530][T16025] [ 843.386983][T16025] CPU0 [ 843.390324][T16025] ---- [ 843.393594][T16025] lock(qp_broker_list.mutex); [ 843.398470][T16025] lock(qp_broker_list.mutex); [ 843.403314][T16025] [ 843.403314][T16025] *** DEADLOCK *** [ 843.403314][T16025] [ 843.411446][T16025] May be due to missing lock nesting notation [ 843.411446][T16025] [ 843.419817][T16025] 1 lock held by syz.1.2495/16025: [ 843.424952][T16025] #0: ffffffff8f3d1d10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 843.435566][T16025] [ 843.435566][T16025] stack backtrace: [ 843.441446][T16025] CPU: 1 UID: 0 PID: 16025 Comm: syz.1.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.441469][T16025] Tainted: [L]=SOFTLOCKUP [ 843.441475][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 843.441486][T16025] Call Trace: [ 843.441493][T16025] [ 843.441500][T16025] dump_stack_lvl+0xe8/0x150 [ 843.441520][T16025] print_deadlock_bug+0x279/0x290 [ 843.441542][T16025] __lock_acquire+0x253f/0x2cf0 [ 843.441563][T16025] ? is_bpf_text_address+0x292/0x2b0 [ 843.441594][T16025] ? is_bpf_text_address+0x26/0x2b0 [ 843.441610][T16025] ? kernel_text_address+0xa5/0xe0 [ 843.441632][T16025] ? __kernel_text_address+0xd/0x30 [ 843.441655][T16025] ? vmci_qp_broker_detach+0x117/0xf20 [ 843.441672][T16025] lock_acquire+0x106/0x350 [ 843.441687][T16025] ? vmci_qp_broker_detach+0x117/0xf20 [ 843.441711][T16025] __mutex_lock+0x1a3/0x1550 [ 843.441734][T16025] ? vmci_qp_broker_detach+0x117/0xf20 [ 843.441752][T16025] ? kasan_save_track+0x4f/0x80 [ 843.441772][T16025] ? kasan_save_track+0x3e/0x80 [ 843.441790][T16025] ? kasan_save_free_info+0x46/0x50 [ 843.441807][T16025] ? __kasan_slab_free+0x5c/0x80 [ 843.441827][T16025] ? kfree+0x1c5/0x640 [ 843.441847][T16025] ? vmci_ctx_put+0x5ef/0xc40 [ 843.441904][T16025] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 843.441929][T16025] ? vmci_datagram_dispatch+0x450/0xc60 [ 843.441950][T16025] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 843.441969][T16025] ? vmci_host_close+0x98/0x160 [ 843.441985][T16025] ? vmci_qp_broker_detach+0x117/0xf20 [ 843.442000][T16025] ? exit_to_user_mode_loop+0xf3/0x4d0 [ 843.442022][T16025] ? __pfx___mutex_lock+0x10/0x10 [ 843.442049][T16025] vmci_qp_broker_detach+0x117/0xf20 [ 843.442069][T16025] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 843.442085][T16025] ? kasan_quarantine_put+0xbb/0x1f0 [ 843.442108][T16025] ? lockdep_hardirqs_on+0x7a/0x110 [ 843.442132][T16025] ? kfree+0x1c5/0x640 [ 843.442148][T16025] ? vmci_ctx_put+0x5ef/0xc40 [ 843.442166][T16025] ? vmci_ctx_put+0x141/0xc40 [ 843.442187][T16025] vmci_ctx_put+0x64e/0xc40 [ 843.442206][T16025] ? __pfx___schedule+0x10/0x10 [ 843.442225][T16025] ? vmci_ctx_put+0x141/0xc40 [ 843.442248][T16025] ? __pfx_vmci_ctx_put+0x10/0x10 [ 843.442268][T16025] ? preempt_schedule_thunk+0x16/0x30 [ 843.442290][T16025] ? preempt_schedule_common+0x82/0xd0 [ 843.442313][T16025] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 843.442337][T16025] vmci_datagram_dispatch+0x450/0xc60 [ 843.442360][T16025] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 843.442388][T16025] vmci_qp_broker_detach+0x8dd/0xf20 [ 843.442408][T16025] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 843.442424][T16025] ? kasan_quarantine_put+0xbb/0x1f0 [ 843.442445][T16025] ? kfree+0x1c5/0x640 [ 843.442462][T16025] ? vmci_ctx_put+0x5ef/0xc40 [ 843.442480][T16025] ? vmci_ctx_put+0x141/0xc40 [ 843.442500][T16025] vmci_ctx_put+0x64e/0xc40 [ 843.442523][T16025] ? vmci_ctx_put+0x141/0xc40 [ 843.442543][T16025] ? __pfx_vmci_ctx_put+0x10/0x10 [ 843.442567][T16025] vmci_host_close+0x98/0x160 [ 843.442583][T16025] ? __pfx_vmci_host_close+0x10/0x10 [ 843.442598][T16025] __fput+0x44f/0xa60 [ 843.442619][T16025] task_work_run+0x1d9/0x270 [ 843.442641][T16025] ? __pfx_task_work_run+0x10/0x10 [ 843.442667][T16025] exit_to_user_mode_loop+0xf3/0x4d0 [ 843.442681][T16025] ? rcu_is_watching+0x15/0xb0 [ 843.442700][T16025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.442716][T16025] do_syscall_64+0x33e/0xf80 [ 843.442737][T16025] ? trace_irq_disable+0x3b/0x140 [ 843.442759][T16025] ? clear_bhb_loop+0x40/0x90 [ 843.442777][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.442795][T16025] RIP: 0033:0x7fdfd859ce59 [ 843.442811][T16025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.442825][T16025] RSP: 002b:00007fdfd67f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 843.442843][T16025] RAX: 0000000000000000 RBX: 00007fdfd8816090 RCX: 00007fdfd859ce59 [ 843.442854][T16025] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 843.442865][T16025] RBP: 00007fdfd8632d6f R08: 0000000000000000 R09: 0000000000000000 [ 843.442875][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.442885][T16025] R13: 00007fdfd8816128 R14: 00007fdfd8816090 R15: 00007fdfd893fa48 [ 843.442902][T16025] [ 843.870214][T13167] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x1 [ 843.877483][T13167] hid-steam 0003:28DE:1142.001F: item fetching failed at offset 4/5 [ 843.885925][T13167] hid-steam 0003:28DE:1142.001F: steam_probe:parse of hid interface failed [ 843.895002][T13167] hid-steam 0003:28DE:1142.001F: probe with driver hid-steam failed with error -22 [ 844.012232][T15941] syz.2.2471 (15941) used greatest stack depth: 18200 bytes left [ 844.070163][T10823] usb 1-1: USB disconnect, device number 89