last executing test programs: 1m54.765291114s ago: executing program 3 (id=17130): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x5e23, 0x8ae5, @private2, 0x1}, r1, 0x4}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m54.406308898s ago: executing program 3 (id=17133): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m53.241941431s ago: executing program 3 (id=17144): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 1m52.993847961s ago: executing program 3 (id=17147): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 1m51.957429476s ago: executing program 3 (id=17153): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000540)="8e16", 0x5dc}], 0x2}, 0x14) 1m51.534387482s ago: executing program 3 (id=17154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) shutdown(r0, 0x2) 1m50.698283851s ago: executing program 32 (id=17154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) shutdown(r0, 0x2) 4.69959618s ago: executing program 1 (id=17917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x10000, 0x200000004, 0x7, 0x6811221d, 0x100000000, 0x8000000000000001, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7, 0x3}, 0x481, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3502, 0x3, 0x0, 0x72, 0x9, 0x3}}, 0xe8) socket$alg(0x26, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.50125086s ago: executing program 1 (id=17919): set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 4.194237813s ago: executing program 2 (id=17924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="3ef30f1efa0fd34d0e0f00ce0f20e06635000004000f22e03e660f3a2160fb1550b85a008ee8eac80e6200263e670fc71d9f000000ba200066ed", 0x3a}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.644275859s ago: executing program 2 (id=17928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x2, 0x3, 0x0, 0x80000001, 0x80000001}}, {0x4}}]}]}, 0x54}}, 0x0) 3.246548567s ago: executing program 2 (id=17932): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) close(r0) unlink(&(0x7f0000000140)='./cgroup\x00') 2.830451239s ago: executing program 4 (id=17935): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @empty, 0x3}, r3}}, 0x30) 2.619451422s ago: executing program 4 (id=17938): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000c00), 0x12) 2.542665222s ago: executing program 1 (id=17939): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x1, 0xf0}, 0x1}, 0x18) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r3, 0x0, {}, 0x1}, 0x18) 2.380495412s ago: executing program 4 (id=17940): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, &(0x7f0000000080)=0x5, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 2.247482931s ago: executing program 1 (id=17941): getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2000051b) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x6, 0xc211, 0x0, 0x0}], 0x2}) 2.166286682s ago: executing program 0 (id=17943): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.161260638s ago: executing program 4 (id=17944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) close(0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.821568877s ago: executing program 0 (id=17945): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x3bb}], 0x1}}], 0x2, 0x2090) 1.721240262s ago: executing program 5 (id=17946): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010826bd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00000100072800fa08000a00", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.658274s ago: executing program 4 (id=17947): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = inotify_init1(0x0) read(r0, 0x0, 0x20) 1.540403207s ago: executing program 0 (id=17948): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffdcd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 1.5314375s ago: executing program 2 (id=17949): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x377}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x60003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca4, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x1b, 0x0, 0x0) 1.335205191s ago: executing program 5 (id=17950): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000007d80)={r3, 0x101, 0x40, 0xfff}, &(0x7f0000007dc0)=0x10) 1.181412888s ago: executing program 0 (id=17951): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) r1 = io_uring_setup(0x64e0, &(0x7f0000000a00)={0x0, 0x25f7, 0x40, 0x2, 0x38c}) close(r1) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) close(0x3) 1.022213205s ago: executing program 5 (id=17952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x20, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 1.01613641s ago: executing program 2 (id=17953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x10}, {0xe, 0xd}}}, 0x24}}, 0x8000) 867.322227ms ago: executing program 0 (id=17954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x7ffffffd, 0x4, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xa, 0xfff2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x18}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe4fb}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 624.390838ms ago: executing program 2 (id=17955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 451.594534ms ago: executing program 1 (id=17956): r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) shmctl$SHM_LOCK(r0, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(r0, 0xc) 442.915807ms ago: executing program 5 (id=17957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730487eee8172791f5a13f8f2cb158a25524756fe3dd33b90bd9da98df377e6e2015b9e250d6dd3dd25aa02a786b98457e149ad71d4a5473b46580e7f2141b84ec449817584abc8a12400d337fa973005d5e30f83e59461f80a8c4e79c375ed9322b842d2f566", 0xb1}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b4331856000094b93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}, {&(0x7f0000000140)="25e173077922e3c2fab4d5d1d234c5d8bee32ab8e1e370027784284b", 0x1c}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24005810}], 0x1, 0x4a050) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 193.590918ms ago: executing program 1 (id=17958): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) 132.986423ms ago: executing program 5 (id=17959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 131.659581ms ago: executing program 4 (id=17960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc080}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) 24.13642ms ago: executing program 0 (id=17961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 0s ago: executing program 5 (id=17962): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): detected capacity change from 0 to 7 [ 1594.075388][ T5634] usb 1-1: USB disconnect, device number 120 [ 1594.131297][T10315] fido_id[10315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1594.300394][T16480] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1594.505481][T16480] usb 2-1: Using ep0 maxpacket: 32 [ 1594.542099][T16480] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1594.593171][T16480] usb 2-1: config 0 has no interface number 0 [ 1594.643202][T16480] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1594.707187][T16480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.772146][T16480] usb 2-1: Product: syz [ 1594.798462][T16480] usb 2-1: Manufacturer: syz [ 1594.816009][T16480] usb 2-1: SerialNumber: syz [ 1594.852819][T16480] usb 2-1: config 0 descriptor?? [ 1594.884536][T16480] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1594.990245][ T4083] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1595.152238][ T4083] usb 5-1: config 0 has no interfaces? [ 1595.178140][T16480] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1595.201974][ T4083] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1595.237357][ T4083] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1595.270344][ T4083] usb 5-1: Manufacturer: syz [ 1595.305245][ T4083] usb 5-1: config 0 descriptor?? [ 1595.315102][T16480] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1595.666854][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1595.676646][T16480] usb 2-1: USB disconnect, device number 121 [ 1595.774073][T16480] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1595.794998][T10321] netlink: 'syz.4.16800': attribute type 27 has an invalid length. [ 1595.847574][ T5634] usb 5-1: USB disconnect, device number 127 [ 1595.885771][T16480] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1595.928984][T16480] quatech2 2-1:0.51: device disconnected [ 1596.184726][ T4092] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1596.382192][ T4092] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.419152][ T4092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1596.474225][ T4092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1596.511219][ T4092] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1596.609555][ T4092] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1596.644563][ T4092] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1596.673672][ T4092] usb 1-1: Manufacturer: syz [ 1596.703111][ T4092] usb 1-1: config 0 descriptor?? [ 1597.222893][ T4092] rc_core: IR keymap rc-hauppauge not found [ 1597.233723][ T4092] Registered IR keymap rc-empty [ 1597.248769][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.295681][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.345569][ T4092] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1597.397248][ T4092] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input148 [ 1597.450264][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.490465][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.524723][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.564011][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.626862][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.663877][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.691274][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.742904][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.772702][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.820964][ T4092] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1597.848247][ T4092] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1597.874484][ T4092] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1597.916404][ T4092] usb 1-1: USB disconnect, device number 121 [ 1597.940492][ T5634] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1598.131826][ T5634] usb 2-1: Using ep0 maxpacket: 32 [ 1598.142193][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.155420][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.166646][ T5634] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1598.197485][ T5634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.238981][ T5634] usb 2-1: config 0 descriptor?? [ 1598.709408][ T5634] savu 0003:1E7D:2D5A.0090: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1598.811199][T10393] netlink: 566 bytes leftover after parsing attributes in process `syz.3.16826'. [ 1598.985953][ T4092] usb 2-1: USB disconnect, device number 122 [ 1599.554449][ T5634] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1599.754066][ T5634] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.773334][ T5634] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1599.789146][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.798249][ T5634] usb 1-1: Product: syz [ 1599.802908][ T5634] usb 1-1: Manufacturer: syz [ 1599.807664][ T5634] usb 1-1: SerialNumber: syz [ 1599.818290][ T5634] usb 1-1: config 0 descriptor?? [ 1599.834113][ T5634] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1600.261825][ T4088] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1600.430634][ T4088] usb 5-1: Using ep0 maxpacket: 32 [ 1600.445969][ T4088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.461220][ T4088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.475374][ T4088] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1600.499909][ T4088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.549830][ T4088] usb 5-1: config 0 descriptor?? [ 1600.641442][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.659484][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.686977][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.702694][ T5634] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input149 [ 1600.717554][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.737144][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.766781][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.784193][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.795378][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.823566][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.855383][T16480] hid-generic 0006:0008:0001.0091: unknown main item tag 0x0 [ 1600.884972][T16480] hid-generic 0006:0008:0001.0091: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1600.964004][ T4083] usb 1-1: USB disconnect, device number 122 [ 1601.058512][ T4088] savu 0003:1E7D:2D5A.0092: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1601.204146][T10435] fido_id[10435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1601.386384][ T4088] usb 5-1: USB disconnect, device number 2 [ 1601.532067][T10438] fido_id[10438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1602.210190][ T1709] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1602.370571][ T1709] usb 1-1: Using ep0 maxpacket: 32 [ 1602.389516][ T1709] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1602.419431][ T1709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.462557][ T1709] usb 1-1: config 0 descriptor?? [ 1602.501343][ T1709] as10x_usb: device has been detected [ 1602.528611][ T1709] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1602.586533][ T1709] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1602.713277][ T1709] as10x_usb: error during firmware upload part1 [ 1602.736360][ T1709] Registered device nBox DVB-T Dongle [ 1602.754377][ T1709] usb 1-1: USB disconnect, device number 123 [ 1602.869796][ T1709] Unregistered device nBox DVB-T Dongle [ 1602.873141][T10459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.901355][ T1709] as10x_usb: device has been disconnected [ 1602.973236][T10460] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1603.941535][T10473] netlink: 428 bytes leftover after parsing attributes in process `syz.3.16858'. [ 1603.980702][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16858'. [ 1603.993411][T10477] netlink: 'syz.0.16860': attribute type 1 has an invalid length. [ 1604.028015][T10477] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.16860'. [ 1604.821657][ T4088] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1605.020198][ T4088] usb 5-1: Using ep0 maxpacket: 16 [ 1605.043203][ T4088] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1605.092089][ T4088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.114527][ T4088] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1605.196942][ T4088] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1605.209979][ T4088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.250618][ T4088] usb 5-1: Product: syz [ 1605.285449][ T4088] usb 5-1: Manufacturer: syz [ 1605.299705][ T4088] usb 5-1: SerialNumber: syz [ 1605.352075][ T4088] usb 5-1: 0:2 : does not exist [ 1606.208835][ T4088] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1606.387849][ T4088] usb 5-1: USB disconnect, device number 3 [ 1607.461909][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.468403][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.068787][T10564] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16894'. [ 1610.296533][T10614] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16916'. [ 1611.180492][ T4084] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1611.350101][ T4084] usb 1-1: Using ep0 maxpacket: 32 [ 1611.368443][ T4084] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1611.396467][ T4084] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1611.436413][ T4084] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1611.480434][ T4084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1611.512273][ T4084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1611.542632][ T4084] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1611.569608][T10646] input: syz1 as /devices/virtual/input/input150 [ 1611.590267][ T4084] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1611.620215][ T4084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.657129][ T4084] usb 1-1: config 0 descriptor?? [ 1611.860442][T16480] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1611.920664][ T4084] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1612.008506][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1612.008524][ T30] audit: type=1326 audit(1779146891.566:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10653 comm="syz.3.16934" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa41db9ce59 code=0x0 [ 1612.042458][T16480] usb 2-1: Using ep0 maxpacket: 8 [ 1612.056210][T16480] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1612.070155][T16480] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1612.081489][T16480] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1612.093329][T16480] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1612.105909][T16480] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.147137][T16480] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1612.159795][ T5634] usb 1-1: USB disconnect, device number 124 [ 1612.177480][ T5634] usblp0: removed [ 1612.198977][T16480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.079453][T10674] usbtmc 2-1:16.0: simple control status returned 9f [ 1613.283165][ T4088] usb 2-1: USB disconnect, device number 123 [ 1613.310868][T16480] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1613.475500][T16480] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1613.502066][T16480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.547357][T16480] usb 5-1: Product: syz [ 1613.570798][T16480] usb 5-1: Manufacturer: syz [ 1613.582102][T16480] usb 5-1: SerialNumber: syz [ 1613.738440][T10684] No such timeout policy "syz1" [ 1613.822840][T16480] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1613.881973][T16480] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1613.939198][T16480] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1613.963799][T16480] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1614.054895][T16480] usb 5-1: USB disconnect, device number 4 [ 1614.418771][T10696] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16949'. [ 1614.800110][ T4084] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1614.983123][ T4084] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1615.000342][ T1709] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1615.018454][ T4084] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1615.042822][ T4084] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.080192][ T4084] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1615.110757][ T4084] usb 1-1: config 1 has no interface number 0 [ 1615.130336][ T4084] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1615.166484][ T4084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.190307][ T1709] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 1615.255236][ T1709] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1615.284212][ T4084] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1615.320630][ T1709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.361977][ T1709] usb 2-1: Product: syz [ 1615.368358][ T1709] usb 2-1: Manufacturer: syz [ 1615.386529][ T1709] usb 2-1: SerialNumber: syz [ 1615.429773][ T4084] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 1615.464582][ T4084] snd_usb_pod 1-1:1.1: invalid control EP [ 1615.492111][ T4084] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1615.520709][ T4084] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1615.541076][ T4084] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1615.690823][ T4084] usb 1-1: USB disconnect, device number 125 [ 1615.700214][ T1709] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1615.742685][ T1709] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1615.788703][ T1709] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1615.830174][ T1709] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1615.874200][ T1709] usb 2-1: USB disconnect, device number 124 [ 1616.763223][T10736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.810191][ T4084] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1617.844794][T10757] loop3: detected capacity change from 0 to 6 [ 1617.960406][ T4084] usb 1-1: Using ep0 maxpacket: 16 [ 1617.975381][ T4084] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 1618.029436][ T4084] usb 1-1: config 0 has no interface number 1 [ 1618.068346][ T4084] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1618.116822][ T4084] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1618.150281][ T4084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.173860][ T4084] usb 1-1: Product: syz [ 1618.191608][ T4084] usb 1-1: Manufacturer: syz [ 1618.210197][ T4084] usb 1-1: SerialNumber: syz [ 1618.237902][ T4084] usb 1-1: config 0 descriptor?? [ 1618.280364][ T4088] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1618.288194][ T4084] usb 1-1: selecting invalid altsetting 0 [ 1618.315542][ T4084] usb 1-1: Could not set interface, error -22 [ 1618.458014][T10757] Dev loop3: unable to read RDB block 6 [ 1618.474803][T10757] loop3: unable to read partition table [ 1618.486925][ T4088] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1618.496530][T10757] loop3: partition table beyond EOD, truncated [ 1618.508531][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1618.538159][T10757] loop_reread_partitions: partition scan of loop3 (þ被xüŸÑø éÚ¬§ÊdƤ´à–ƒÝ¡¯¨) failed (rc=-5) [ 1618.561507][T16480] usb 1-1: USB disconnect, device number 126 [ 1618.575788][ T4088] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1618.661660][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1618.718999][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1618.775639][ T4088] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1618.806218][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1618.853175][ T4088] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1618.898484][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1618.960207][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1618.986628][ T4088] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1619.003469][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1619.040413][ T4088] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1619.068960][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1619.080921][ T4088] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1619.103522][ T4088] usb 2-1: string descriptor 0 read error: -22 [ 1619.112850][ T4088] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1619.131597][ T4088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.196737][ T4088] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1619.489471][T10780] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16984'. [ 1621.511871][T16480] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1621.553037][ T4088] usb 2-1: USB disconnect, device number 125 [ 1621.702367][T16480] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.734380][T16480] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.773601][T16480] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1621.811850][T16480] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1621.829941][T16480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.850255][T16480] usb 1-1: Product: syz [ 1621.858882][T16480] usb 1-1: Manufacturer: syz [ 1621.880070][T16480] usb 1-1: SerialNumber: syz [ 1622.072360][T10813] netlink: 7 bytes leftover after parsing attributes in process `syz.4.16996'. [ 1622.931731][T16480] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 1622.963254][T16480] cdc_ncm 1-1:1.0: bind() failure [ 1622.988435][T16480] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1623.005307][T16480] cdc_ncm 1-1:1.1: bind() failure [ 1623.033393][T16480] usb 1-1: USB disconnect, device number 127 [ 1623.790672][T10850] netlink: 'syz.3.17012': attribute type 29 has an invalid length. [ 1623.856047][T10852] netlink: 'syz.3.17012': attribute type 29 has an invalid length. [ 1625.680362][ T4081] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1625.872478][ T4081] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 1625.906995][ T4081] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.961252][ T4081] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1625.991530][ T4081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.023410][ T4081] usb 5-1: Product: syz [ 1626.043558][ T4081] usb 5-1: Manufacturer: syz [ 1626.063342][ T4081] usb 5-1: SerialNumber: syz [ 1626.114321][ T4081] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input151 [ 1626.304808][ T4981] bcm5974 5-1:1.0: could not read from device [ 1626.397252][ T4981] bcm5974 5-1:1.0: could not read from device [ 1626.485723][ T4081] bcm5974 5-1:1.0: could not read from device [ 1626.565045][ T4081] input: failed to attach handler mousedev to device input151, error: -5 [ 1626.609548][ T4981] bcm5974 5-1:1.0: could not read from device [ 1626.633174][ T4081] usb 5-1: USB disconnect, device number 5 [ 1626.673908][ T4981] bcm5974 5-1:1.0: could not read from device [ 1626.864598][T10915] IPv6: A: Disabled Multicast RS [ 1627.747021][T10926] binder: 10925:10926 ioctl c0306201 200000001a80 returned -14 [ 1627.880541][ T4081] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1628.061748][ T4081] usb 1-1: Using ep0 maxpacket: 32 [ 1628.092951][ T4081] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1628.139014][ T4081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.179286][ T4081] usb 1-1: Product: syz [ 1628.197850][ T4081] usb 1-1: Manufacturer: syz [ 1628.212724][ T4081] usb 1-1: SerialNumber: syz [ 1628.242173][ T4081] usb 1-1: config 0 descriptor?? [ 1628.274947][ T4081] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1628.324322][ T4081] dvb-usb: bulk message failed: -22 (4/0) [ 1628.370058][ T4081] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1628.402740][ T4081] dvb-usb: bulk message failed: -22 (5/0) [ 1628.429730][ T4081] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1628.525961][ T4081] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1628.560734][ T4081] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1628.574626][ T4081] usb 1-1: media controller created [ 1628.639294][ T4081] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.748553][ T4081] usb 1-1: selecting invalid altsetting 3 [ 1628.785536][ T4081] ttusb2: set interface to alts=3 failed [ 1628.929594][ T4081] DVB: Unable to find symbol tda10086_attach() [ 1628.952091][ T4081] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1628.975101][ T4081] dvb-usb: bulk message failed: -22 (4/0) [ 1629.010470][ T4081] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1629.060814][ T4081] dvb-usb: bulk message failed: -22 (5/0) [ 1629.087654][ T4081] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1629.129000][ T4081] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1629.178466][ T4081] usb 1-1: USB disconnect, device number 2 [ 1629.290554][ T1709] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1629.299654][ T4081] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1629.487422][ T1709] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1629.524199][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.557917][ T1709] usb 4-1: Product: syz [ 1629.570335][ T1709] usb 4-1: Manufacturer: syz [ 1629.588424][ T1709] usb 4-1: SerialNumber: syz [ 1629.997305][ T1709] rtl8150 4-1:1.0: couldn't reset the device [ 1630.022129][ T1709] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1630.070687][ T1709] usb 4-1: USB disconnect, device number 109 [ 1632.406452][ T4088] hid_parser_main: 7 callbacks suppressed [ 1632.406507][ T4088] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 1632.498492][ T4088] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1633.440533][ T4088] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1633.663450][ T4088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1633.679514][ T4088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.712970][ T4088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.767879][ T4088] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1633.806209][ T4088] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1633.832079][ T4088] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1633.861809][ T4088] usb 5-1: Manufacturer: syz [ 1633.889972][ T4088] usb 5-1: config 0 descriptor?? [ 1634.173862][T11031] input: syz1 as /devices/virtual/input/input152 [ 1634.320785][T16480] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1634.346821][ T4088] appleir 0003:05AC:8243.0094: unknown main item tag 0x0 [ 1634.404848][ T4088] appleir 0003:05AC:8243.0094: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1634.515177][T16480] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1634.555487][T16480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1634.578616][T16480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1634.612366][T16480] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1634.642743][ T4088] usb 5-1: USB disconnect, device number 6 [ 1634.683196][T16480] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1634.724683][T16480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.762830][T16480] usb 4-1: config 0 descriptor?? [ 1634.802676][T11037] fido_id[11037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1635.256945][T16480] plantronics 0003:047F:FFFF.0095: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1635.465186][T11051] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1635.562373][T16480] usb 4-1: USB disconnect, device number 110 [ 1636.427392][T11066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1636.436439][T11066] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1636.710121][ T4083] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1636.880152][ T4083] usb 1-1: Using ep0 maxpacket: 16 [ 1636.913120][ T4083] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.955266][ T4083] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.001819][ T4083] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.048954][ T4083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.088293][ T4083] usb 1-1: Product: syz [ 1637.108841][ T4083] usb 1-1: Manufacturer: syz [ 1637.129630][ T4083] usb 1-1: SerialNumber: syz [ 1637.183699][ T4083] usb 1-1: 0:2 : does not exist [ 1637.386555][ T4083] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1637.485364][T11084] tipc: Resetting bearer [ 1637.559155][ T4083] usb 1-1: USB disconnect, device number 3 [ 1637.714797][T30382] udevd[30382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.778452][T11091] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.17103'. [ 1637.980433][ T1709] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1638.156630][ T1709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.200507][ T1709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.231324][ T1709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1638.270089][ T1709] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1638.300361][ T1709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.335609][ T1709] usb 4-1: config 0 descriptor?? [ 1638.812420][ T1709] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1639.092815][ T4092] usb 4-1: USB disconnect, device number 111 [ 1641.033457][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17118'. [ 1641.942839][T16480] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1642.143282][T16480] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1642.168520][T16480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.209952][T16480] usb 2-1: config 0 descriptor?? [ 1642.258323][T16480] cp210x 2-1:0.0: cp210x converter detected [ 1642.876800][T16480] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1642.917725][T16480] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1643.025155][T16480] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1643.115619][T16480] usb 2-1: USB disconnect, device number 126 [ 1643.233465][T16480] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1643.286620][T16480] cp210x 2-1:0.0: device disconnected [ 1643.950508][T11172] syz.3.17133 (11172): drop_caches: 2 [ 1644.890649][ T4088] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1645.060511][ T4088] usb 2-1: Using ep0 maxpacket: 16 [ 1645.078114][ T4088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.103567][ T4088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1645.127267][ T4088] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1645.144736][ T4088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.162169][ T4088] usb 2-1: Product: syz [ 1645.166737][ T4088] usb 2-1: Manufacturer: syz [ 1645.172083][ T4088] usb 2-1: SerialNumber: syz [ 1645.201612][ T4088] usb 2-1: 0:2 : does not exist [ 1645.435016][ T4088] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1645.543384][ T4088] usb 2-1: USB disconnect, device number 127 [ 1645.634750][T30382] udevd[30382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.734718][T23596] bond0: (slave syz_tun): Releasing backup interface [ 1645.743750][T23596] syz_tun (unregistering): left allmulticast mode [ 1645.761557][T16480] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1645.941139][T16480] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.978932][T16480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1646.027413][T16480] usb 5-1: config 1 has no interface number 0 [ 1646.057274][T16480] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1646.072067][T16480] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1646.095764][T16480] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1646.124095][T16480] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1646.147233][ T1126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.161752][T16480] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.186232][T16480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1646.211781][T16480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.232722][T16480] usb 5-1: Product: syz [ 1646.237072][T16480] usb 5-1: Manufacturer: syz [ 1646.250866][T16480] usb 5-1: SerialNumber: syz [ 1646.276600][T11221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1646.421932][ T1126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.522595][T11221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1646.597791][ T1126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.777894][T11221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1646.833556][ T1126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1647.050716][ T4081] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1647.085540][ T30] audit: type=1326 audit(1779146926.636:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.2.17158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26f59ce59 code=0x0 [ 1647.157896][T11230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1647.182493][T11230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1647.205410][T11230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1647.223696][T11221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1647.245477][ T4081] usb 2-1: Using ep0 maxpacket: 8 [ 1647.251729][T16480] cdc_ncm 5-1:1.1: bind() failure [ 1647.263459][T11230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1647.272295][ T4081] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1647.284084][T11230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1647.292251][ T4081] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1647.310402][ T4081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1647.320801][ T4081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1647.331863][ T4081] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1647.345524][ T4081] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1647.355025][ T4081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.484512][ T4088] usb 5-1: USB disconnect, device number 7 [ 1647.597990][ T4081] usb 2-1: GET_CAPABILITIES returned 0 [ 1647.631716][ T4081] usbtmc 2-1:16.0: can't read capabilities [ 1647.828539][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.838178][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.847318][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.856778][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.874223][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.883384][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.892492][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.901575][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1647.941076][ T1709] usb 2-1: USB disconnect, device number 2 [ 1648.220777][ T4081] psmouse serio5: Failed to reset mouse on : -5 [ 1648.845308][ T1126] tipc: Disabling bearer [ 1649.462477][T11230] Bluetooth: hci2: command tx timeout [ 1649.479822][ T1126] bond0 (unregistering): left allmulticast mode [ 1649.487064][ T1126] bond_slave_0: left allmulticast mode [ 1649.495236][ T1126] bond_slave_1: left allmulticast mode [ 1649.502160][ T1126] veth0_to_bond: left allmulticast mode [ 1649.515390][ T1126] team0: Port device bond0 removed [ 1649.525414][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.545631][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.566400][ T1126] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1649.586166][ T1126] bond0 (unregistering): Released all slaves [ 1649.611383][ T1126] bond1 (unregistering): Released all slaves [ 1649.646248][ T1126] bond2 (unregistering): Released all slaves [ 1649.686473][ T1126] bond3 (unregistering): Released all slaves [ 1649.729767][ T1126] bond4 (unregistering): Released all slaves [ 1649.799307][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1649.954526][ T1126] ý™: left promiscuous mode [ 1650.124132][ T1126] tipc: Disabling bearer [ 1650.135235][ T1126] tipc: Left network mode [ 1650.555739][ T1126] IPVS: stopping master sync thread 24485 ... [ 1651.551405][T11230] Bluetooth: hci2: command tx timeout [ 1651.599944][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1651.635681][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.649165][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.658284][T11236] bridge_slave_0: entered allmulticast mode [ 1651.666833][T11236] bridge_slave_0: entered promiscuous mode [ 1651.706834][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.756149][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.776229][T11236] bridge_slave_1: entered allmulticast mode [ 1651.795994][T11236] bridge_slave_1: entered promiscuous mode [ 1651.988857][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.014261][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.070337][ T4081] misc userio: Buffer overflowed, userio client isn't keeping up [ 1652.239882][T11236] team0: Port device team_slave_0 added [ 1652.279741][T11236] team0: Port device team_slave_1 added [ 1653.324859][ T4081] input: PS/2 Generic Mouse as /devices/serio5/input/input153 [ 1653.623554][T11230] Bluetooth: hci2: command tx timeout [ 1653.634238][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.641708][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.741536][ T4081] psmouse serio5: Failed to enable mouse on [ 1653.774330][T11356] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 1653.831662][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17187'. [ 1653.870374][T11362] netlink: 'syz.4.17187': attribute type 30 has an invalid length. [ 1653.873359][T11356] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1653.902410][T11362] netlink: 'syz.4.17187': attribute type 29 has an invalid length. [ 1653.936552][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17187'. [ 1654.415246][T11365] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17189'. [ 1654.728343][T11330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.812833][T11330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.700856][T11230] Bluetooth: hci2: command tx timeout [ 1655.876830][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.891368][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.929528][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.955336][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1656.023383][T11384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1656.077275][T11384] gretap2: entered promiscuous mode [ 1656.096498][T11384] gretap2: entered allmulticast mode [ 1656.127603][ T3464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.174786][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.220586][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.308802][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.369914][ T3464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.529272][ T3464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.759156][T11236] hsr_slave_0: entered promiscuous mode [ 1656.786197][T11236] hsr_slave_1: entered promiscuous mode [ 1656.801490][T11236] debugfs: 'hsr0' already exists in 'hsr' [ 1656.807571][T11236] Cannot create hsr debugfs directory [ 1656.929392][ T1126] hsr_slave_0: left promiscuous mode [ 1656.958884][ T1126] hsr_slave_1: left promiscuous mode [ 1656.973962][ T1126] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 1656.990670][ T4092] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1657.004223][ T1126] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 1657.046878][ T1126] pim6reg (unregistering): left allmulticast mode [ 1657.171676][ T4092] usb 5-1: Using ep0 maxpacket: 8 [ 1657.189239][ T4092] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1657.226930][ T4092] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1657.242484][ T4092] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.279104][ T4092] usb 5-1: config 4 has no interface number 0 [ 1657.342682][ T4092] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1657.365084][ T4092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.380088][ T4092] usb 5-1: Product: syz [ 1657.386193][ T4092] usb 5-1: Manufacturer: syz [ 1657.395396][ T4092] usb 5-1: SerialNumber: syz [ 1657.430213][T16480] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1657.619114][T16480] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1657.658933][T16480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.712496][T16480] usb 2-1: config 0 descriptor?? [ 1657.775016][T16480] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1657.808019][ T1126] team_slave_1 (unregistering): left allmulticast mode [ 1657.821926][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 1657.862901][ T1126] team_slave_0 (unregistering): left allmulticast mode [ 1657.878655][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 1658.245829][ T1126] team0 (unregistering): left allmulticast mode [ 1658.686980][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1658.806028][ T4092] usb 5-1: USB disconnect, device number 8 [ 1658.847388][T16480] gspca_cpia1: usb_control_msg 05, error -110 [ 1658.862696][T16480] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.913892][T16480] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.929332][T16480] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.944392][T16480] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.953999][T16480] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1659.193747][ T1126] IPVS: stop unused estimator thread 0... [ 1659.724619][ T4084] usb 2-1: USB disconnect, device number 3 [ 1659.893756][T11236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1659.951286][ T30] audit: type=1326 audit(1779146939.506:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.17216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26f59ce59 code=0x0 [ 1659.987460][T11236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1660.022497][T11236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1660.065958][T11236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1660.111339][T11236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1660.136241][T11236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1660.147667][T11451] kvm: apic: phys broadcast and lowest prio [ 1660.158093][T11236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1660.198607][T11236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1660.451139][T11465] vivid-002: disconnect [ 1660.507018][T11464] vivid-002: reconnect [ 1660.577214][T11236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.656595][T11236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.687214][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.694481][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.763265][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.770604][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.122715][T11236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.353974][T11236] veth0_vlan: entered promiscuous mode [ 1661.411406][T11236] veth1_vlan: entered promiscuous mode [ 1661.571673][T11236] veth0_macvtap: entered promiscuous mode [ 1661.616667][T11236] veth1_macvtap: entered promiscuous mode [ 1661.741492][T11236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.785140][T11236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.846574][ T3464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.879932][ T3464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.911617][ T3464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.979438][ T3464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.310352][ T4083] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1662.429236][T11504] erspan0: entered promiscuous mode [ 1662.506535][ T4083] usb 1-1: Using ep0 maxpacket: 16 [ 1662.533075][ T4083] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1662.573678][ T4083] usb 1-1: config 217 has an invalid interface number: 20 but max is 0 [ 1662.602981][ T4083] usb 1-1: config 217 has no interface number 0 [ 1662.632214][T11504] bridge0: port 1(syz_tun) entered blocking state [ 1662.638881][T11504] bridge0: port 1(syz_tun) entered listening state [ 1662.646030][ T4083] usb 1-1: config 217 interface 20 has no altsetting 0 [ 1662.694957][ T4083] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=51.ff [ 1662.724069][ T4083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.763478][ T4083] usb 1-1: Product: syz [ 1662.776388][ T4083] usb 1-1: Manufacturer: syz [ 1662.793339][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.810339][ T4083] usb 1-1: SerialNumber: syz [ 1662.829752][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.069920][ T9053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.114997][ T9053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.144525][ T4083] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:217.20/input/input154 [ 1663.196490][ T4981] bcm5974 1-1:217.20: could not read from device [ 1663.245168][ T4083] usb 1-1: USB disconnect, device number 4 [ 1663.311060][ T4981] bcm5974 1-1:217.20: could not read from device [ 1663.799258][T11523] netlink: 51 bytes leftover after parsing attributes in process `syz.4.17242'. [ 1664.252694][T11530] xt_hashlimit: size too large, truncated to 1048576 [ 1664.797053][T11546] trusted_key: syz.1.17249 sent an empty control message without MSG_MORE. [ 1665.593454][ T30] audit: type=1326 audit(1779146945.156:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1665.673164][ T30] audit: type=1326 audit(1779146945.156:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1665.725337][ T30] audit: type=1326 audit(1779146945.156:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1665.924550][ T30] audit: type=1326 audit(1779146945.176:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.069801][ T30] audit: type=1326 audit(1779146945.176:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.117549][T11573] syzkaller1: entered promiscuous mode [ 1666.158481][T11573] syzkaller1: entered allmulticast mode [ 1666.219488][ T30] audit: type=1326 audit(1779146945.176:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.330931][ T30] audit: type=1326 audit(1779146945.196:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.438076][ T30] audit: type=1326 audit(1779146945.196:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.559690][ T30] audit: type=1326 audit(1779146945.196:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1666.656467][ T30] audit: type=1326 audit(1779146945.196:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.4.17254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1667.327211][T11590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1667.745055][T11608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.916949][ T4088] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1669.060579][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.066972][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.172638][ T4088] usb 5-1: Using ep0 maxpacket: 8 [ 1669.196795][ T4088] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1669.259745][ T4088] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1669.317636][ T4088] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1669.358330][ T4088] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.408177][ T4088] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1669.435246][ T4088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.705571][ T4088] usb 5-1: GET_CAPABILITIES returned 0 [ 1669.715620][ T4088] usbtmc 5-1:16.0: can't read capabilities [ 1669.933346][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1669.946301][ T4088] usb 5-1: USB disconnect, device number 9 [ 1670.330492][ T4092] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1670.515329][ T4092] usb 6-1: Using ep0 maxpacket: 32 [ 1670.539785][ T4092] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1670.575886][ T4092] usb 6-1: config 0 has no interface number 0 [ 1670.601908][ T4092] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1670.632040][ T4092] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1670.665216][ T4092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.706266][ T4092] usb 6-1: Product: syz [ 1670.722862][ T4092] usb 6-1: Manufacturer: syz [ 1670.742149][ T4092] usb 6-1: SerialNumber: syz [ 1670.778287][ T4092] usb 6-1: config 0 descriptor?? [ 1671.246118][T11687] program syz.4.17301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.441928][ T4092] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1671.483191][ T4092] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1671.743804][ T4092] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1671.770186][ T5634] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1671.809057][ T4092] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1671.837814][ T4092] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1671.859701][ T4092] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1671.914421][ T4092] usb 6-1: USB disconnect, device number 2 [ 1671.982809][ T5634] usb 5-1: Using ep0 maxpacket: 32 [ 1672.016549][ T5634] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1672.050753][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.112171][ T5634] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1673.109048][ T5634] gspca_nw80x: reg_w err -71 [ 1673.129387][ T5634] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1673.173161][ T5634] usb 5-1: USB disconnect, device number 10 [ 1673.346938][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1673.346958][ T30] audit: type=1326 audit(1779146952.906:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.0.17312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cad9ce59 code=0x7ffc0000 [ 1673.463714][ T30] audit: type=1326 audit(1779146952.906:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.0.17312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01cad9ce59 code=0x7ffc0000 [ 1673.515163][ T30] audit: type=1326 audit(1779146952.926:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.0.17312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cad9ce59 code=0x7ffc0000 [ 1673.618027][ T30] audit: type=1326 audit(1779146952.936:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11725 comm="syz.0.17312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01cad9ce59 code=0x7ffc0000 [ 1673.941812][T11743] netlink: 'syz.1.17317': attribute type 1 has an invalid length. [ 1674.235639][T11743] bond4: entered promiscuous mode [ 1674.275803][T11743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1674.447218][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17320'. [ 1674.506647][T11748] bond4: (slave veth4): making interface the new active one [ 1674.532606][T11748] veth4: entered promiscuous mode [ 1674.573516][T11748] bond4: (slave veth4): Enslaving as an active interface with an up link [ 1674.918950][T11762] Invalid argument reading file caps for ./file0 [ 1675.251050][ T4081] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1675.456708][ T4081] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.499431][ T4081] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1675.534451][ T4081] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1675.563040][ T4081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1675.585599][ T4081] usb 1-1: SerialNumber: syz [ 1675.819543][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1675.860493][ T4081] usb 1-1: 0:2 : does not exist [ 1675.862337][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1676.043441][ T4081] usb 1-1: USB disconnect, device number 6 [ 1676.164953][T30382] udevd[30382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1676.795928][T11816] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1677.681169][T11838] Invalid argument reading file caps for ./file0 [ 1677.860182][ C0] bridge0: port 1(syz_tun) entered learning state [ 1677.942808][ T4092] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1678.132980][ T4092] usb 2-1: Using ep0 maxpacket: 8 [ 1678.177960][ T4092] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1678.193256][ T4092] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.238730][ T4092] usb 2-1: config 0 has no interface number 0 [ 1678.240780][ T1709] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1678.268866][ T4092] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1678.320030][ T4092] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1678.367549][ T4092] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1678.441505][ T4092] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1678.443003][ T1709] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1678.490224][ T4092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.507722][ T1709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1678.527509][ T4092] usb 2-1: Product: syz [ 1678.547578][ T1709] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1678.554500][ T4092] usb 2-1: Manufacturer: syz [ 1678.581679][ T1709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.593559][ T4092] usb 2-1: SerialNumber: syz [ 1678.614940][ T1709] usb 6-1: Product: syz [ 1678.636279][ T1709] usb 6-1: Manufacturer: syz [ 1678.657225][ T1709] usb 6-1: SerialNumber: syz [ 1678.693493][ T4092] usb 2-1: config 0 descriptor?? [ 1678.705776][ T1709] usb 6-1: config 0 descriptor?? [ 1678.718343][T11839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1678.743904][ T1709] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1679.045509][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17349'. [ 1679.105108][ T4092] usb 2-1: NFC: intf ffff888026771000 id ffffffff8f3e4800 [ 1679.176075][ T4092] usb 2-1: USB disconnect, device number 4 [ 1679.282458][T11867] batadv_slave_0: entered promiscuous mode [ 1679.362640][T11866] batadv_slave_0: left promiscuous mode [ 1679.502467][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17353'. [ 1679.819283][ T1709] gspca_sunplus: reg_r err -71 [ 1679.848518][ T1709] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1679.918772][ T1709] usb 6-1: USB disconnect, device number 3 [ 1680.618910][T11894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17365'. [ 1680.868181][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17368'. [ 1680.909920][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17368'. [ 1681.820323][ T5634] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1681.886816][T11930] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17381'. [ 1681.934230][T11930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.957969][T11930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.002914][T11930] bond0 (unregistering): Released all slaves [ 1682.009192][ T5634] usb 1-1: Using ep0 maxpacket: 8 [ 1682.019769][ T5634] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1682.053639][ T5634] usb 1-1: config 0 has no interface number 0 [ 1682.073243][ T5634] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1682.135679][ T5634] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1682.164297][ T5634] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1682.200088][ T5634] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1682.241770][ T5634] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1682.271090][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.303096][ T5634] usb 1-1: config 0 descriptor?? [ 1682.351711][ T5634] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1682.578939][ T5634] usb 1-1: USB disconnect, device number 7 [ 1682.585638][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1682.678472][ T5634] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1682.910211][ T1709] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1683.074815][ T1709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1683.102799][T11947] cifs: Unknown parameter 'g' [ 1683.108696][ T1709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.139430][ T1709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1683.192351][ T1709] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1683.220235][ T1709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.246246][ T1709] usb 2-1: Product: syz [ 1683.258300][ T1709] usb 2-1: Manufacturer: syz [ 1683.263461][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17390'. [ 1683.280405][ T1709] usb 2-1: SerialNumber: syz [ 1683.319371][ T1709] usb 2-1: selecting invalid altsetting 1 [ 1683.346129][ T1709] usb 2-1: unit 6 not found! [ 1683.980198][ T5634] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1684.152274][ T5634] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.170536][ T5634] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1684.181847][ T5634] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1684.200057][ T5634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1684.218414][ T5634] usb 6-1: SerialNumber: syz [ 1684.427105][ T1709] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1684.475688][ T5634] usb 6-1: 0:2 : does not exist [ 1684.529250][ T1709] usb 2-1: USB disconnect, device number 5 [ 1684.639395][T30382] udevd[30382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1684.825245][ T5634] usb 6-1: USB disconnect, device number 4 [ 1684.950600][T32483] udevd[32483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1685.130604][ T4081] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1685.356826][ T4081] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 1685.372619][ T4088] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1685.381723][ T4081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1685.396998][ T4081] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1685.407017][ T4081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.443458][ T4081] usb 5-1: Product: syz [ 1685.447804][ T4081] usb 5-1: Manufacturer: syz [ 1685.454562][ T4081] usb 5-1: SerialNumber: syz [ 1685.548566][ T4088] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.568911][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1685.607757][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.650475][ T4088] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1685.688771][ T4088] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1685.731010][ T4088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.768758][ T4088] usb 1-1: config 0 descriptor?? [ 1686.023416][ T4088] usbhid 1-1:0.0: can't add hid device: -71 [ 1686.042878][ T4088] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1686.093032][ T4088] usb 1-1: USB disconnect, device number 8 [ 1686.549463][ T4081] cdc_ncm 5-1:1.0: bind() failure [ 1686.570185][ T4088] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1686.585010][T11999] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1686.604328][ T4081] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1686.638178][ T4081] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1686.655403][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.664068][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.685787][ T4081] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1686.731620][ T4081] usb 5-1: USB disconnect, device number 11 [ 1686.770262][ T4088] usb 1-1: Using ep0 maxpacket: 32 [ 1686.792444][ T4088] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.837253][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.878649][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.905113][ T4088] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1686.946656][ T4088] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1686.981981][ T4088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.027949][ T4088] usb 1-1: config 0 descriptor?? [ 1687.487246][ T4088] betop 0003:20BC:5500.0098: unbalanced collection at end of report description [ 1687.520418][ T4088] betop 0003:20BC:5500.0098: parse failed [ 1687.546420][ T4088] betop 0003:20BC:5500.0098: probe with driver betop failed with error -22 [ 1687.731288][ T4088] usb 1-1: USB disconnect, device number 9 [ 1687.765285][T12016] loop5: detected capacity change from 0 to 7 [ 1687.798394][T12016] Dev loop5: unable to read RDB block 7 [ 1687.826821][T12016] loop5: unable to read partition table [ 1687.844647][T12016] loop5: partition table beyond EOD, truncated [ 1687.866518][T12016] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1688.313579][T12031] loop8: detected capacity change from 0 to 7 [ 1688.328831][T12031] Dev loop8: unable to read RDB block 7 [ 1688.345534][T12031] loop8: unable to read partition table [ 1688.358832][T12031] loop8: partition table beyond EOD, truncated [ 1688.375064][T12031] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1690.766367][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17449'. [ 1690.802056][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17449'. [ 1691.790403][ T4085] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1691.970540][ T4085] usb 1-1: Using ep0 maxpacket: 16 [ 1691.988434][ T4085] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1692.020150][ T4085] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1692.043110][ T4085] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1692.060367][ T4085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.089072][ T4085] usb 1-1: Product: syz [ 1692.099300][ T4085] usb 1-1: Manufacturer: syz [ 1692.119865][ T4085] usb 1-1: SerialNumber: syz [ 1692.145166][ T4085] usb 1-1: config 0 descriptor?? [ 1692.543293][ T4085] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input157 [ 1692.900201][ T4085] rc_core: IR keymap rc-imon-pad not found [ 1692.926519][ T4085] Registered IR keymap rc-empty [ 1692.943241][ T4085] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1692.983046][ T4085] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1693.052750][ T4085] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1693.104807][ T4085] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input158 [ 1693.142851][ T1709] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1693.163975][ T4085] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:10> initialized [ 1693.220258][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 1693.226962][ C0] bridge0: topology change detected, propagating [ 1693.312344][ T1709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1693.342603][ T1709] usb 5-1: config 1 has no interface number 0 [ 1693.369488][ T1709] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1693.419642][ T1709] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1693.456881][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1693.473968][ T1709] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1693.507630][ T1709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1693.559273][ T4088] usb 1-1: USB disconnect, device number 10 [ 1693.576968][ T1709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1693.624415][ T1709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1693.664482][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.694523][ T1709] usb 5-1: Product: syz [ 1693.710208][ T1709] usb 5-1: Manufacturer: syz [ 1693.727271][ T1709] usb 5-1: SerialNumber: syz [ 1693.769533][T12140] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1694.008370][T12140] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1694.132137][ T4088] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1694.210987][T12156] tipc: Started in network mode [ 1694.222634][T12156] tipc: Node identity ac1414aa, cluster identity 4711 [ 1694.235812][T12157] kernel read not supported for file /bus (pid: 12157 comm: syz.2.17477) [ 1694.245630][T12156] tipc: Enabling of bearer rejected, failed to enable media [ 1694.258309][ T30] audit: type=1800 audit(1779146973.816:828): pid=12157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17477" name="bus" dev="mqueue" ino=173595 res=0 errno=0 [ 1694.282579][T12140] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1694.327588][ T4088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1694.358346][ T4088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1694.396055][ T4088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1694.443610][ T4088] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1694.476843][ T4088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.512516][ T4088] usb 2-1: Product: syz [ 1694.527109][ T4088] usb 2-1: Manufacturer: syz [ 1694.554070][ T4088] usb 2-1: SerialNumber: syz [ 1694.587017][ T4088] usb 2-1: config 0 descriptor?? [ 1694.725764][T12140] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1694.761252][ T1709] cdc_ncm 5-1:1.1: bind() failure [ 1694.772256][T12166] loop7: detected capacity change from 0 to 7 [ 1694.830534][ T4088] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1694.903488][T12166] Dev loop7: unable to read RDB block 7 [ 1694.909213][T12166] loop7: unable to read partition table [ 1694.916027][ C1] blk_print_req_error: 5 callbacks suppressed [ 1694.916048][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1694.932010][ C1] buffer_io_error: 5 callbacks suppressed [ 1694.932029][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1694.973532][T12166] loop7: partition table beyond EOD, truncated [ 1694.985685][ T4088] usb 5-1: USB disconnect, device number 12 [ 1694.986811][T12166] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1695.045044][ T5634] usb 2-1: USB disconnect, device number 6 [ 1695.631417][T12171] netlink: 'syz.2.17481': attribute type 2 has an invalid length. [ 1695.991620][ T1709] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1696.081305][T12163] IPVS: You probably need to specify IP address on multicast interface. [ 1696.090414][T12163] IPVS: Error connecting to the multicast addr [ 1696.181034][ T1709] usb 5-1: Using ep0 maxpacket: 32 [ 1696.203745][ T1709] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1696.237730][ T1709] usb 5-1: config 0 has no interface number 0 [ 1696.277122][ T1709] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1696.310698][ T1709] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1696.352291][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.382660][ T1709] usb 5-1: Product: syz [ 1696.400309][ T1709] usb 5-1: Manufacturer: syz [ 1696.422353][ T1709] usb 5-1: SerialNumber: syz [ 1696.479020][ T1709] usb 5-1: config 0 descriptor?? [ 1696.554402][T12194] @0Ù: renamed from bond_slave_1 [ 1697.124089][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1697.161967][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1697.257656][T12208] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17497'. [ 1697.422126][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1697.466283][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1697.496225][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1697.547023][ T1709] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1697.588756][ T1709] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1697.637185][ T1709] usb 5-1: USB disconnect, device number 13 [ 1698.840221][T16468] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1698.960430][ T4088] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1699.010150][T16468] usb 6-1: Using ep0 maxpacket: 8 [ 1699.035303][T16468] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1699.071517][T16468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1699.101255][T16468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1699.130582][T16468] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1699.152673][ T4088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.170229][ T5634] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1699.182389][T16468] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1699.194089][ T4088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.222315][T16468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.229392][ T4088] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1699.268245][ T4088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1699.306851][ T4088] usb 2-1: SerialNumber: syz [ 1699.361636][ T5634] usb 1-1: Using ep0 maxpacket: 16 [ 1699.373306][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1699.410630][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1699.445793][ T5634] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1699.461502][T16468] usb 6-1: GET_CAPABILITIES returned 0 [ 1699.478520][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.479419][T16468] usbtmc 6-1:16.0: can't read capabilities [ 1699.500472][ T5634] usb 1-1: Product: syz [ 1699.513083][ T5634] usb 1-1: Manufacturer: syz [ 1699.536855][ T5634] usb 1-1: SerialNumber: syz [ 1699.576728][ T4088] usb 2-1: 0:2 : does not exist [ 1699.589932][ T5634] usb 1-1: config 0 descriptor?? [ 1699.615630][ T5634] hub 1-1:0.0: bad descriptor, ignoring hub [ 1699.642457][ T5634] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1699.673656][T16480] usb 6-1: USB disconnect, device number 5 [ 1699.734569][ T5634] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1699.763925][ T4088] usb 2-1: USB disconnect, device number 7 [ 1699.948249][ T5634] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1700.025215][ T5634] usb 1-1: USB disconnect, device number 11 [ 1700.053555][T30382] udevd[30382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1700.133717][T31834] udevd[31834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1701.613292][ T4088] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1701.793149][ T4088] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.812757][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1701.838378][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1701.866415][ T4088] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1701.896063][ T4088] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1701.926560][ T4088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.962295][ T4088] usb 1-1: config 0 descriptor?? [ 1702.451117][ T4088] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1702.687288][T12321] loop7: detected capacity change from 0 to 16384 [ 1703.005115][ T4088] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1703.197067][ T4088] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1703.240618][ T4088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.268091][ T4088] usb 5-1: Product: syz [ 1703.287467][ T4088] usb 5-1: Manufacturer: syz [ 1703.307014][ T4088] usb 5-1: SerialNumber: syz [ 1703.347397][ T4088] usb 5-1: config 0 descriptor?? [ 1704.253740][T12336] vivid-003: disconnect [ 1704.266640][T12335] vivid-003: reconnect [ 1704.446056][ T4088] usb 5-1: Firmware version (0.0) predates our first public release. [ 1704.477014][ T4088] usb 5-1: Please update to version 0.2 or newer [ 1704.519760][T16468] usb 1-1: USB disconnect, device number 12 [ 1704.664459][ T4088] usb 5-1: USB disconnect, device number 14 [ 1706.792101][T12350] geneve0: entered allmulticast mode [ 1707.029711][ T1709] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 1707.126012][ T1709] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1708.228725][T12407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1708.425487][T12412] loop5: detected capacity change from 0 to 7 [ 1708.465123][T12412] Dev loop5: unable to read RDB block 7 [ 1708.492663][T12412] loop5: unable to read partition table [ 1708.517327][T12412] loop5: partition table beyond EOD, truncated [ 1708.543912][T12412] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1709.291002][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17585'. [ 1709.434164][T12434] team0: Port device team_slave_0 removed [ 1710.770153][T16468] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1710.950212][T16468] usb 6-1: Using ep0 maxpacket: 32 [ 1710.978093][T16468] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1711.006922][T16468] usb 6-1: config 0 has no interface number 0 [ 1711.036918][T16468] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1711.070138][T16468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.090115][T16468] usb 6-1: Product: syz [ 1711.109392][T16468] usb 6-1: Manufacturer: syz [ 1711.119583][T16468] usb 6-1: SerialNumber: syz [ 1711.144627][T16468] usb 6-1: config 0 descriptor?? [ 1711.323775][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1711.373503][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1712.225050][T16468] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1712.270219][T16468] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1712.301020][T16468] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1712.332253][T16468] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1712.387011][T16468] usb 6-1: USB disconnect, device number 6 [ 1712.772391][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17603'. [ 1712.794784][T12478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1712.802153][T12478] IPv6: NLM_F_CREATE should be set when creating new route [ 1712.810435][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17603'. [ 1713.007270][T12482] Invalid argument reading file caps for ./file0 [ 1713.084221][T12487] team0: Port device syz_tun added [ 1713.174675][T12489] team0: Port device syz_tun removed [ 1713.289840][T12489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1714.933042][T16468] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1715.090249][T16468] usb 5-1: Using ep0 maxpacket: 32 [ 1715.109784][T16468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.109824][T16468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.116665][T16468] usb 5-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1715.190191][T16468] usb 5-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1715.190224][T16468] usb 5-1: Product: syz [ 1715.190241][T16468] usb 5-1: Manufacturer: syz [ 1715.214557][T16468] usb 5-1: config 0 descriptor?? [ 1715.412481][T12526] netlink: 'syz.0.17623': attribute type 9 has an invalid length. [ 1715.412510][T12526] netlink: 'syz.0.17623': attribute type 11 has an invalid length. [ 1715.412527][T12526] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.17623'. [ 1715.685209][T16468] hid-generic 0003:25DD:F3D2.009B: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 1715.962111][T16480] usb 5-1: USB disconnect, device number 15 [ 1716.040180][T12534] fido_id[12534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1716.611964][T12551] netlink: 'syz.2.17633': attribute type 5 has an invalid length. [ 1720.471328][ T4081] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1720.671270][ T4081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.712617][ T4081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.748304][ T4081] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1720.792577][ T4081] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1720.821452][ T4081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.863440][ T4081] usb 2-1: config 0 descriptor?? [ 1720.943305][T16480] IPVS: starting estimator thread 0... [ 1721.050792][T12660] IPVS: using max 26 ests per chain, 62400 per kthread [ 1721.090662][T16480] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1721.293261][T16480] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1721.317232][T16480] usb 5-1: not running at top speed; connect to a high speed hub [ 1721.355633][T16480] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.369063][ T4081] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1721.400238][T16480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1721.418909][T16480] usb 5-1: string descriptor 0 read error: -22 [ 1721.429787][T16480] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1721.450599][T16480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.518388][T16480] usb 5-1: 0:2 : does not exist [ 1721.623204][ T4088] usb 2-1: USB disconnect, device number 8 [ 1722.573292][T16480] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1722.621882][T16480] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1722.668099][T16480] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1722.762721][ T30] audit: type=1326 audit(1779147002.326:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.5.17693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce5279ce59 code=0x0 [ 1722.792621][T16480] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1722.906519][T16480] usb 5-1: USB disconnect, device number 16 [ 1723.351139][T12710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17700'. [ 1723.416481][T12710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17700'. [ 1723.555022][T12715] netlink: 'syz.4.17702': attribute type 8 has an invalid length. [ 1724.034589][T12735] netlink: 165 bytes leftover after parsing attributes in process `syz.1.17711'. [ 1724.571965][T12752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1724.992282][ T30] audit: type=1326 audit(1779147004.556:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.4.17722" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85d39ce59 code=0x0 [ 1725.612215][T12771] netlink: 'syz.2.17727': attribute type 6 has an invalid length. [ 1725.672461][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17727'. [ 1727.060949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.281224][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17744'. [ 1728.076035][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17748'. [ 1728.115534][T12825] netlink: 'syz.4.17748': attribute type 30 has an invalid length. [ 1728.667133][T12840] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17755'. [ 1728.691155][T12839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.741094][ T4081] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1728.750434][T12839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.843826][T12846] tap0: tun_chr_ioctl cmd 1074025681 [ 1728.852033][T12846] tap0: tun_chr_ioctl cmd 1074025681 [ 1728.902435][ T4081] usb 2-1: Using ep0 maxpacket: 8 [ 1728.912350][ T4081] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.943711][ T4081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1728.978852][ T4081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1729.014327][ T4081] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1729.045400][ T4081] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1729.072338][ T4081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.302513][ T4081] usb 2-1: GET_CAPABILITIES returned 0 [ 1729.313825][ T4081] usbtmc 2-1:16.0: can't read capabilities [ 1729.513325][ T4088] usb 2-1: USB disconnect, device number 9 [ 1729.643751][T12859] binder: 12858:12859 ioctl c0306201 2000000004c0 returned -22 [ 1730.343751][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.343814][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.530176][ T4085] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1730.680578][ T4085] usb 5-1: Using ep0 maxpacket: 32 [ 1730.698442][ T4085] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1730.719857][ T4085] usb 5-1: config 0 has no interface number 0 [ 1730.743516][ T4085] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1730.766921][ T4085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.795690][ T4085] usb 5-1: Product: syz [ 1730.810071][ T4085] usb 5-1: Manufacturer: syz [ 1730.822404][ T4085] usb 5-1: SerialNumber: syz [ 1730.848817][ T4085] usb 5-1: config 0 descriptor?? [ 1731.047828][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17774'. [ 1731.640391][ T4081] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1731.852904][ T4081] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1731.875263][ T4081] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1731.899639][ T4081] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1731.916655][ T4081] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1731.932022][ T4085] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1731.945833][ T4081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.975268][ T4085] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1731.986807][ T4081] usb 1-1: config 0 descriptor?? [ 1732.013698][ T4085] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1732.052360][ T4085] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1732.120730][ T4085] usb 5-1: USB disconnect, device number 17 [ 1732.295771][ T30] audit: type=1326 audit(1779147011.856:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.17780" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce5279ce59 code=0x0 [ 1732.455686][ T4081] hid (null): bogus close delimiter [ 1732.461189][T12905] pimreg: entered allmulticast mode [ 1732.513303][ T4081] uclogic 0003:28BD:0078.009D: interface is invalid, ignoring [ 1732.517837][T12905] pimreg: left allmulticast mode [ 1732.666810][T16480] usb 1-1: USB disconnect, device number 13 [ 1732.870508][ T4081] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1733.050295][ T4081] usb 5-1: Using ep0 maxpacket: 8 [ 1733.071761][ T4081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1733.098334][ T4081] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1733.125369][ T4081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.146778][ T4081] usb 5-1: config 0 descriptor?? [ 1733.184790][T12916] netlink: 'syz.5.17787': attribute type 10 has an invalid length. [ 1733.297078][T12916] veth0_vlan: left promiscuous mode [ 1733.323891][T12916] veth0_vlan: entered promiscuous mode [ 1733.416664][T12916] team0: Device veth0_vlan failed to register rx_handler [ 1733.591944][ T4081] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1733.873142][T11356] usb 5-1: USB disconnect, device number 18 [ 1734.014090][T12932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.223199][ T4081] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1734.400274][ T4081] usb 1-1: Using ep0 maxpacket: 8 [ 1734.429097][ T4081] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1734.461790][ T4081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1734.493208][ T4081] usb 1-1: Product: syz [ 1734.514658][ T4081] usb 1-1: Manufacturer: syz [ 1734.530402][ T4081] usb 1-1: SerialNumber: syz [ 1734.554282][ T4081] usb 1-1: config 0 descriptor?? [ 1734.579027][ T4081] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1734.784388][ T4081] gspca_sn9c2028: read1 error -32 [ 1734.812851][ T4081] gspca_sn9c2028: read1 error -32 [ 1734.857684][T12948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1735.043573][T11356] usb 1-1: USB disconnect, device number 14 [ 1736.270348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.450075][ T4085] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1736.630100][ T4085] usb 5-1: Using ep0 maxpacket: 16 [ 1736.649052][ T4085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.683557][ T4085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.720173][ T4085] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1736.770335][ T4085] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1736.828072][ T4085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.866189][ T4085] usb 5-1: config 0 descriptor?? [ 1736.921337][T12979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1736.947050][T12979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1736.966991][T12979] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1737.005582][T12979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1737.034505][T12979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1737.076347][T12979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1737.087049][T12979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1737.130085][T12979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1737.314413][ T4085] microsoft 0003:045E:07DA.009E: unknown main item tag 0x0 [ 1737.372422][ T4085] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.009E/input/input163 [ 1737.459689][T12985] team0: Port device syz_tun added [ 1737.496250][ T4085] microsoft 0003:045E:07DA.009E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1737.594537][ T4085] usb 5-1: USB disconnect, device number 19 [ 1737.614423][T12986] team0: Port device syz_tun removed [ 1737.748973][T12986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1737.786381][T12987] fido_id[12987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1738.751192][T11356] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1738.901269][T11230] Bluetooth: hci0: command 0x0406 tx timeout [ 1738.941175][T11356] usb 2-1: Using ep0 maxpacket: 8 [ 1738.953114][T11356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1738.968521][T11356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1738.980542][T11230] Bluetooth: hci3: command 0x0406 tx timeout [ 1738.996629][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1739.008900][T11356] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1739.025055][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1739.039256][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1739.052853][T11356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1739.066623][T11230] Bluetooth: hci4: command 0x0406 tx timeout [ 1739.073595][T11356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1739.084672][T11356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1739.092641][T11356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1739.104635][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1739.117069][T11356] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1739.129679][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1739.142199][T11230] Bluetooth: hci2: command 0x0c1a tx timeout [ 1739.148976][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1739.161633][T11356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1739.175948][T11356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1739.185357][T11356] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1739.193432][T11356] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1739.205591][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1739.217670][T11356] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1739.233140][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1739.247337][T11356] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1739.259721][T11356] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1739.294838][T11356] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1739.329880][T11356] usb 2-1: string descriptor 0 read error: -22 [ 1739.346618][T11356] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1739.371716][T11356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.447006][T11356] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1739.832675][ T4085] usb 2-1: USB disconnect, device number 10 [ 1739.927799][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17836'. [ 1739.975267][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17836'. [ 1740.316169][ T30] audit: type=1326 audit(1779147019.876:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.5.17839" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce5279ce59 code=0x0 [ 1741.061072][T11230] Bluetooth: hci3: command 0x0406 tx timeout [ 1741.143726][T11230] Bluetooth: hci4: command 0x0406 tx timeout [ 1741.220697][T11230] Bluetooth: hci2: command 0x0c1a tx timeout [ 1741.289403][ T30] audit: type=1326 audit(1779147020.846:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.330414][ T30] audit: type=1326 audit(1779147020.846:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.395269][ T30] audit: type=1326 audit(1779147020.846:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.516101][ T30] audit: type=1326 audit(1779147020.876:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.628976][ T30] audit: type=1326 audit(1779147020.886:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.737456][ T30] audit: type=1326 audit(1779147020.886:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1741.831593][ T1709] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1741.833831][ T30] audit: type=1326 audit(1779147020.926:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1742.020527][ T30] audit: type=1326 audit(1779147020.926:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.17845" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5279ce59 code=0x7ffc0000 [ 1742.055708][ T1709] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1742.080105][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.119849][ T1709] usb 5-1: Product: syz [ 1742.142077][ T1709] usb 5-1: Manufacturer: syz [ 1742.153596][ T30] audit: type=1326 audit(1779147021.066:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.4.17846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85d39ce59 code=0x7ffc0000 [ 1742.166675][ T1709] usb 5-1: SerialNumber: syz [ 1742.394159][T13078] macsec0: entered promiscuous mode [ 1742.408202][T13078] geneve1: entered promiscuous mode [ 1742.420900][ T4081] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1742.453409][T13078] macsec0: entered allmulticast mode [ 1742.466740][T13078] geneve1: entered allmulticast mode [ 1742.491878][T13078] geneve1: left allmulticast mode [ 1742.502916][T13078] geneve1: left promiscuous mode [ 1742.520743][T16480] hid-generic 0000:0000:0000.009F: unknown main item tag 0x0 [ 1742.611974][ T4081] usb 1-1: Using ep0 maxpacket: 8 [ 1742.628424][ T4081] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1742.653094][T16480] hid-generic 0000:0000:0000.009F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1742.688675][ T4081] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1742.715932][ T4081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.729572][T13084] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000003000000 [ 1742.754941][ T4081] usb 1-1: Product: syz [ 1742.768433][ T4081] usb 1-1: Manufacturer: syz [ 1742.793774][ T4081] usb 1-1: SerialNumber: syz [ 1742.825282][ T4081] usb 1-1: config 0 descriptor?? [ 1742.867299][ T4081] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1742.907802][ T4081] usb 1-1: setting power ON [ 1742.930264][ T4081] dvb-usb: bulk message failed: -22 (2/0) [ 1742.958384][T13085] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!000000000000000000030000000' [ 1742.978652][ T4081] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1743.021997][ T4081] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1743.058884][T13085] CPU: 0 UID: 0 PID: 13085 Comm: syz.5.17858 Tainted: G L syzkaller #0 PREEMPT(full) [ 1743.058923][T13085] Tainted: [L]=SOFTLOCKUP [ 1743.058932][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.058946][T13085] Call Trace: [ 1743.058955][T13085] [ 1743.058965][T13085] dump_stack_lvl+0xe8/0x150 [ 1743.058999][T13085] sysfs_warn_dup+0x8e/0xa0 [ 1743.059026][T13085] sysfs_do_create_link_sd+0xc0/0x110 [ 1743.059056][T13085] device_add_class_symlinks+0x1cf/0x240 [ 1743.059089][T13085] device_add+0x475/0xbb0 [ 1743.059119][T13085] wiphy_register+0x1dc5/0x2dc0 [ 1743.059173][T13085] ? __pfx_wiphy_register+0x10/0x10 [ 1743.059208][T13085] ? __pfx_netdev_run_todo+0x10/0x10 [ 1743.059230][T13085] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1743.059264][T13085] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1743.059307][T13085] ieee80211_register_hw+0x3d82/0x4a70 [ 1743.059345][T13085] ? ieee80211_register_hw+0x1951/0x4a70 [ 1743.059392][T13085] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1743.059415][T13073] dvb-usb: bulk message failed: -22 (3/0) [ 1743.059419][T13085] ? __asan_memset+0x22/0x50 [ 1743.059449][T13085] ? __hrtimer_setup+0x1b7/0x260 [ 1743.059558][T13085] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1743.059684][T13085] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1743.059836][T13085] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1743.059900][T13085] ? kstrndup+0xbf/0x160 [ 1743.059985][T13085] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1743.060117][T13085] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1743.060215][T13085] ? rcu_is_watching+0x15/0xb0 [ 1743.060290][T13085] ? trace_kmalloc+0x2a/0xf0 [ 1743.060380][T13085] ? __nla_parse+0x40/0x60 [ 1743.060508][T13085] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1743.060583][T13085] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1743.060669][T13085] genl_family_rcv_msg_doit+0x22a/0x330 [ 1743.060764][T13085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1743.060861][T13085] ? bpf_lsm_capable+0x9/0x20 [ 1743.060921][T13085] ? security_capable+0x7e/0x2c0 [ 1743.061048][T13085] genl_rcv_msg+0x61c/0x7a0 [ 1743.061138][T13085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1743.061201][T13085] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1743.061275][T13085] ? __pfx_ref_tracker_free+0x10/0x10 [ 1743.061383][T13085] netlink_rcv_skb+0x232/0x4b0 [ 1743.061469][T13085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1743.061545][T13085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1743.061674][T13085] ? down_read+0x270/0x2e0 [ 1743.061737][T13085] ? genl_rcv+0xd/0x40 [ 1743.061802][T13085] genl_rcv+0x28/0x40 [ 1743.061856][T13085] netlink_unicast+0x75c/0x8e0 [ 1743.061955][T13085] netlink_sendmsg+0x813/0xb40 [ 1743.062063][T13085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.062149][T13085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1743.062235][T13085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1743.062327][T13085] ____sys_sendmsg+0x972/0x9f0 [ 1743.062447][T13085] ? __might_fault+0xaf/0x130 [ 1743.062561][T13085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.062668][T13085] ? import_iovec+0x73/0xa0 [ 1743.062757][T13085] ___sys_sendmsg+0x2a5/0x360 [ 1743.062842][T13085] ? __lock_acquire+0x6b5/0x2cf0 [ 1743.062919][T13085] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.063019][T13085] ? futex_wait+0x2a2/0x390 [ 1743.063171][T13085] ? __fget_files+0x2a/0x420 [ 1743.063236][T13085] ? __fget_files+0x3a0/0x420 [ 1743.063332][T13085] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1743.063428][T13085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1743.063543][T13085] ? rcu_is_watching+0x15/0xb0 [ 1743.063639][T13085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.063708][T13085] do_syscall_64+0x15f/0xf80 [ 1743.063821][T13085] ? trace_irq_disable+0x3b/0x140 [ 1743.063913][T13085] ? clear_bhb_loop+0x40/0x90 [ 1743.063990][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.064044][T13085] RIP: 0033:0x7fce5279ce59 [ 1743.064099][T13085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.064151][T13085] RSP: 002b:00007fce5366a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.064213][T13085] RAX: ffffffffffffffda RBX: 00007fce52a16090 RCX: 00007fce5279ce59 [ 1743.064256][T13085] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1743.064289][T13085] RBP: 00007fce52832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1743.064330][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.064363][T13085] R13: 00007fce52a16128 R14: 00007fce52a16090 R15: 00007fce52b3fa48 [ 1743.064456][T13085] [ 1743.107615][ T1709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1743.119419][ T4081] usb 1-1: media controller created [ 1743.193559][ T1709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1743.202692][T13073] cxusb: i2c rd: len=147 is too big! [ 1743.202692][T13073] [ 1743.323319][T11230] Bluetooth: hci2: command 0x0c1a tx timeout [ 1743.563366][ T4081] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1743.609459][T13088] cxusb: i2c wr: len=79 is too big! [ 1743.609459][T13088] [ 1743.629365][ T4081] usb 1-1: selecting invalid altsetting 6 [ 1743.635923][ T4081] usb 1-1: digital interface selection failed (-22) [ 1743.643204][ T4081] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1743.656089][ T4081] usb 1-1: setting power OFF [ 1743.663616][ T4081] dvb-usb: bulk message failed: -22 (2/0) [ 1743.669549][ T4081] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1743.679424][ T4081] (NULL device *): no alternate interface [ 1743.747609][ T1709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1743.824078][ T4081] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1743.824521][ T1709] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1743.882981][ T4081] usb 1-1: USB disconnect, device number 15 [ 1743.964294][ T1709] usb 5-1: USB disconnect, device number 20 [ 1744.598533][T13111] netlink: 'syz.1.17869': attribute type 13 has an invalid length. [ 1744.608956][T13111] netlink: 'syz.1.17869': attribute type 17 has an invalid length. [ 1744.678687][T13111] 8021q: adding VLAN 0 to HW filter on device ` [ 1744.707821][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1744.780428][ T1709] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1744.797955][T13111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.810139][T16468] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1744.829601][T13111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1744.839335][T13111] xfrm0: left allmulticast mode [ 1744.854578][T13111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1744.867418][T13111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1744.881285][T13111] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1744.921085][T13111] veth1_vlan: left promiscuous mode [ 1744.928915][T13111] veth0_vlan: left promiscuous mode [ 1744.937121][ T1709] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1744.944989][T13111] veth0_vlan: entered promiscuous mode [ 1744.956095][T13111] veth1_vlan: entered promiscuous mode [ 1744.962921][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.990423][ T1709] usb 5-1: Product: syz [ 1744.996323][T16468] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.020348][T16468] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1745.031417][ T1709] usb 5-1: Manufacturer: syz [ 1745.040187][ T1709] usb 5-1: SerialNumber: syz [ 1745.045088][T13111] veth1_macvtap: left promiscuous mode [ 1745.062405][T16468] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1745.084000][T13111] veth0_macvtap: left promiscuous mode [ 1745.112164][T16468] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1745.123260][T16468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1745.152284][T16468] usb 1-1: SerialNumber: syz [ 1745.192256][T16468] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1745.212946][T13111] veth0_macvtap: entered promiscuous mode [ 1745.232166][T13111] veth1_macvtap: entered promiscuous mode [ 1745.240274][T16468] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 1745.257135][T16468] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 1745.284557][T13111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1745.349523][T13111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1745.413839][T13111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1745.478897][T13111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1745.611713][T11356] usb 1-1: USB disconnect, device number 16 [ 1745.755068][T13111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1745.891662][T13111] bond2: left allmulticast mode [ 1745.913097][T13111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1745.938391][T13111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1746.514374][T13111] virt_wifi0: entered promiscuous mode [ 1746.554513][T13111] virt_wifi0: entered allmulticast mode [ 1746.577929][T13111] macsec1: left promiscuous mode [ 1746.601588][T13111] macsec1: left allmulticast mode [ 1746.616336][T13111] virt_wifi0: left allmulticast mode [ 1746.690346][T13111] A link change request failed with some changes committed already. Interface vxlan3 may have been left with an inconsistent configuration, please check. [ 1746.762524][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.769831][ T9053] bridge0: port 2(bridge_slave_1) entered listening state [ 1747.023168][T13128] netlink: 'syz.1.17876': attribute type 13 has an invalid length. [ 1747.074308][T13128] netlink: 'syz.1.17876': attribute type 17 has an invalid length. [ 1747.118579][ T1126] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1747.149046][ T1126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.194728][ T1126] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1747.243367][ T1126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.368096][ T1709] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 1747.426796][ T1709] usb 5-1: USB disconnect, device number 21 [ 1747.612471][T13128] A link change request failed with some changes committed already. Interface vxlan3 may have been left with an inconsistent configuration, please check. [ 1747.646073][ T1126] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1747.656989][ T1126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.689320][ T1126] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1747.701388][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17881'. [ 1747.730848][ T1126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.147326][T13139] vlan0: entered promiscuous mode [ 1748.176025][T13139] bond0: entered promiscuous mode [ 1748.241047][ T4081] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1748.352809][T13141] bond0 (unregistering): Released all slaves [ 1748.430773][ T4081] usb 2-1: Using ep0 maxpacket: 32 [ 1748.451436][ T4081] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1748.487079][ T4081] usb 2-1: config 0 has no interface number 0 [ 1748.503726][ T3464] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1748.558042][ T9053] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1748.570508][ T4081] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1748.591417][ T9053] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1748.603752][ T4081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.621802][ T4081] usb 2-1: Product: syz [ 1748.638524][ T4081] usb 2-1: Manufacturer: syz [ 1748.653383][ T4081] usb 2-1: SerialNumber: syz [ 1748.699664][ T4081] usb 2-1: config 0 descriptor?? [ 1748.736031][ T4081] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1748.877221][T13161] vcan0: tx address claim with different name [ 1748.958926][ T4081] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1749.026524][ T4081] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1749.999381][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1750.010289][ T4090] usb 2-1: USB disconnect, device number 11 [ 1750.057785][ T4090] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1750.144263][ T4090] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1750.195157][ T4090] quatech2 2-1:0.51: device disconnected [ 1750.335757][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1750.354900][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.364181][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1750.372217][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.381451][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1750.389385][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.398706][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1750.406677][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.415894][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1750.423941][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.433163][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1750.441129][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.450352][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1750.458321][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.467634][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1750.505119][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.514396][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1750.522403][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.531627][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1750.539548][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1750.673256][ T4996] ldm_validate_partition_table(): Disk read failed. [ 1750.706708][ T4996] Dev loop9: unable to read RDB block 0 [ 1750.727665][ T4996] loop9: unable to read partition table [ 1750.744532][ T4996] loop9: partition table beyond EOD, truncated [ 1751.030149][ T4090] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1751.200252][ T4090] usb 6-1: Using ep0 maxpacket: 32 [ 1751.218369][ T4090] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1751.243077][ T4090] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1751.290078][ T4090] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1751.348590][ T4090] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1751.431559][ T4090] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1751.477614][ T4090] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1751.521810][ T4090] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1751.565851][ T4090] usb 6-1: Product: syz [ 1751.604075][ T4090] usb 6-1: Manufacturer: syz [ 1751.625073][ T4090] usb 6-1: SerialNumber: syz [ 1751.647751][ T4090] usb 6-1: config 0 descriptor?? [ 1751.689226][ T4090] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1751.729053][ T4090] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1752.078897][ T4090] usb 6-1: USB disconnect, device number 7 [ 1752.085332][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1752.092782][T13190] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1752.123973][T13216] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1752.166550][ T4090] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1752.740272][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1752.741905][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1752.796315][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17918'. [ 1753.061461][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1753.124722][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17921'. [ 1753.158217][T13247] kvm: apic: phys broadcast and lowest prio [ 1753.630168][ T4090] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1753.815425][ T4090] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1753.854330][ T4090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.880864][ T4090] usb 2-1: Product: syz [ 1753.891019][ T4090] usb 2-1: Manufacturer: syz [ 1753.907227][ T4090] usb 2-1: SerialNumber: syz [ 1754.302448][ T4090] rtl8150 2-1:1.0: couldn't reset the device [ 1754.320677][ T4090] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1754.390924][ T4090] usb 2-1: USB disconnect, device number 12 [ 1755.450715][ T4090] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1755.652145][ T4090] usb 2-1: Using ep0 maxpacket: 32 [ 1755.678894][ T4090] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1755.731032][ T4090] usb 2-1: config 0 has no interface number 0 [ 1755.765067][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17946'. [ 1755.775811][ T4090] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1755.814026][ T4090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.832315][ T4090] usb 2-1: Product: syz [ 1755.837122][ T4090] usb 2-1: Manufacturer: syz [ 1755.857789][ T4090] usb 2-1: SerialNumber: syz [ 1755.899808][ T4090] usb 2-1: config 0 descriptor?? [ 1755.931824][ T4090] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1755.966409][ T4090] usb 2-1: selecting invalid altsetting 1 [ 1755.993433][ T4090] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1756.037178][ T4090] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1756.094489][ T4090] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1756.130437][ T4090] usb 2-1: media controller created [ 1756.214330][ T4090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1756.331944][ T4090] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1756.381356][ T4090] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1756.423470][ T4090] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1756.647848][ T4090] usb 2-1: USB disconnect, device number 13 [ 1756.681994][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17954'. [ 1756.732310][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17954'. [ 1756.872493][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17954'. [ 1756.928948][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17954'. [ 1757.047642][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1757.047662][ T30] audit: type=1800 audit(1779147036.606:892): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17956" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 1757.461840][T13340] [ 1757.464251][T13340] ===================================================== [ 1757.471228][T13340] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1757.478735][T13340] syzkaller #0 Tainted: G L [ 1757.484740][T13340] ----------------------------------------------------- [ 1757.491698][T13340] syz.5.17962/13340 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1757.499546][T13340] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1757.508315][T13340] [ 1757.508315][T13340] and this task is already holding: [ 1757.515718][T13340] ffff888034515420 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1757.524844][T13340] which would create a new lock dependency: [ 1757.530764][T13340] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1757.538396][T13340] [ 1757.538396][T13340] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1757.547966][T13340] (&dev->event_lock#2){..-.}-{3:3} [ 1757.548014][T13340] [ 1757.548014][T13340] ... which became SOFTIRQ-irq-safe at: [ 1757.560975][T13340] lock_acquire+0x106/0x350 [ 1757.565623][T13340] _raw_spin_lock_irqsave+0x40/0x60 [ 1757.570960][T13340] input_event+0x71/0xc0 [ 1757.575435][T13340] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1757.581218][T13340] __usb_hcd_giveback_urb+0x376/0x540 [ 1757.586808][T13340] dummy_timer+0xbc0/0x4650 [ 1757.591473][T13340] __hrtimer_run_queues+0x3c0/0xa20 [ 1757.596890][T13340] hrtimer_run_softirq+0x17a/0x240 [ 1757.602137][T13340] handle_softirqs+0x22a/0x840 [ 1757.607036][T13340] __irq_exit_rcu+0xca/0x220 [ 1757.611755][T13340] irq_exit_rcu+0x9/0x30 [ 1757.616120][T13340] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1757.621894][T13340] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.628018][T13340] finish_task_switch+0x427/0xbe0 [ 1757.633173][T13340] __schedule+0x1829/0x5740 [ 1757.637817][T13340] schedule+0x164/0x360 [ 1757.642116][T13340] kthread_worker_fn+0x4c4/0xb20 [ 1757.647230][T13340] kthread+0x389/0x470 [ 1757.651441][T13340] ret_from_fork+0x514/0xb70 [ 1757.656182][T13340] ret_from_fork_asm+0x1a/0x30 [ 1757.661073][T13340] [ 1757.661073][T13340] to a SOFTIRQ-irq-unsafe lock: [ 1757.668119][T13340] (tasklist_lock){.+.+}-{3:3} [ 1757.668159][T13340] [ 1757.668159][T13340] ... which became SOFTIRQ-irq-unsafe at: [ 1757.680864][T13340] ... [ 1757.680879][T13340] lock_acquire+0x106/0x350 [ 1757.688117][T13340] _raw_read_lock+0x36/0x50 [ 1757.692767][T13340] __do_wait+0xde/0x740 [ 1757.697061][T13340] do_wait+0x1e7/0x510 [ 1757.701272][T13340] kernel_wait+0xd6/0x1c0 [ 1757.705836][T13340] call_usermodehelper_exec_work+0xbe/0x230 [ 1757.711851][T13340] process_scheduled_works+0xb5d/0x1860 [ 1757.717528][T13340] worker_thread+0xa53/0xfc0 [ 1757.722258][T13340] kthread+0x389/0x470 [ 1757.726464][T13340] ret_from_fork+0x514/0xb70 [ 1757.731187][T13340] ret_from_fork_asm+0x1a/0x30 [ 1757.736089][T13340] [ 1757.736089][T13340] other info that might help us debug this: [ 1757.736089][T13340] [ 1757.746351][T13340] Chain exists of: [ 1757.746351][T13340] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1757.746351][T13340] [ 1757.759475][T13340] Possible interrupt unsafe locking scenario: [ 1757.759475][T13340] [ 1757.767830][T13340] CPU0 CPU1 [ 1757.773261][T13340] ---- ---- [ 1757.778837][T13340] lock(tasklist_lock); [ 1757.783133][T13340] local_irq_disable(); [ 1757.789916][T13340] lock(&dev->event_lock#2); [ 1757.797203][T13340] lock(&f_owner->lock); [ 1757.804104][T13340] [ 1757.807850][T13340] lock(&dev->event_lock#2); [ 1757.812745][T13340] [ 1757.812745][T13340] *** DEADLOCK *** [ 1757.812745][T13340] [ 1757.820911][T13340] 2 locks held by syz.5.17962/13340: [ 1757.826313][T13340] #0: ffff88807e3d28d0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1757.834991][T13340] #1: ffff888034515420 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1757.844240][T13340] [ 1757.844240][T13340] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1757.854682][T13340] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1757.860571][T13340] IN-SOFTIRQ-W at: [ 1757.864849][T13340] lock_acquire+0x106/0x350 [ 1757.871569][T13340] _raw_spin_lock_irqsave+0x40/0x60 [ 1757.878986][T13340] input_event+0x71/0xc0 [ 1757.885533][T13340] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1757.893301][T13340] __usb_hcd_giveback_urb+0x376/0x540 [ 1757.900904][T13340] dummy_timer+0xbc0/0x4650 [ 1757.907632][T13340] __hrtimer_run_queues+0x3c0/0xa20 [ 1757.915057][T13340] hrtimer_run_softirq+0x17a/0x240 [ 1757.922398][T13340] handle_softirqs+0x22a/0x840 [ 1757.929562][T13340] __irq_exit_rcu+0xca/0x220 [ 1757.936374][T13340] irq_exit_rcu+0x9/0x30 [ 1757.942838][T13340] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1757.950707][T13340] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.958923][T13340] finish_task_switch+0x427/0xbe0 [ 1757.966170][T13340] __schedule+0x1829/0x5740 [ 1757.972905][T13340] schedule+0x164/0x360 [ 1757.979287][T13340] kthread_worker_fn+0x4c4/0xb20 [ 1757.986444][T13340] kthread+0x389/0x470 [ 1757.992734][T13340] ret_from_fork+0x514/0xb70 [ 1757.999560][T13340] ret_from_fork_asm+0x1a/0x30 [ 1758.006544][T13340] INITIAL USE at: [ 1758.010734][T13340] lock_acquire+0x106/0x350 [ 1758.017372][T13340] _raw_spin_lock_irqsave+0x40/0x60 [ 1758.024700][T13340] input_inject_event+0xa4/0x330 [ 1758.031772][T13340] kbd_led_trigger_activate+0xbc/0x100 [ 1758.039370][T13340] led_trigger_set+0x535/0x960 [ 1758.046331][T13340] led_trigger_set_default+0x260/0x2a0 [ 1758.053928][T13340] led_classdev_register_ext+0x787/0x9c0 [ 1758.061779][T13340] input_leds_connect+0x517/0x790 [ 1758.069024][T13340] input_register_device+0xce0/0x1140 [ 1758.076621][T13340] atkbd_connect+0x71e/0xa10 [ 1758.083348][T13340] serio_driver_probe+0x82/0xb0 [ 1758.090557][T13340] really_probe+0x267/0xaf0 [ 1758.097350][T13340] __driver_probe_device+0x1ef/0x380 [ 1758.104775][T13340] driver_probe_device+0x4f/0x240 [ 1758.112370][T13340] __driver_attach+0x34c/0x640 [ 1758.119444][T13340] bus_for_each_dev+0x23b/0x2c0 [ 1758.126420][T13340] serio_handle_event+0x1af/0xf80 [ 1758.133573][T13340] process_scheduled_works+0xb5d/0x1860 [ 1758.141334][T13340] worker_thread+0xa53/0xfc0 [ 1758.148055][T13340] kthread+0x389/0x470 [ 1758.154253][T13340] ret_from_fork+0x514/0xb70 [ 1758.160971][T13340] ret_from_fork_asm+0x1a/0x30 [ 1758.167867][T13340] } [ 1758.170653][T13340] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1758.180126][T13340] -> (&client->buffer_lock){....}-{3:3} { [ 1758.186098][T13340] INITIAL USE at: [ 1758.190206][T13340] lock_acquire+0x106/0x350 [ 1758.196667][T13340] _raw_spin_lock+0x2e/0x40 [ 1758.203224][T13340] evdev_handle_get_val+0x70/0x9f0 [ 1758.210287][T13340] evdev_ioctl_handler+0x127b/0x1fe0 [ 1758.217520][T13340] __se_sys_ioctl+0xfc/0x170 [ 1758.224085][T13340] do_syscall_64+0x15f/0xf80 [ 1758.230649][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.238500][T13340] } [ 1758.241211][T13340] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1758.249592][T13340] ... acquired at: [ 1758.253612][T13340] _raw_spin_lock+0x2e/0x40 [ 1758.258341][T13340] evdev_handle_get_val+0x70/0x9f0 [ 1758.263663][T13340] evdev_ioctl_handler+0x127b/0x1fe0 [ 1758.269156][T13340] __se_sys_ioctl+0xfc/0x170 [ 1758.273966][T13340] do_syscall_64+0x15f/0xf80 [ 1758.278782][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.284895][T13340] [ 1758.287256][T13340] -> (&new->fa_lock){....}-{3:3} { [ 1758.292613][T13340] INITIAL USE at: [ 1758.296632][T13340] lock_acquire+0x106/0x350 [ 1758.302908][T13340] _raw_write_lock_irq+0x3d/0x50 [ 1758.309633][T13340] fasync_remove_entry+0xf1/0x1c0 [ 1758.316458][T13340] fsnotify_fasync+0x49/0x70 [ 1758.322873][T13340] __fput+0x890/0xa60 [ 1758.328641][T13340] task_work_run+0x1d9/0x270 [ 1758.335017][T13340] exit_to_user_mode_loop+0xf3/0x4d0 [ 1758.342257][T13340] do_syscall_64+0x33e/0xf80 [ 1758.348745][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.356509][T13340] INITIAL READ USE at: [ 1758.360974][T13340] lock_acquire+0x106/0x350 [ 1758.367698][T13340] _raw_read_lock_irqsave+0x48/0x60 [ 1758.375223][T13340] kill_fasync+0x199/0x4d0 [ 1758.381871][T13340] __se_sys_vmsplice+0x1184/0x1620 [ 1758.389220][T13340] do_syscall_64+0x15f/0xf80 [ 1758.396036][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.404146][T13340] } [ 1758.406764][T13340] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1758.415676][T13340] ... acquired at: [ 1758.419600][T13340] _raw_read_lock_irqsave+0x48/0x60 [ 1758.425026][T13340] kill_fasync+0x199/0x4d0 [ 1758.429661][T13340] evdev_pass_values+0x627/0xbd0 [ 1758.434809][T13340] evdev_events+0x1e6/0x340 [ 1758.439615][T13340] input_pass_values+0x288/0x890 [ 1758.444781][T13340] input_event_dispose+0x330/0x6b0 [ 1758.450111][T13340] input_inject_event+0x1dc/0x330 [ 1758.455356][T13340] evdev_write+0x325/0x4c0 [ 1758.459977][T13340] vfs_write+0x29a/0xb90 [ 1758.464437][T13340] ksys_write+0x150/0x270 [ 1758.468981][T13340] do_syscall_64+0x15f/0xf80 [ 1758.473790][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.479895][T13340] [ 1758.482257][T13340] -> (&f_owner->lock){....}-{3:3} { [ 1758.487517][T13340] INITIAL USE at: [ 1758.491451][T13340] lock_acquire+0x106/0x350 [ 1758.497557][T13340] _raw_write_lock_irq+0x3d/0x50 [ 1758.504103][T13340] __f_setown+0x67/0x370 [ 1758.509957][T13340] f_setown+0x23a/0x300 [ 1758.515725][T13340] sock_ioctl+0x615/0x7f0 [ 1758.521667][T13340] __se_sys_ioctl+0xfc/0x170 [ 1758.527873][T13340] do_syscall_64+0x15f/0xf80 [ 1758.534088][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.541588][T13340] INITIAL READ USE at: [ 1758.545957][T13340] lock_acquire+0x106/0x350 [ 1758.552508][T13340] _raw_read_lock_irq+0x45/0x60 [ 1758.559401][T13340] f_getown+0x54/0x2a0 [ 1758.565511][T13340] do_fcntl+0x1ac/0x1a20 [ 1758.571792][T13340] __se_sys_fcntl+0xc8/0x150 [ 1758.578422][T13340] do_syscall_64+0x15f/0xf80 [ 1758.585242][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.593172][T13340] } [ 1758.595709][T13340] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1758.604595][T13340] ... acquired at: [ 1758.608430][T13340] _raw_read_lock_irqsave+0x48/0x60 [ 1758.613849][T13340] send_sigio+0x38/0x370 [ 1758.618311][T13340] kill_fasync+0x24d/0x4d0 [ 1758.622957][T13340] lease_break_callback+0x26/0x30 [ 1758.628237][T13340] __break_lease+0x81f/0x1ea0 [ 1758.633130][T13340] do_dentry_open+0x1010/0x14e0 [ 1758.638191][T13340] vfs_open+0x3b/0x340 [ 1758.642472][T13340] path_openat+0x2e08/0x3860 [ 1758.647321][T13340] do_file_open+0x23e/0x4a0 [ 1758.652037][T13340] do_sys_openat2+0x113/0x200 [ 1758.656919][T13340] __x64_sys_openat+0x138/0x170 [ 1758.661975][T13340] do_syscall_64+0x15f/0xf80 [ 1758.666784][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.672881][T13340] [ 1758.675228][T13340] [ 1758.675228][T13340] the dependencies between the lock to be acquired [ 1758.675241][T13340] and SOFTIRQ-irq-unsafe lock: [ 1758.688807][T13340] -> (tasklist_lock){.+.+}-{3:3} { [ 1758.693979][T13340] HARDIRQ-ON-R at: [ 1758.697986][T13340] lock_acquire+0x106/0x350 [ 1758.704186][T13340] _raw_read_lock+0x36/0x50 [ 1758.710388][T13340] __do_wait+0xde/0x740 [ 1758.716241][T13340] do_wait+0x1e7/0x510 [ 1758.722011][T13340] kernel_wait+0xd6/0x1c0 [ 1758.728038][T13340] call_usermodehelper_exec_work+0xbe/0x230 [ 1758.735619][T13340] process_scheduled_works+0xb5d/0x1860 [ 1758.742856][T13340] worker_thread+0xa53/0xfc0 [ 1758.749238][T13340] kthread+0x389/0x470 [ 1758.755004][T13340] ret_from_fork+0x514/0xb70 [ 1758.761289][T13340] ret_from_fork_asm+0x1a/0x30 [ 1758.767755][T13340] SOFTIRQ-ON-R at: [ 1758.771769][T13340] lock_acquire+0x106/0x350 [ 1758.777967][T13340] _raw_read_lock+0x36/0x50 [ 1758.784258][T13340] __do_wait+0xde/0x740 [ 1758.790107][T13340] do_wait+0x1e7/0x510 [ 1758.795865][T13340] kernel_wait+0xd6/0x1c0 [ 1758.801890][T13340] call_usermodehelper_exec_work+0xbe/0x230 [ 1758.809570][T13340] process_scheduled_works+0xb5d/0x1860 [ 1758.816802][T13340] worker_thread+0xa53/0xfc0 [ 1758.823084][T13340] kthread+0x389/0x470 [ 1758.828843][T13340] ret_from_fork+0x514/0xb70 [ 1758.835117][T13340] ret_from_fork_asm+0x1a/0x30 [ 1758.841575][T13340] INITIAL USE at: [ 1758.845517][T13340] lock_acquire+0x106/0x350 [ 1758.851725][T13340] _raw_write_lock_irq+0x3d/0x50 [ 1758.858270][T13340] copy_process+0x2b4c/0x4440 [ 1758.864553][T13340] kernel_clone+0x284/0x8f0 [ 1758.870672][T13340] user_mode_thread+0x110/0x180 [ 1758.877143][T13340] rest_init+0x23/0x300 [ 1758.882907][T13340] start_kernel+0x38a/0x3e0 [ 1758.889125][T13340] x86_64_start_reservations+0x24/0x30 [ 1758.896278][T13340] x86_64_start_kernel+0x143/0x1c0 [ 1758.903001][T13340] common_startup_64+0x13e/0x147 [ 1758.909558][T13340] INITIAL READ USE at: [ 1758.913929][T13340] lock_acquire+0x106/0x350 [ 1758.920568][T13340] _raw_read_lock+0x36/0x50 [ 1758.927111][T13340] __do_wait+0xde/0x740 [ 1758.933311][T13340] do_wait+0x1e7/0x510 [ 1758.939423][T13340] kernel_wait+0xd6/0x1c0 [ 1758.945806][T13340] call_usermodehelper_exec_work+0xbe/0x230 [ 1758.953732][T13340] process_scheduled_works+0xb5d/0x1860 [ 1758.961319][T13340] worker_thread+0xa53/0xfc0 [ 1758.967943][T13340] kthread+0x389/0x470 [ 1758.974073][T13340] ret_from_fork+0x514/0xb70 [ 1758.980695][T13340] ret_from_fork_asm+0x1a/0x30 [ 1758.987495][T13340] } [ 1758.990024][T13340] ... key at: [] tasklist_lock+0x18/0x40 [ 1758.997894][T13340] ... acquired at: [ 1759.001726][T13340] _raw_read_lock+0x36/0x50 [ 1759.006448][T13340] send_sigurg+0x12b/0x420 [ 1759.011092][T13340] sk_send_sigurg+0x6c/0x2e0 [ 1759.015963][T13340] queue_oob+0x42c/0x4f0 [ 1759.020413][T13340] unix_stream_sendmsg+0xcb1/0xe80 [ 1759.025737][T13340] ____sys_sendmsg+0x972/0x9f0 [ 1759.030716][T13340] ___sys_sendmsg+0x2a5/0x360 [ 1759.035609][T13340] __sys_sendmmsg+0x27c/0x4e0 [ 1759.040511][T13340] __x64_sys_sendmmsg+0xa0/0xc0 [ 1759.045586][T13340] do_syscall_64+0x15f/0xf80 [ 1759.050399][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.056501][T13340] [ 1759.058856][T13340] [ 1759.058856][T13340] stack backtrace: [ 1759.064777][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.5.17962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.064809][T13340] Tainted: [L]=SOFTLOCKUP [ 1759.064817][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1759.064831][T13340] Call Trace: [ 1759.064840][T13340] [ 1759.064849][T13340] dump_stack_lvl+0xe8/0x150 [ 1759.064877][T13340] __lock_acquire+0x2a94/0x2cf0 [ 1759.064911][T13340] ? send_sigurg+0x12b/0x420 [ 1759.064939][T13340] lock_acquire+0x106/0x350 [ 1759.064959][T13340] ? send_sigurg+0x12b/0x420 [ 1759.064995][T13340] _raw_read_lock+0x36/0x50 [ 1759.065025][T13340] ? send_sigurg+0x12b/0x420 [ 1759.065053][T13340] send_sigurg+0x12b/0x420 [ 1759.065084][T13340] sk_send_sigurg+0x6c/0x2e0 [ 1759.065108][T13340] queue_oob+0x42c/0x4f0 [ 1759.065136][T13340] ? __pfx_queue_oob+0x10/0x10 [ 1759.065163][T13340] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1759.065197][T13340] unix_stream_sendmsg+0xcb1/0xe80 [ 1759.065222][T13340] ? finish_task_switch+0x41f/0xbe0 [ 1759.065241][T13340] ? rcu_is_watching+0x15/0xb0 [ 1759.065266][T13340] ? trace_sched_exit_tp+0x3a/0x130 [ 1759.065288][T13340] ? __lock_acquire+0x6b5/0x2cf0 [ 1759.065311][T13340] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1759.065337][T13340] ? plist_check_list+0x2f4/0x310 [ 1759.065434][T13340] ? aa_sock_msg_perm+0xda/0x1b0 [ 1759.065464][T13340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1759.065495][T13340] ____sys_sendmsg+0x972/0x9f0 [ 1759.065534][T13340] ? __might_fault+0xaf/0x130 [ 1759.065563][T13340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1759.065598][T13340] ? import_iovec+0x73/0xa0 [ 1759.065632][T13340] ___sys_sendmsg+0x2a5/0x360 [ 1759.065661][T13340] ? __lock_acquire+0x6b5/0x2cf0 [ 1759.065685][T13340] ? __pfx____sys_sendmsg+0x10/0x10 [ 1759.065718][T13340] ? __pfx_futex_wake_mark+0x10/0x10 [ 1759.065760][T13340] ? __fget_files+0x2a/0x420 [ 1759.065784][T13340] ? __fget_files+0x3a0/0x420 [ 1759.065814][T13340] __sys_sendmmsg+0x27c/0x4e0 [ 1759.065847][T13340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1759.065876][T13340] ? do_futex+0x333/0x420 [ 1759.065902][T13340] ? __pfx_do_fcntl+0x10/0x10 [ 1759.065939][T13340] ? rcu_is_watching+0x15/0xb0 [ 1759.065968][T13340] __x64_sys_sendmmsg+0xa0/0xc0 [ 1759.065999][T13340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.066021][T13340] do_syscall_64+0x15f/0xf80 [ 1759.066053][T13340] ? trace_irq_disable+0x3b/0x140 [ 1759.066085][T13340] ? clear_bhb_loop+0x40/0x90 [ 1759.066109][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.066130][T13340] RIP: 0033:0x7fce5279ce59 [ 1759.066149][T13340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.066167][T13340] RSP: 002b:00007fce5368b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1759.066190][T13340] RAX: ffffffffffffffda RBX: 00007fce52a15fa0 RCX: 00007fce5279ce59 [ 1759.066206][T13340] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 1759.066220][T13340] RBP: 00007fce52832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1759.066234][T13340] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1759.066247][T13340] R13: 00007fce52a16038 R14: 00007fce52a15fa0 R15: 00007fce52b3fa48 [ 1759.066271][T13340] [ 1761.060562][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1761.700427][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1762.350348][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1762.358520][ C1] bridge0: port 2(bridge_slave_1) entered learning state