last executing test programs: 3.854542409s ago: executing program 4 (id=19130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.459113627s ago: executing program 0 (id=19134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x4004) 3.295295489s ago: executing program 0 (id=19136): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) 3.12780148s ago: executing program 0 (id=19138): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000580)={0x18, 0x0, {0x3, @multicast, 'sit0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) 3.062573893s ago: executing program 0 (id=19139): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f00000000c0)=0x3, 0x4) 2.929405276s ago: executing program 0 (id=19140): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa002}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1a, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040054) 2.85297687s ago: executing program 0 (id=19142): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 2.402027814s ago: executing program 3 (id=19151): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) 1.887420852s ago: executing program 3 (id=19160): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x7, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1.812900573s ago: executing program 3 (id=19162): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ftruncate(r0, 0x80) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x18a) 1.744921355s ago: executing program 3 (id=19164): syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x20000) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.600251735s ago: executing program 3 (id=19165): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 1.219102715s ago: executing program 3 (id=19167): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x240448c1) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 1.152706315s ago: executing program 2 (id=19169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0xd, 0x4}, &(0x7f00000000c0)=0x8) 1.09182259s ago: executing program 2 (id=19170): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xd2) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) close(r0) 1.090724325s ago: executing program 2 (id=19171): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 734.590454ms ago: executing program 4 (id=19172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800ffff2cbd7000010000010a000000ff000009000900001000"], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 703.558677ms ago: executing program 4 (id=19173): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 671.196952ms ago: executing program 1 (id=19174): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lgetxattr(0x0, 0x0, 0x0, 0x0) 628.998624ms ago: executing program 4 (id=19175): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x181) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x6, 0x0, 0x0, r0, 0x100000}) 463.773719ms ago: executing program 4 (id=19176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x80000001, 0x20}, 0xc) 444.916333ms ago: executing program 4 (id=19177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b0c79c3", 0x4}], 0x1}}], 0x2, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 305.08553ms ago: executing program 1 (id=19178): r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000010c0)=""/205) 207.733516ms ago: executing program 1 (id=19179): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 189.339302ms ago: executing program 2 (id=19180): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00030000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 135.93981ms ago: executing program 2 (id=19181): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) sendmmsg(r0, &(0x7f0000004200)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000900)="d1f19cf57340e8d50079183d7d98", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/32, 0x20}}], 0x1, 0x2002, 0x0) 125.041619ms ago: executing program 1 (id=19182): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54", 0x41}], 0x1}, 0x810) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 68.434667ms ago: executing program 2 (id=19183): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) connect$can_j1939(r0, &(0x7f0000000140), 0x18) 53.542131ms ago: executing program 1 (id=19184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 0s ago: executing program 1 (id=19185): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x9) fcntl$getflags(r0, 0x401) kernel console output (not intermixed with test programs): is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.440372][T12059] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 912.449350][T12059] uvcvideo 4-1:0.64: No valid video chain found. [ 912.707109][T12059] usb 4-1: USB disconnect, device number 84 [ 914.694957][T12047] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 914.844904][T12047] usb 2-1: Using ep0 maxpacket: 8 [ 914.851657][T12047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.862965][T12047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.873006][T12047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 914.886280][T12047] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 914.895901][T12047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.907636][T12047] usb 2-1: config 0 descriptor?? [ 915.352921][T12047] elecom 0003:056E:00FE.0040: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 915.559262][T12047] usb 2-1: USB disconnect, device number 119 [ 915.646329][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17059'. [ 916.224711][T23868] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 916.395858][T23884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17082'. [ 916.968195][T23931] ipvlan2: entered promiscuous mode [ 917.018333][T23939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17102'. [ 917.518442][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17115'. [ 917.552088][T23977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.883637][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17126'. [ 917.950016][T24010] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 918.015974][T24016] qrtr: Invalid version 204 [ 918.089690][T24022] sg_write: data in/out 445404/202 bytes for SCSI command 0x0-- guessing data in; [ 918.089690][T24022] program syz.3.17133 not setting count and/or reply_len properly [ 918.172891][T24027] dlm: plock device version mismatch: kernel (1.2.0), user (1.28.0) [ 918.644696][ T5905] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 918.694626][T12059] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 918.800980][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 918.815448][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 918.827495][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.840987][ T5905] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 918.869740][T12059] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.881868][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.894605][T12059] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.916906][T12059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.926513][ T5905] usb 2-1: config 0 descriptor?? [ 918.943705][T24042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 918.956299][T12059] usb 4-1: config 0 descriptor?? [ 919.176346][ T9] usb 4-1: USB disconnect, device number 85 [ 919.377474][ T5905] hid_parser_main: 76 callbacks suppressed [ 919.377496][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.400960][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.402134][ T9] IPVS: starting estimator thread 0... [ 919.410778][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.422969][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.431381][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.439406][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.447315][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.457447][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.466344][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.473725][ T5905] gt683r_led 0003:1770:FF00.0041: unknown main item tag 0x0 [ 919.491296][ T5905] gt683r_led 0003:1770:FF00.0041: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 919.534631][T24096] IPVS: using max 35 ests per chain, 84000 per kthread [ 919.581489][ T5905] usb 2-1: USB disconnect, device number 120 [ 919.610759][T12059] gt683r_led 0003:1770:FF00.0041: failed to send set report request: -19 [ 919.624869][T12047] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 919.628069][T12059] gt683r_led 0003:1770:FF00.0041: failed to send set report request: -19 [ 919.670726][T12059] gt683r_led 0003:1770:FF00.0041: failed to send set report request: -19 [ 919.775074][ T29] audit: type=1326 audit(1778134378.353:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 919.814947][T12047] usb 4-1: Using ep0 maxpacket: 32 [ 919.827136][ T29] audit: type=1326 audit(1778134378.363:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 919.853826][T12047] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 919.863637][T12047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.876608][T12047] usb 4-1: Product: syz [ 919.885039][T12047] usb 4-1: Manufacturer: syz [ 919.891436][T12047] usb 4-1: SerialNumber: syz [ 919.896578][ T29] audit: type=1326 audit(1778134378.363:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 919.927709][T12047] usb 4-1: config 0 descriptor?? [ 919.937032][ T29] audit: type=1326 audit(1778134378.363:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 919.965295][T12047] asix 4-1:0.0: probe with driver asix failed with error -22 [ 919.987870][ T29] audit: type=1326 audit(1778134378.363:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 920.013411][ T29] audit: type=1326 audit(1778134378.363:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 920.038326][ T29] audit: type=1326 audit(1778134378.363:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.17156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca7d9cdd9 code=0x7ffc0000 [ 920.073581][T24148] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 920.073581][T24148] program syz.0.17160 not setting count and/or reply_len properly [ 920.168894][T12047] usb 4-1: USB disconnect, device number 86 [ 920.582322][T24194] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 920.582322][T24194] program syz.0.17175 not setting count and/or reply_len properly [ 920.664689][ T5905] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 920.704794][T12059] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 920.831082][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 920.849405][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.879244][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.900178][T12059] usb 3-1: unable to get BOS descriptor or descriptor too short [ 920.915808][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 920.935049][T12059] usb 3-1: not running at top speed; connect to a high speed hub [ 920.946972][ T5905] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 920.964771][T12059] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.977973][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.988904][T12059] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.011237][ T5905] usb 2-1: config 0 descriptor?? [ 921.018711][T12059] usb 3-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40 [ 921.028970][T12059] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 921.050445][T12059] usb 3-1: Product: syz [ 921.055113][T12059] usb 3-1: Manufacturer: syz [ 921.059820][T12059] usb 3-1: SerialNumber: syz [ 921.187615][ T24] kworker/1:0 (24) used greatest stack depth: 15512 bytes left [ 921.274698][T12047] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 921.353563][T12059] usb 3-1: USB disconnect, device number 104 [ 921.385977][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.427334][T12047] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 921.450378][T12047] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 921.461046][T12047] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.470912][T12047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.491913][T24214] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 921.500512][ T5905] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0042/input/input108 [ 921.511011][T12047] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.597136][ T5905] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 921.669790][ T5905] usb 2-1: USB disconnect, device number 121 [ 921.765912][T24260] fido_id[24260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 921.795667][T12047] usb 4-1: USB disconnect, device number 87 [ 923.384706][T12044] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 923.546869][T12044] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.572493][T12044] usb 2-1: config 0 interface 0 has no altsetting 0 [ 923.585861][T12044] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 923.599711][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.624992][T12044] usb 2-1: config 0 descriptor?? [ 923.778680][ T29] audit: type=1400 audit(1778134382.363:663): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24370 comm="syz.2.17216" [ 924.022150][T24383] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 924.092473][T12044] lenovo 0003:17EF:60A3.0043: hidraw0: USB HID vff.fd Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 924.126030][T24391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.293202][T12044] usb 2-1: USB disconnect, device number 122 [ 925.207981][ T29] audit: type=1326 audit(1778134383.793:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 925.286162][ T29] audit: type=1326 audit(1778134383.813:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 925.347844][ T29] audit: type=1326 audit(1778134383.823:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 925.396785][ T29] audit: type=1326 audit(1778134383.823:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 925.462579][ T29] audit: type=1326 audit(1778134383.823:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 925.498047][T24499] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 925.498047][T24499] program syz.2.17265 not setting count and/or reply_len properly [ 925.515995][ T29] audit: type=1326 audit(1778134383.823:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f289955d60e code=0x7ffc0000 [ 925.591775][ T29] audit: type=1326 audit(1778134383.823:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289959ca6b code=0x7ffc0000 [ 925.593719][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17266'. [ 925.623910][ T29] audit: type=1326 audit(1778134383.823:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289959ca6b code=0x7ffc0000 [ 925.679375][ T29] audit: type=1326 audit(1778134383.833:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289959ca6b code=0x7ffc0000 [ 925.706158][ T29] audit: type=1326 audit(1778134383.833:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.4.17257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289959ca6b code=0x7ffc0000 [ 926.294943][T12059] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 926.471028][T12059] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 926.482099][T12059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.490741][T12059] usb 4-1: Product: syz [ 926.504676][T12059] usb 4-1: Manufacturer: syz [ 926.520409][T12059] usb 4-1: SerialNumber: syz [ 926.550603][T12059] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 926.713436][ T5905] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.958320][T24586] xt_l2tp: v2 sid > 0xffff: 1114112 [ 927.089534][T24591] netlink: 'syz.1.17297': attribute type 1 has an invalid length. [ 927.099724][T24591] netlink: 'syz.1.17297': attribute type 2 has an invalid length. [ 927.142471][ C1] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 927.353212][T12084] usb 4-1: USB disconnect, device number 88 [ 927.524943][T12059] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 927.694577][T12059] usb 2-1: Using ep0 maxpacket: 32 [ 927.702514][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.714168][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.728164][T12059] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 927.737607][T12059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.746481][ T5905] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 927.754996][ T5905] ath9k_htc: Failed to initialize the device [ 927.762065][T12059] usb 2-1: config 0 descriptor?? [ 927.767984][T12084] usb 4-1: ath9k_htc: USB layer deinitialized [ 928.188601][T12059] ft260 0003:0403:6030.0044: item fetching failed at offset 0/2 [ 928.197859][T12059] ft260 0003:0403:6030.0044: failed to parse HID [ 928.206451][T12059] ft260 0003:0403:6030.0044: probe with driver ft260 failed with error -22 [ 928.391664][T12059] usb 2-1: USB disconnect, device number 123 [ 928.825001][T12047] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 928.974830][T12047] usb 4-1: Using ep0 maxpacket: 32 [ 928.990965][T12047] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 929.013098][T12047] usb 4-1: config 0 has no interface number 0 [ 929.023396][T12047] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.039996][T12044] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 929.052056][T12047] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.063724][T12047] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 929.073668][T12047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.098880][T12047] usb 4-1: config 0 descriptor?? [ 929.206735][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 929.228349][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.250672][T12044] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 929.266121][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.281013][T12044] usb 3-1: config 0 descriptor?? [ 929.724097][T12044] aquacomputer_d5next 0003:0C70:F0B6.0046: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 929.762516][T12047] usb 4-1: USB disconnect, device number 89 [ 929.928471][T12044] usb 3-1: USB disconnect, device number 105 [ 930.051323][T24809] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17361'. [ 930.386499][T24833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17369'. [ 930.671520][T24852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17379'. [ 931.426538][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.426594][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.510011][T24920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.614730][T12059] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 931.774960][T12059] usb 2-1: Using ep0 maxpacket: 16 [ 931.792079][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.804209][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.814708][T12059] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 931.823796][T12059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.839418][T12059] usb 2-1: config 0 descriptor?? [ 932.015171][T12047] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 932.164969][T12047] usb 3-1: Using ep0 maxpacket: 8 [ 932.172970][T12047] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 932.181961][T12047] usb 3-1: config 179 has no interface number 0 [ 932.188639][T12047] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 932.200785][T12047] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 932.212557][T12047] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 932.224173][T12047] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 932.236243][T12047] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 932.249943][T12047] usb 3-1: config 179 interface 65 has no altsetting 0 [ 932.256894][T12047] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 932.268957][T12047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.296204][T12059] ntrig 0003:1B96:0008.0047: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 932.309180][T12047] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input109 [ 932.377203][ T4981] input input109: unable to receive magic message: -110 [ 932.408629][ T4981] input input109: unable to receive magic message: -32 [ 932.429350][ T4981] input input109: unable to receive magic message: -32 [ 932.442218][ T4981] input input109: unable to receive magic message: -32 [ 932.482168][T12059] usb 2-1: USB disconnect, device number 124 [ 932.502686][ T4981] input input109: unable to receive magic message: -32 [ 932.769284][T12047] usb 3-1: USB disconnect, device number 106 [ 932.775726][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 934.027688][T25080] could not allocate digest TFM handle poly1305-generic [ 934.141791][T25111] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 934.178470][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17462'. [ 934.189468][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17462'. [ 934.203612][T25113] netlink: 'syz.3.17462': attribute type 18 has an invalid length. [ 934.213390][T12047] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 934.384867][T12047] usb 3-1: Using ep0 maxpacket: 8 [ 934.397734][T12047] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 934.413149][T12047] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 934.434985][T12047] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 934.452353][T12047] usb 3-1: Product: syz [ 934.458544][T12047] usb 3-1: Manufacturer: syz [ 934.463225][T12047] usb 3-1: SerialNumber: syz [ 934.587666][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 934.677832][T25153] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17475'. [ 934.687984][T12047] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 934.703811][T25156] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 934.703811][T25156] program syz.1.17474 not setting count and/or reply_len properly [ 934.725007][T12047] usb 3-1: Handspring Visor / Palm OS: port 0, is for Console use [ 934.735929][T12047] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 934.747517][T12047] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 934.756506][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 934.776678][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 934.803363][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 934.810869][T25159] ip6gretap0: entered promiscuous mode [ 934.828296][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 934.839111][T25159] macsec1: entered promiscuous mode [ 934.847919][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.853647][T25159] macsec1: entered allmulticast mode [ 934.862777][T25159] ip6gretap0: entered allmulticast mode [ 934.864413][ T10] usb 4-1: Product: syz [ 934.883091][ T10] usb 4-1: Manufacturer: syz [ 934.889478][ T10] usb 4-1: SerialNumber: syz [ 934.900315][T12047] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 934.913876][ T10] usb 4-1: config 0 descriptor?? [ 934.921656][T12047] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 934.933209][T25128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 934.941554][T25128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 934.954132][ T10] usb 4-1: ucan: probing device on interface #0 [ 934.967892][T12047] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 934.994433][T12047] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 935.017410][T12047] usb 3-1: USB disconnect, device number 107 [ 935.047965][T12047] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 935.093850][T12047] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 935.123401][T12047] visor 3-1:1.0: device disconnected [ 935.124996][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17482'. [ 935.366492][ T10] usb 4-1: ucan: device reported invalid device info [ 935.384822][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 935.429047][T25218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17490'. [ 935.452179][T25218] vlan2: entered promiscuous mode [ 935.474946][T12044] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 935.475110][T25218] syz_tun: entered promiscuous mode [ 935.518022][T25218] vlan2: entered allmulticast mode [ 935.524161][T25218] syz_tun: entered allmulticast mode [ 935.586807][ T10] usb 4-1: USB disconnect, device number 90 [ 935.637171][T12044] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 935.647972][T12044] usb 2-1: config 0 has no interface number 0 [ 935.654151][T12044] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.684670][T12044] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.702374][T12044] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 935.712765][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.725558][T12044] usb 2-1: config 0 descriptor?? [ 935.731603][T25242] trusted_key: encrypted_key: key trusted:8sX not found [ 935.850088][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17500'. [ 935.867674][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17500'. [ 936.163494][T12044] elo 0003:04E7:0030.0048: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input22 [ 936.357606][T12081] usb 2-1: USB disconnect, device number 125 [ 936.974667][T12044] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 937.035290][T25295] sg_write: data in/out 384728/56 bytes for SCSI command 0x0-- guessing data in; [ 937.035290][T25295] program syz.3.17508 not setting count and/or reply_len properly [ 937.136996][T12044] usb 3-1: not running at top speed; connect to a high speed hub [ 937.146344][T12044] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 29, changing to 4 [ 937.168832][T12044] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 937.183830][T12044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.196050][T12044] usb 3-1: Product: syz [ 937.206000][T12044] usb 3-1: Manufacturer: syz [ 937.215828][T12044] usb 3-1: SerialNumber: syz [ 937.241758][T12044] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 937.284403][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 937.284420][ T29] audit: type=1326 audit(1778134395.863:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.318671][ T29] audit: type=1326 audit(1778134395.903:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.360668][ T29] audit: type=1326 audit(1778134395.903:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.391483][ T29] audit: type=1326 audit(1778134395.903:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.440741][ T29] audit: type=1326 audit(1778134395.903:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.467571][T12044] usb 3-1: unit 16 not found! [ 937.473522][ T29] audit: type=1326 audit(1778134395.903:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.499808][T12044] usb 3-1: unable to issue vendor read request (ret = -71) [ 937.510038][T12044] usb 3-1: unable to issue vendor read request (ret = -71) [ 937.531108][T12044] usb 3-1: unable to issue vendor read request (ret = -71) [ 937.541665][ T29] audit: type=1326 audit(1778134395.903:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.568157][T12044] usb 3-1: unable to issue vendor read request (ret = -71) [ 937.583075][ T29] audit: type=1326 audit(1778134395.903:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.609214][ T29] audit: type=1326 audit(1778134395.903:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.641426][ T29] audit: type=1326 audit(1778134395.903:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25312 comm="syz.1.17514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 937.705905][T12044] usb 3-1: USB disconnect, device number 108 [ 937.796935][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.315125][T12059] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 938.465318][T12059] usb 2-1: Using ep0 maxpacket: 16 [ 938.477911][T12059] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 938.488206][T12059] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 938.498877][T12059] usb 2-1: Product: syz [ 938.503209][T12059] usb 2-1: Manufacturer: syz [ 938.509386][T12059] usb 2-1: SerialNumber: syz [ 938.520021][T12059] usb 2-1: config 0 descriptor?? [ 938.753833][T12047] usb 2-1: USB disconnect, device number 126 [ 939.691929][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17543'. [ 939.718749][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17543'. [ 940.127437][T25459] vlan2: entered promiscuous mode [ 940.152082][T25459] bridge0: entered promiscuous mode [ 940.569817][T25501] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17565'. [ 940.946138][T12044] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 941.101313][T25546] xt_hashlimit: size too large, truncated to 1048576 [ 941.119757][T12044] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 941.129972][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.146931][T12044] usb 3-1: config 0 descriptor?? [ 941.161979][T12044] cp210x 3-1:0.0: cp210x converter detected [ 941.440083][T25567] program syz.1.17587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.586253][T12044] usb 3-1: cp210x converter now attached to ttyUSB0 [ 941.616239][T25578] usb usb3: usbfs: process 25578 (syz.1.17590) did not claim interface 0 before use [ 941.666378][T25587] tipc: New replicast peer: 100.1.1.4 [ 941.672523][T25587] tipc: Enabled bearer , priority 17 [ 941.787270][ T5905] usb 3-1: USB disconnect, device number 109 [ 941.810143][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 941.834253][ T5905] cp210x 3-1:0.0: device disconnected [ 942.015595][T12059] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 942.031660][T25624] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17602'. [ 942.186613][T12059] usb 2-1: config 0 has no interfaces? [ 942.197431][T12059] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 942.212194][T12059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.223975][T12059] usb 2-1: config 0 descriptor?? [ 942.459660][T12059] usb 2-1: USB disconnect, device number 127 [ 942.784765][T12047] tipc: Node number set to 771751937 [ 942.820542][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17623'. [ 942.855783][T12044] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 943.017239][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.041258][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.059605][T12044] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 943.069742][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.084093][T12044] usb 3-1: config 0 descriptor?? [ 943.478901][T25733] netlink: 'syz.1.17641': attribute type 3 has an invalid length. [ 943.521686][T12044] hid_parser_main: 62 callbacks suppressed [ 943.521710][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.558091][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.580055][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.613648][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.620919][T25738] ipvlan2: entered promiscuous mode [ 943.628851][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.636782][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.643777][T12044] arvo 0003:1E7D:30D4.0049: unknown main item tag 0x0 [ 943.658921][T12044] arvo 0003:1E7D:30D4.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 943.720256][T12044] usb 3-1: USB disconnect, device number 110 [ 943.722694][T25742] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 943.813216][T25739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.841343][T25748] fido_id[25748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 944.375482][ T5905] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 944.550587][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.575244][ T5905] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 944.597853][ T5905] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 944.615144][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.628083][ T5905] usb 4-1: Product: syz [ 944.632382][ T5905] usb 4-1: Manufacturer: syz [ 944.637657][ T5905] usb 4-1: SerialNumber: syz [ 944.648090][ T5905] usb 4-1: config 0 descriptor?? [ 944.874067][ T5905] usb 4-1: USB disconnect, device number 91 [ 944.916495][T25844] netlink: 'syz.4.17670': attribute type 4 has an invalid length. [ 944.924803][T25844] netlink: 17 bytes leftover after parsing attributes in process `syz.4.17670'. [ 945.630401][ T5905] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 945.639019][ T5905] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 945.659151][ T5905] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 945.767179][T25873] fido_id[25873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 946.904633][T12044] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 947.058235][T12044] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 947.067076][T12044] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 947.076483][T12044] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 947.087269][T12044] usb 2-1: config 220 has no interface number 2 [ 947.093627][T12044] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 947.107933][T12044] usb 2-1: config 220 interface 0 has no altsetting 0 [ 947.115086][T12044] usb 2-1: config 220 interface 76 has no altsetting 0 [ 947.122140][T12044] usb 2-1: config 220 interface 1 has no altsetting 0 [ 947.132731][T12044] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 947.142519][T12044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.151238][T12044] usb 2-1: Product: syz [ 947.155796][T12044] usb 2-1: Manufacturer: syz [ 947.160445][T12044] usb 2-1: SerialNumber: syz [ 947.385734][T12044] usb 2-1: selecting invalid altsetting 0 [ 947.402242][T12044] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 947.410517][T12044] uvcvideo 2-1:220.0: No valid video chain found. [ 947.424879][T12044] usb 2-1: selecting invalid altsetting 0 [ 947.431822][T12044] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 947.447841][T12044] usb 2-1: USB disconnect, device number 2 [ 947.549720][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17723'. [ 948.010195][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 948.010548][ T29] audit: type=1326 audit(1778134406.593:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26021 comm="syz.1.17730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 948.050068][ T29] audit: type=1326 audit(1778134406.593:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26021 comm="syz.1.17730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 948.093633][ T29] audit: type=1326 audit(1778134406.593:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26021 comm="syz.1.17730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 948.159421][ T29] audit: type=1326 audit(1778134406.593:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26021 comm="syz.1.17730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 948.199418][ T29] audit: type=1326 audit(1778134406.593:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26021 comm="syz.1.17730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786ff9cdd9 code=0x7ffc0000 [ 948.654827][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 948.817640][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 948.835702][ T5905] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 948.856397][ T5905] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 948.875169][ T5905] usb 2-1: Product: syz [ 948.890360][ T5905] usb 2-1: Manufacturer: syz [ 948.904220][ T5905] usb 2-1: SerialNumber: syz [ 948.923075][ T5905] usb 2-1: config 0 descriptor?? [ 949.157174][ T5905] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 949.372798][ T5905] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 949.382146][ T5905] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 949.395556][ T5905] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 949.546780][ T5905] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 949.596257][ T5905] usb 2-1: USB disconnect, device number 3 [ 949.952886][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17748'. [ 950.500771][T26105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17755'. [ 950.705425][T26109] IPVS: Error connecting to the multicast addr [ 951.578144][T26147] binder: 26146:26147 ioctl c018620c 200000000000 returned -22 [ 951.974623][T12044] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 952.146845][T12044] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 952.176595][T12044] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.205231][T12044] usb 2-1: config 0 interface 0 has no altsetting 0 [ 952.226727][T12044] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 952.249636][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.266446][T26192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17789'. [ 952.286304][T12044] usb 2-1: config 0 descriptor?? [ 952.494588][T12081] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 952.604131][T26216] ALSA: seq fatal error: cannot create timer (-19) [ 952.657654][T12081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 952.673238][T12081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.702401][T12081] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 952.719462][T12081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.735145][T12044] corsair-psu 0003:1B1C:1C09.004B: unknown main item tag 0x0 [ 952.743508][T12081] usb 4-1: config 0 descriptor?? [ 952.767357][T12044] corsair-psu 0003:1B1C:1C09.004B: unknown main item tag 0x0 [ 952.790821][T12044] corsair-psu 0003:1B1C:1C09.004B: unknown main item tag 0x0 [ 952.809497][T12044] corsair-psu 0003:1B1C:1C09.004B: unknown main item tag 0x0 [ 952.829792][T12044] corsair-psu 0003:1B1C:1C09.004B: unknown main item tag 0x0 [ 952.855977][T12044] corsair-psu 0003:1B1C:1C09.004B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 952.936639][T12044] corsair-psu 0003:1B1C:1C09.004B: unable to initialize device (-90) [ 952.987859][T12044] corsair-psu 0003:1B1C:1C09.004B: probe with driver corsair-psu failed with error -90 [ 953.021838][T12044] usb 2-1: USB disconnect, device number 4 [ 953.190902][T12081] konepure 0003:1E7D:2DBE.004C: unknown main item tag 0x4 [ 953.209170][T12081] konepure 0003:1E7D:2DBE.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 953.387584][T12044] usb 4-1: USB disconnect, device number 92 [ 953.547881][T26298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.466961][T12044] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 954.499196][T26398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17844'. [ 954.626882][T12044] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 954.646649][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.660868][T12044] usb 2-1: config 0 descriptor?? [ 954.681298][T12044] gspca_main: spca508-2.14.0 probing 8086:0110 [ 954.735186][ T5905] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 954.881390][T12044] gspca_spca508: reg_read err -32 [ 954.897258][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 954.911160][ T5905] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 954.921713][ T5905] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 954.932296][ T5905] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 954.932362][T26421] GUP no longer grows the stack in syz.4.17850 (26421): 200000007000-200000008000 (200000004000) [ 954.941669][ T5905] usb 4-1: config 129 has no interface number 0 [ 954.941696][ T5905] usb 4-1: config 129 has no interface number 1 [ 954.941756][ T5905] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 954.941784][ T5905] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 954.941818][ T5905] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 954.941842][ T5905] usb 4-1: config 129 interface 135 has no altsetting 0 [ 954.941859][ T5905] usb 4-1: config 129 interface 5 has no altsetting 0 [ 954.945296][ T5905] usb 4-1: string descriptor 0 read error: -22 [ 954.955937][T26421] CPU: 0 UID: 0 PID: 26421 Comm: syz.4.17850 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.955971][T26421] Tainted: [L]=SOFTLOCKUP [ 954.955978][T26421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.955996][T26421] Call Trace: [ 954.956008][T26421] [ 954.956016][T26421] dump_stack_lvl+0xe8/0x150 [ 954.956047][T26421] fixup_user_fault+0x637/0x6f0 [ 954.956077][T26421] fault_in_user_writeable+0x71/0xd0 [ 954.956100][T26421] futex_lock_pi+0x814/0xb10 [ 954.956138][T26421] ? __pfx_futex_lock_pi+0x10/0x10 [ 954.956191][T26421] ? __pfx_futex_wake_mark+0x10/0x10 [ 954.956230][T26421] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 954.956263][T26421] do_futex+0x292/0x420 [ 954.956291][T26421] ? __pfx_do_futex+0x10/0x10 [ 954.956315][T26421] ? __vm_munmap+0x2e6/0x3d0 [ 954.956342][T26421] __se_sys_futex+0x3a8/0x450 [ 954.956371][T26421] ? __pfx___se_sys_futex+0x10/0x10 [ 954.956394][T26421] ? rcu_is_watching+0x15/0xb0 [ 954.956424][T26421] ? __x64_sys_futex+0x21/0xf0 [ 954.956447][T26421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.956469][T26421] do_syscall_64+0x15f/0xf80 [ 954.956494][T26421] ? trace_irq_disable+0x3b/0x140 [ 954.956523][T26421] ? clear_bhb_loop+0x40/0x90 [ 954.956547][T26421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.956568][T26421] RIP: 0033:0x7f289959cdd9 [ 954.956592][T26421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.956610][T26421] RSP: 002b:00007f289a46f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 954.956632][T26421] RAX: ffffffffffffffda RBX: 00007f2899815fa0 RCX: 00007f289959cdd9 [ 954.956647][T26421] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 954.956661][T26421] RBP: 00007f2899632d69 R08: 0000000000000000 R09: 0000000000000000 [ 954.956680][T26421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.956692][T26421] R13: 00007f2899816038 R14: 00007f2899815fa0 R15: 00007f289993fa48 [ 954.956722][T26421] [ 955.089364][T12044] gspca_spca508: reg_read err -71 [ 955.099116][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 955.133710][T12044] gspca_spca508: reg_read err -71 [ 955.154074][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.187451][T12044] gspca_spca508: reg_read err -71 [ 955.187802][T12044] gspca_spca508: reg write: error -71 [ 955.296886][ T5905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 955.300579][T12044] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 955.305329][ T5905] usb 4-1: MIDIStreaming interface descriptor not found [ 955.328371][T12044] usb 2-1: USB disconnect, device number 5 [ 955.538693][ T5905] usb 4-1: USB disconnect, device number 93 [ 955.829086][ T29] audit: type=1326 audit(1778134414.413:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 955.863470][ T29] audit: type=1326 audit(1778134414.413:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 955.905289][ T29] audit: type=1326 audit(1778134414.423:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 955.937154][ T29] audit: type=1326 audit(1778134414.423:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 955.963702][ T29] audit: type=1326 audit(1778134414.423:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 955.999710][ T29] audit: type=1326 audit(1778134414.423:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26479 comm="syz.4.17857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x7ffc0000 [ 956.362109][T26516] vlan2: entered allmulticast mode [ 956.371195][T26516] virt_wifi0: entered allmulticast mode [ 956.455174][T12044] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 956.644808][T12044] usb 3-1: Using ep0 maxpacket: 16 [ 956.656512][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.674890][T12044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.691943][T12044] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.721729][T12044] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 956.738192][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.743319][T26539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17879'. [ 956.754289][T12044] usb 3-1: config 0 descriptor?? [ 957.198323][T12044] microsoft 0003:045E:07DA.004D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 957.215622][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 957.224679][T12044] microsoft 0003:045E:07DA.004D: no inputs found [ 957.233724][T12044] microsoft 0003:045E:07DA.004D: could not initialize ff, continuing anyway [ 957.385881][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 957.393220][ T5905] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.405494][ T5905] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.419665][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 957.420425][T12044] usb 3-1: USB disconnect, device number 111 [ 957.443033][ T5905] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 957.464339][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.478774][ T5905] usb 2-1: config 0 descriptor?? [ 957.927285][ T5905] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.004E/input/input111 [ 958.052824][ T5905] uclogic 0003:28BD:0935.004E: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 958.098692][T26619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 958.143126][ T5905] usb 2-1: USB disconnect, device number 6 [ 958.204323][T26626] fido_id[26626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 959.386064][T26712] kvm: kvm [26710]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 960.144711][T12044] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 960.304741][T12044] usb 2-1: Using ep0 maxpacket: 16 [ 960.312192][T12044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.323902][T12044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.343599][T12044] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 960.353207][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.365268][T12044] usb 2-1: config 0 descriptor?? [ 960.506546][T26782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17949'. [ 960.556088][T26784] loop1: detected capacity change from 0 to 8 [ 960.732140][ C1] invalid error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 960.742269][ C1] Buffer I/O error on dev loop1, logical block 0, lost async page write [ 960.799115][T12044] konepure 0003:1E7D:2DB4.004F: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 960.947114][T26804] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.17955'. [ 961.001945][T12044] usb 2-1: USB disconnect, device number 7 [ 961.335177][T12059] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 961.486769][T12059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 961.498394][T12059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 961.509906][T12059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 961.525313][T12059] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 961.534424][T12059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.553255][T12059] usb 3-1: config 0 descriptor?? [ 961.559690][T26824] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 961.922786][T26849] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 961.994338][T12059] uclogic 0003:5543:0004.0050: ignoring exceeding usage max [ 962.009507][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.017959][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.025669][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.032895][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.040634][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.066327][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.086133][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.093982][T12059] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 962.112617][T12059] uclogic 0003:5543:0004.0050: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 962.249374][T12059] usb 3-1: USB disconnect, device number 112 [ 962.735485][T26907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17978'. [ 963.287885][T26936] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.17988'. [ 963.305369][T26936] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.17988'. [ 965.459429][T27017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18009'. [ 965.630606][T27022] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 965.924049][T27042] netlink: 124 bytes leftover after parsing attributes in process `syz.2.18018'. [ 966.602037][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18034'. [ 966.657913][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18034'. [ 966.848284][T27101] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.014687][T12044] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 967.059730][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18044'. [ 967.175123][T12044] usb 3-1: Using ep0 maxpacket: 32 [ 967.186881][T12044] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.221581][T12044] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.250227][T12044] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 967.261599][T12044] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 967.274829][T12044] usb 3-1: Product: syz [ 967.279115][T12044] usb 3-1: Manufacturer: syz [ 967.293683][T12044] hub 3-1:4.0: USB hub found [ 967.499663][T12044] hub 3-1:4.0: 2 ports detected [ 967.703458][T12044] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 967.703514][T12044] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 967.746773][T12044] usb 3-1: USB disconnect, device number 113 [ 968.312267][T27193] ALSA: mixer_oss: invalid OSS volume '' [ 968.417063][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18072'. [ 968.565515][ T5905] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 968.602960][T27221] kvm: kvm [27218]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xcd [ 968.726237][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 968.741103][ T5905] usb 4-1: string descriptor 0 read error: -22 [ 968.755644][ T5905] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 968.775764][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.817713][ T5905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 968.840117][ T5905] usb 4-1: MIDIStreaming interface descriptor not found [ 968.926328][T12044] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 969.026575][ T5905] usb 4-1: USB disconnect, device number 94 [ 969.095682][T12044] usb 2-1: Using ep0 maxpacket: 32 [ 969.115135][T12044] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 969.138157][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.170815][T12044] usb 2-1: config 0 descriptor?? [ 969.307573][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18091'. [ 969.397671][T12044] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 969.429337][T12044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 969.453649][T12044] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 969.462351][T12044] usb 2-1: media controller created [ 969.488425][T12044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.616726][T12044] DVB: Unable to find symbol dib7000p_attach() [ 969.641526][T12044] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 969.659548][T27322] Cannot find add_set index 4 as target [ 969.814663][T12044] rc_core: IR keymap rc-dib0700-rc5 not found [ 969.828626][T12044] Registered IR keymap rc-empty [ 969.840694][T12044] dvb-usb: could not initialize remote control. [ 969.854245][T12044] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 969.869230][ T29] audit: type=1326 audit(1778134428.453:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 969.922215][T12044] usb 2-1: USB disconnect, device number 8 [ 969.933887][ T29] audit: type=1326 audit(1778134428.453:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.017734][ T29] audit: type=1326 audit(1778134428.483:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.043114][T12044] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 970.102172][ T29] audit: type=1326 audit(1778134428.483:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.150514][ T29] audit: type=1326 audit(1778134428.483:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.177037][ T29] audit: type=1326 audit(1778134428.483:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.223903][ T29] audit: type=1326 audit(1778134428.483:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.269941][ T29] audit: type=1326 audit(1778134428.483:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.295675][ T29] audit: type=1326 audit(1778134428.483:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.344622][ T29] audit: type=1326 audit(1778134428.483:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27335 comm="syz.2.18103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f739bb9cdd9 code=0x7ffc0000 [ 970.384871][T12047] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 970.534911][T12047] usb 4-1: Using ep0 maxpacket: 32 [ 970.544080][T12047] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 970.557937][T12047] usb 4-1: config 0 has no interface number 0 [ 970.572393][T12047] usb 4-1: config 0 interface 12 has no altsetting 0 [ 970.587929][T12047] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 970.610299][T12047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.634952][T12047] usb 4-1: Product: syz [ 970.643718][T12047] usb 4-1: Manufacturer: syz [ 970.652959][T12047] usb 4-1: SerialNumber: syz [ 970.680843][T12047] usb 4-1: config 0 descriptor?? [ 971.018077][T27417] loop1: detected capacity change from 0 to 8 [ 971.142129][ C0] invalid error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 971.151962][ C0] Buffer I/O error on dev loop1, logical block 0, lost async page write [ 971.234798][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 971.404683][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 971.412659][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.425073][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 971.434319][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.450559][ T10] usb 2-1: config 0 descriptor?? [ 971.510599][T12047] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 971.522542][T12047] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 971.530145][T12047] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 971.538277][T12047] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 971.555922][T12047] usb 4-1: USB disconnect, device number 95 [ 971.880671][ T10] mcp2221 0003:04D8:00DD.0051: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 972.260771][T27467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18133'. [ 972.312828][ T5905] usb 2-1: USB disconnect, device number 9 [ 972.386275][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 973.594965][T12047] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 973.765644][T12047] usb 4-1: Using ep0 maxpacket: 16 [ 973.777645][T12047] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 973.788203][T12047] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.799896][T12047] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.817201][T12047] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 973.841712][T12047] usb 4-1: config 7 interface 0 has no altsetting 0 [ 973.850299][T12047] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 973.859862][T12047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.933135][T27580] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 973.950482][T27580] syzkaller1: linktype set to 864 [ 974.287491][T27543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.315185][T27543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.356970][T12047] hid (null): unknown global tag 0xd [ 974.400192][T12047] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0052/input/input114 [ 974.602955][T12047] kye 0003:0458:5010.0052: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 974.642206][T12047] usb 4-1: USB disconnect, device number 96 [ 974.789980][T27625] fido_id[27625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 974.889916][T27643] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 975.535300][T12081] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 975.696638][T12081] usb 4-1: Using ep0 maxpacket: 16 [ 975.707561][T12081] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.718485][T12081] usb 4-1: config 0 has no interface number 0 [ 975.728630][T12081] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 975.739526][T12081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.748515][T12081] usb 4-1: Product: syz [ 975.752964][T12081] usb 4-1: Manufacturer: syz [ 975.767446][T12081] usb 4-1: SerialNumber: syz [ 975.777144][T12081] usb 4-1: config 0 descriptor?? [ 975.790983][T12081] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 975.993480][T12081] gspca_spca1528: reg_w err -71 [ 976.025502][T12081] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 976.038731][T12081] usb 4-1: USB disconnect, device number 97 [ 976.169355][T27712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18193'. [ 976.178995][T27712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18193'. [ 976.188613][T27712] netlink: 39 bytes leftover after parsing attributes in process `syz.2.18193'. [ 976.598230][T27737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18201'. [ 976.654699][T12047] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 976.824838][T12047] usb 3-1: Using ep0 maxpacket: 16 [ 976.838996][T12047] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 976.849435][T12047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.858033][T12047] usb 3-1: Product: syz [ 976.862442][T12047] usb 3-1: Manufacturer: syz [ 976.872970][T12047] usb 3-1: SerialNumber: syz [ 976.884400][T12047] usb 3-1: config 0 descriptor?? [ 977.281120][T27763] binder: 27762:27763 ioctl c018620c 200000000240 returned -22 [ 977.301610][T12047] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 977.323930][T12047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.346157][T12047] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 977.372705][T12047] usb 3-1: media controller created [ 977.399602][T12047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.502184][T12047] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 977.517058][T12047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 977.713061][T12044] usb 3-1: USB disconnect, device number 114 [ 977.770008][T12044] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 979.373339][T27907] netlink: 'syz.2.18238': attribute type 16 has an invalid length. [ 979.389962][T27907] netlink: 'syz.2.18238': attribute type 3 has an invalid length. [ 979.401332][T27907] netlink: 'syz.2.18238': attribute type 2 has an invalid length. [ 979.410326][T27907] netlink: 'syz.2.18238': attribute type 1 has an invalid length. [ 979.419863][T27907] netlink: 64022 bytes leftover after parsing attributes in process `syz.2.18238'. [ 979.703530][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18244'. [ 979.832808][T27935] ipip0: entered allmulticast mode [ 980.222112][T27960] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18255'. [ 980.390690][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18259'. [ 980.680197][T27995] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 980.680197][T27995] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 980.680197][T27995] ~^>Ƥr&Dq.;쀯<2AU,00000000000000000000003' [ 980.955135][T12044] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 981.055735][T28019] tipc: New replicast peer: 255.255.255.255 [ 981.063658][T28019] tipc: Enabled bearer , priority 0 [ 981.074126][T28019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18276'. [ 981.083780][T28019] tipc: Disabling bearer [ 981.116579][T12044] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.127173][T12044] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 981.143716][T12044] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 981.155642][T12044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.163787][T12044] usb 2-1: Product: syz [ 981.168533][T12044] usb 2-1: Manufacturer: syz [ 981.173278][T12044] usb 2-1: SerialNumber: syz [ 981.397160][T27998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.411054][T27998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.442818][T12044] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 981.483862][T12044] usb 2-1: USB disconnect, device number 10 [ 981.965370][T12044] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 982.117681][T12044] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 982.136089][T12044] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 982.156741][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 982.175682][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 982.187550][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 982.199194][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.210065][T12044] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 982.219968][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.395580][ T5905] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 982.437075][T12044] usb 2-1: usb_control_msg returned -71 [ 982.444156][T12044] usbtmc 2-1:16.0: can't read capabilities [ 982.450636][T12044] usbtmc 2-1:16.0: Failed to submit iin_urb [ 982.457128][T12044] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -90 [ 982.482563][T12044] usb 2-1: USB disconnect, device number 11 [ 982.555198][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 982.568130][ T5905] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.593495][ T5905] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.608712][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 982.616537][ T5905] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 982.632558][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.645192][ T5905] usb 4-1: config 0 descriptor?? [ 982.866065][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 982.874305][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 982.892058][ T5905] usb 4-1: USB disconnect, device number 98 [ 983.060455][T28139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18305'. [ 983.476293][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18311'. [ 983.487781][T28157] netlink: 'syz.1.18311': attribute type 25 has an invalid length. [ 983.496626][T28157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18311'. [ 983.920574][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18318'. [ 983.957284][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18318'. [ 984.203063][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 984.203080][ T29] audit: type=1326 audit(1778134442.783:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.4.18322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f289959cdd9 code=0x0 [ 984.629514][T12509] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.656770][T12509] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.678224][T12509] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.695432][T12509] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.234629][T12044] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 985.386697][T12044] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 985.396203][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.408046][T12044] usb 2-1: config 0 descriptor?? [ 985.417045][T12044] cp210x 2-1:0.0: cp210x converter detected [ 985.819454][T12044] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 985.857873][T12044] usb 2-1: cp210x converter now attached to ttyUSB0 [ 986.047568][ T5905] usb 2-1: USB disconnect, device number 12 [ 986.089083][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 986.169797][ T5905] cp210x 2-1:0.0: device disconnected [ 986.227631][T28302] netlink: 889 bytes leftover after parsing attributes in process `syz.4.18350'. [ 986.442123][T28319] netlink: 'syz.2.18355': attribute type 7 has an invalid length. [ 986.462026][T28319] netlink: 'syz.2.18355': attribute type 7 has an invalid length. [ 986.545379][T12081] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 986.707780][T12081] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 986.740240][T12081] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 986.765352][T12081] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 986.783768][T12081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.811848][T28307] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 986.830662][T12081] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 987.222417][T28367] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 987.247098][ T10] usb 4-1: USB disconnect, device number 99 [ 987.365210][T12081] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 987.547346][T28400] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18372'. [ 987.551092][T12081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.586239][T12081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.610633][T12081] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 987.626536][T12081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.638948][T12081] usb 2-1: config 0 descriptor?? [ 988.084056][T12081] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 988.104274][T12081] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 988.124102][T12081] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 988.145329][T12081] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 988.161389][T12081] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 988.184887][T12081] playstation 0003:054C:0DF2.0053: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 988.277109][T12081] playstation 0003:054C:0DF2.0053: Invalid reportID received, expected 9 got 0 [ 988.308930][T12081] playstation 0003:054C:0DF2.0053: Failed to retrieve DualSense pairing info: -22 [ 988.338633][T12081] playstation 0003:054C:0DF2.0053: Failed to get MAC address from DualSense [ 988.358444][T12081] playstation 0003:054C:0DF2.0053: Failed to create dualsense. [ 988.401864][T12081] playstation 0003:054C:0DF2.0053: probe with driver playstation failed with error -22 [ 988.548186][T12081] usb 2-1: USB disconnect, device number 13 [ 989.666453][T12081] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 989.846739][T12081] usb 3-1: Using ep0 maxpacket: 8 [ 989.872766][T12081] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 989.913299][T12081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.000499][T12081] pvrusb2: Hardware description: Terratec Grabster AV400 [ 990.043377][T12081] pvrusb2: ********** [ 990.069283][T12081] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 990.099982][T12081] pvrusb2: Important functionality might not be entirely working. [ 990.116249][T12081] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 990.129877][T12081] pvrusb2: ********** [ 990.200272][ T2357] pvrusb2: Invalid write control endpoint [ 990.403794][T12081] usb 3-1: USB disconnect, device number 115 [ 990.439372][ T2357] pvrusb2: Invalid write control endpoint [ 990.467456][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 990.528214][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 990.555313][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 990.578567][ T2357] pvrusb2: Device being rendered inoperable [ 990.596883][ T2357] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 990.621566][ T2357] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 990.673668][ T2357] pvrusb2: Attached sub-driver cx25840 [ 990.684945][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 990.699036][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 990.907027][T28627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.975731][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18429'. [ 991.335790][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18437'. [ 991.417954][T12081] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 991.608536][T12081] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 991.645159][T12081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.666828][T12081] usb 3-1: config 0 descriptor?? [ 991.808384][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18444'. [ 991.894134][T12081] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 992.098726][T12081] [drm:udl_init] *ERROR* Selecting channel failed [ 992.202574][T12081] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 992.230541][T12081] [drm] Initialized udl on minor 2 [ 992.276708][T12081] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 992.288655][T12081] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 992.297604][T12059] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 992.319674][T12081] usb 3-1: USB disconnect, device number 116 [ 992.335547][T12059] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 992.628203][T28743] sctp: [Deprecated]: syz.0.18458 (pid 28743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 992.628203][T28743] Use struct sctp_sack_info instead [ 992.804999][T12081] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 992.856201][T28760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18466'. [ 992.867855][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.874235][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.910710][T28760] ipvlan2: entered allmulticast mode [ 992.925156][T28760] syz_tun: entered allmulticast mode [ 992.969691][T12081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.989404][T12081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.001264][T12081] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 993.011517][T12081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 993.023067][T12081] usb 2-1: SerialNumber: syz [ 993.241745][T12044] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 993.261009][T12044] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 993.279240][T12081] usb 2-1: 0:2 : does not exist [ 993.298905][T12044] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz0] on syz1 [ 993.433311][T12081] usb 2-1: USB disconnect, device number 14 [ 993.492220][T28801] fido_id[28801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 993.525365][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.856096][T28844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.136290][T28907] Invalid logical block size (-1) [ 996.081985][T28926] sctp: [Deprecated]: syz.2.18508 (pid 28926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 996.081985][T28926] Use struct sctp_sack_info instead [ 997.371546][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18526'. [ 997.382650][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18526'. [ 998.835309][T29015] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 998.846523][T29015] pim6reg1: linktype set to 0 [ 1000.345250][T12081] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1000.515106][T12081] usb 4-1: Using ep0 maxpacket: 32 [ 1000.526883][T12081] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1000.545653][T12081] usb 4-1: config 0 has no interface number 0 [ 1000.556910][T12081] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1000.575190][T12081] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1000.583822][T12081] usb 4-1: Product: syz [ 1000.603778][T12081] usb 4-1: Manufacturer: syz [ 1000.615947][T12081] usb 4-1: config 0 descriptor?? [ 1000.858128][T12081] usb 4-1: USB disconnect, device number 100 [ 1001.141305][T29085] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1001.150096][T29085] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1001.694824][T12044] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1001.844577][T12044] usb 4-1: Using ep0 maxpacket: 32 [ 1001.858576][T12044] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1001.873609][T12044] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.886306][T12044] usb 4-1: config 0 descriptor?? [ 1002.124648][T12044] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1002.149523][T12044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1002.170191][T12044] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1002.181023][T12044] usb 4-1: media controller created [ 1002.198682][T12044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.326689][T12044] az6027: usb out operation failed. (-71) [ 1002.356734][T12044] az6027: usb out operation failed. (-71) [ 1002.375554][T12044] stb0899_attach: Driver disabled by Kconfig [ 1002.382655][T12044] az6027: no front-end attached [ 1002.382655][T12044] [ 1002.398200][T12044] az6027: usb out operation failed. (-71) [ 1002.408534][T12044] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1002.429812][T12044] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input117 [ 1002.467750][T12044] dvb-usb: schedule remote query interval to 400 msecs. [ 1002.481208][T12044] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1002.511671][T12044] usb 4-1: USB disconnect, device number 101 [ 1002.635993][T12044] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1002.924096][T29182] loop5: detected capacity change from 0 to 7 [ 1002.947419][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1002.956711][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1002.980626][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1002.989930][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.005334][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.014595][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.028894][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.038182][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.048930][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.058132][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.066611][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.075880][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.087246][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.096524][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.104617][T29182] ldm_validate_partition_table(): Disk read failed. [ 1003.114354][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.123633][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.171008][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.180257][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.214106][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1003.221951][T29184] loop5: detected capacity change from 7 to 0 [ 1003.223308][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1003.244436][T29182] Dev loop5: unable to read RDB block 0 [ 1003.271466][T29182] loop5: unable to read partition table [ 1003.299808][T29182] loop5: partition table beyond EOD, truncated [ 1003.325108][T29182] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 1003.476781][T12081] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1003.653281][T12081] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.698663][T12081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.714279][T12081] usb 4-1: Product: syz [ 1003.729855][T12081] usb 4-1: Manufacturer: syz [ 1003.741595][T12081] usb 4-1: SerialNumber: syz [ 1004.206197][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1004.355411][ T5905] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1004.389502][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1004.399161][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.409425][ T10] usb 3-1: Product: syz [ 1004.413718][ T10] usb 3-1: Manufacturer: syz [ 1004.419277][ T10] usb 3-1: SerialNumber: syz [ 1004.427985][ T10] usb 3-1: config 0 descriptor?? [ 1004.514994][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 1004.522120][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1004.533739][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1004.548180][ T5905] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1004.557919][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.569889][ T5905] usb 2-1: config 0 descriptor?? [ 1004.578220][T29292] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1004.635649][T12081] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 1004.661318][T12081] cdc_ncm 4-1:1.0: bind() failure [ 1004.673651][T12081] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1004.681291][T12081] cdc_ncm 4-1:1.1: bind() failure [ 1004.694047][T12081] usb 4-1: USB disconnect, device number 102 [ 1004.852621][ T10] usb 3-1: Firmware: major: 0, minor: 224, hardware type: UNKNOWN (223) [ 1004.997559][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.006320][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.013354][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.023115][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.033758][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.042212][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.056568][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.056753][ T10] usb 3-1: failed to fetch extended address, random address set [ 1005.063612][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.086876][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.094084][ T5905] saitek 0003:06A3:0CCD.0055: unknown main item tag 0x0 [ 1005.098339][ T10] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1005.125433][ T10] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1005.133721][ T5905] saitek 0003:06A3:0CCD.0055: hidraw0: USB HID v0.08 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0 [ 1005.164411][ T10] usb 3-1: USB disconnect, device number 117 [ 1005.301318][ T5905] usb 2-1: USB disconnect, device number 15 [ 1005.834391][T29387] xt_hashlimit: size too large, truncated to 1048576 [ 1006.315142][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1006.385028][ T5905] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1006.486995][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1006.499066][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1006.510258][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.518797][ T10] usb 2-1: Product: syz [ 1006.523131][ T10] usb 2-1: Manufacturer: syz [ 1006.528701][ T10] usb 2-1: SerialNumber: syz [ 1006.538008][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.548363][ T10] usb 2-1: selecting invalid altsetting 1 [ 1006.549098][ T10] usb 2-1: unit 6 not found! [ 1006.585093][ T5905] usb 3-1: config 0 has no interfaces? [ 1006.595134][ T5905] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1006.615277][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.643734][ T5905] usb 3-1: config 0 descriptor?? [ 1006.949740][T12047] usb 3-1: USB disconnect, device number 118 [ 1007.357995][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1007.368721][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1007.382549][ T10] usb 2-1: selecting invalid altsetting 1 [ 1007.389706][ T10] usb 2-1: unit 6 not found! [ 1007.397069][ T10] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1007.406519][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1007.420300][ T10] usb 2-1: selecting invalid altsetting 1 [ 1007.428726][ T10] usb 2-1: unit 6 not found! [ 1007.433950][ T10] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1007.493985][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1007.511520][ T10] usb 2-1: USB disconnect, device number 16 [ 1007.599866][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.809527][T29496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18621'. [ 1008.306457][T29514] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1008.382429][T29517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18628'. [ 1009.784157][T29638] netlink: 488 bytes leftover after parsing attributes in process `syz.1.18650'. [ 1009.795449][T29638] netlink: 488 bytes leftover after parsing attributes in process `syz.1.18650'. [ 1010.242038][T29676] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18662'. [ 1010.404614][T12044] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1010.532049][T29692] netlink: 'syz.4.18668': attribute type 16 has an invalid length. [ 1010.544149][T29692] netlink: 'syz.4.18668': attribute type 3 has an invalid length. [ 1010.556434][T29692] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.18668'. [ 1010.587475][T12044] usb 2-1: Using ep0 maxpacket: 8 [ 1010.602610][T12044] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1010.617127][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.650677][T12044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1010.678221][T12044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1010.700338][T12044] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.735065][T12044] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1010.750256][T29703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18672'. [ 1010.759351][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.782302][T29703] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18672'. [ 1010.805254][T29703] netlink: 'syz.3.18672': attribute type 5 has an invalid length. [ 1010.830590][T29703] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18672'. [ 1011.000288][T12044] usb 2-1: GET_CAPABILITIES returned 0 [ 1011.016664][T12044] usbtmc 2-1:16.0: can't read capabilities [ 1011.161296][T29731] xt_hashlimit: size too large, truncated to 1048576 [ 1011.273597][ T5905] usb 2-1: USB disconnect, device number 17 [ 1011.825317][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1012.004958][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1012.037670][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.061335][ T10] usb 3-1: config 0 has no interface number 0 [ 1012.081350][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.104080][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.115213][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1012.124314][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.147526][ T10] usb 3-1: config 0 descriptor?? [ 1012.780876][ T10] uclogic 0003:28BD:0094.0056: pen parameters not found [ 1012.807026][ T10] uclogic 0003:28BD:0094.0056: interface is invalid, ignoring [ 1012.848423][ T10] usb 3-1: USB disconnect, device number 119 [ 1012.889866][T29837] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1012.954838][T29837] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1013.719766][T29896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.751837][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18725'. [ 1014.174901][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1014.354680][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1014.370595][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1014.389903][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.417127][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.442527][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1014.473663][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.506113][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1014.526351][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.768488][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 1014.788736][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1014.997826][T12081] usb 2-1: USB disconnect, device number 18 [ 1015.438881][T29999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18758'. [ 1015.847967][T30023] binder: 30021:30023 ioctl c018620c 200000000900 returned -1 [ 1016.275209][T12081] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1016.446507][T12081] usb 2-1: Using ep0 maxpacket: 8 [ 1016.469845][T12081] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.491282][T12081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.516434][T12081] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1016.537071][T12081] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.567797][T12081] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1016.585441][T12081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.812839][T12081] usb 2-1: GET_CAPABILITIES returned 0 [ 1016.821273][T12081] usbtmc 2-1:16.0: can't read capabilities [ 1016.821435][T30084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18786'. [ 1017.030393][ T10] usb 2-1: USB disconnect, device number 19 [ 1017.579852][T30142] netlink: 116 bytes leftover after parsing attributes in process `syz.1.18804'. [ 1017.637983][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1017.814986][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1017.822364][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1017.833960][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.848783][ T10] usb 3-1: config 0 descriptor?? [ 1017.865432][T12081] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1017.867630][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1018.036989][T12081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.065194][T12081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.077292][T12081] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1018.087396][T12081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1018.096385][T12081] usb 2-1: SerialNumber: syz [ 1018.266982][ T10] gspca_sq930x: ucbus_write failed -71 [ 1018.280001][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1018.293992][ T10] usb 3-1: USB disconnect, device number 120 [ 1018.333162][T12081] usb 2-1: 0:2 : does not exist [ 1018.381227][T12081] usb 2-1: USB disconnect, device number 20 [ 1018.423943][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.661725][T30183] netlink: 'syz.3.18809': attribute type 32 has an invalid length. [ 1018.670217][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18809'. [ 1018.707066][T30183] bond4: option coupled_control: invalid value (28) [ 1018.718238][T30183] bond4 (unregistering): Released all slaves [ 1019.428199][T30292] netlink: 'syz.3.18826': attribute type 29 has an invalid length. [ 1019.466610][T30292] netlink: 'syz.3.18826': attribute type 29 has an invalid length. [ 1019.536184][T30296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18827'. [ 1019.844105][T30318] input: syz1 as /devices/virtual/input/input118 [ 1019.905934][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1020.084563][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1020.092282][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1020.102277][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.125335][ T10] usb 3-1: config 0 descriptor?? [ 1020.445269][T12044] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1020.505186][T12081] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1020.572714][ T10] hid_parser_main: 17 callbacks suppressed [ 1020.572736][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.597843][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.605371][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.618120][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.630780][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.639750][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.648548][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.656039][T12081] usb 4-1: Using ep0 maxpacket: 32 [ 1020.657093][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.669287][T12044] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1020.679492][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.679689][T12081] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1020.686565][T12044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.686592][T12044] usb 2-1: Product: syz [ 1020.686608][T12044] usb 2-1: Manufacturer: syz [ 1020.686624][T12044] usb 2-1: SerialNumber: syz [ 1020.689807][T12044] usb 2-1: config 0 descriptor?? [ 1020.723627][ T10] lenovo 0003:17EF:6067.0057: unknown main item tag 0x0 [ 1020.734073][ T10] lenovo 0003:17EF:6067.0057: hidraw0: USB HID v0.20 Device [HID 17ef:6067] on usb-dummy_hcd.2-1/input0 [ 1020.750478][T12081] usb 4-1: config 0 has no interface number 0 [ 1020.770547][T12044] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 021 [ 1020.782989][ T10] usb 3-1: USB disconnect, device number 121 [ 1020.791532][T12081] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1020.820247][T12081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.842032][T12081] usb 4-1: Product: syz [ 1020.853956][T12081] usb 4-1: Manufacturer: syz [ 1020.870346][T12081] usb 4-1: SerialNumber: syz [ 1020.889954][T30380] fido_id[30380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1020.919289][T12081] usb 4-1: config 0 descriptor?? [ 1020.939459][T12081] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1021.144255][T12081] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1021.176036][T12081] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1021.305259][T30417] pimreg: tun_chr_ioctl cmd 1074025677 [ 1021.307402][T30421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.311889][T30417] pimreg: linktype set to 1 [ 1021.372940][T12044] i2c i2c-2: connected i2c-tiny-usb device [ 1021.546863][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1021.548272][T12044] usb 4-1: USB disconnect, device number 103 [ 1021.570538][T12044] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1021.609316][T12044] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1021.627634][ T10] usb 2-1: USB disconnect, device number 21 [ 1021.648484][T12044] quatech2 4-1:0.51: device disconnected [ 1022.843791][T30519] input: syz1 as /devices/virtual/input/input119 [ 1023.446275][T30552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18889'. [ 1023.876687][T30582] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.18899'. [ 1024.046266][T30593] netlink: 'syz.2.18903': attribute type 3 has an invalid length. [ 1024.210110][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18908'. [ 1024.290281][T30597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.298052][T30597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.450790][T30597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.471121][T30597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.549316][T30597] ip6gretap0: left allmulticast mode [ 1024.558580][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.579490][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.595105][T12081] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1024.597481][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.622043][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.707047][T30622] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1024.713148][T30622] syzkaller1: linktype set to 773 [ 1024.747764][T30632] netlink: 'syz.0.18917': attribute type 10 has an invalid length. [ 1024.758656][T30632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.766251][T12081] usb 2-1: Using ep0 maxpacket: 16 [ 1024.767971][T12081] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1024.774237][T30632] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1024.808876][T30632] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18917'. [ 1024.809991][T12081] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1024.851626][T30632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.865354][T12081] usb 2-1: config 166 has no interface number 0 [ 1024.872416][T12081] usb 2-1: config 166 has no interface number 1 [ 1024.883615][T12081] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1024.899580][T30632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.918147][T12081] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1024.938361][T30632] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1024.946282][T12081] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1024.959922][T12081] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1024.980767][T30632] bond0 (unregistering): Released all slaves [ 1024.992328][T12081] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1025.028098][T12081] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1025.055325][T12081] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1025.079364][T12081] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1025.111798][T12081] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1025.146774][T12081] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1025.153820][T12081] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1025.179399][T12081] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1025.195176][T12081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.203810][T12081] usb 2-1: Product: syz [ 1025.226874][T12081] usb 2-1: Manufacturer: syz [ 1025.231532][T12081] usb 2-1: SerialNumber: syz [ 1025.450492][T12081] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1025.491076][ T29] audit: type=1326 audit(1778134484.073:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.4.18927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289959cdd9 code=0x0 [ 1025.662371][T12081] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1025.924279][T12081] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1026.076173][T12081] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1026.088397][T12081] uvcvideo 2-1:166.34: No valid video chain found. [ 1026.118422][T12081] usb 2-1: USB disconnect, device number 22 [ 1026.945048][ T10] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1027.108587][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1027.135001][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1027.171088][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.199384][ T10] usb 3-1: config 0 descriptor?? [ 1027.832058][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1027.857191][ T10] uclogic 0003:5543:004D.0058: failed retrieving string descriptor #200: -71 [ 1027.867386][T30792] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1027.884555][ T10] uclogic 0003:5543:004D.0058: failed retrieving pen parameters: -71 [ 1027.902939][ T10] uclogic 0003:5543:004D.0058: failed probing pen v2 parameters: -71 [ 1027.944707][ T10] uclogic 0003:5543:004D.0058: failed probing parameters: -71 [ 1027.963596][ T10] uclogic 0003:5543:004D.0058: probe with driver uclogic failed with error -71 [ 1028.004201][ T10] usb 3-1: USB disconnect, device number 122 [ 1028.018372][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1028.046479][T30799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1028.057010][T30799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1028.152826][T30814] tipc: Resetting bearer [ 1028.170875][T30814] macvlan0: entered promiscuous mode [ 1028.181772][T30814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18968'. [ 1029.082297][T30863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.194575][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1029.357405][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1029.361934][T30889] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1029.364898][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.372207][T30889] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1029.382472][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.399344][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.413012][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1029.422474][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.433661][ T10] usb 4-1: config 0 descriptor?? [ 1029.648212][T30903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18997'. [ 1029.860768][ T10] hid_parser_main: 27 callbacks suppressed [ 1029.860792][ T10] hid-multitouch 0003:045E:9994.0059: unknown main item tag 0x2 [ 1029.886121][ T10] hid-multitouch 0003:045E:9994.0059: unknown main item tag 0x0 [ 1029.897515][ T10] hid-multitouch 0003:045E:9994.0059: unknown main item tag 0x0 [ 1029.919456][ T10] hid-multitouch 0003:045E:9994.0059: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0 [ 1030.078283][ T10] usb 4-1: USB disconnect, device number 104 [ 1030.249096][T30933] tipc: New replicast peer: 255.255.255.255 [ 1030.256886][T30933] tipc: Enabled bearer , priority 0 [ 1030.377428][T30939] netlink: 'syz.2.19005': attribute type 13 has an invalid length. [ 1030.387266][T30939] netlink: 'syz.2.19005': attribute type 17 has an invalid length. [ 1030.408968][T30939] erspan0: entered promiscuous mode [ 1030.442961][T30939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.452085][T30939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.460627][T30939] tipc: Resetting bearer [ 1030.471408][T30939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.507808][T30939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.519414][T30939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.534292][T30939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1030.545159][T30939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.567223][T30939] veth1_macvtap: left promiscuous mode [ 1030.573843][T30939] veth0_macvtap: left promiscuous mode [ 1030.580705][T30939] veth0_macvtap: entered promiscuous mode [ 1030.599023][T30939] veth1_macvtap: entered promiscuous mode [ 1030.619101][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1030.648302][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1030.692009][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1030.719139][T30945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19006'. [ 1030.735369][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.827433][T30939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.896787][T30939] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1030.966913][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.974162][T12509] bridge0: port 1(bridge_slave_0) entered listening state [ 1031.004228][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.011488][T12509] bridge0: port 2(bridge_slave_1) entered listening state [ 1031.868088][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19027'. [ 1032.213233][T31019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.853838][T31060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19046'. [ 1032.874133][T31060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19046'. [ 1033.315206][T12059] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1033.480022][T12059] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1033.506918][T12059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.538521][T12059] usb 2-1: Product: syz [ 1033.553547][T12059] usb 2-1: Manufacturer: syz [ 1033.568204][T12059] usb 2-1: SerialNumber: syz [ 1033.591937][T12059] usb 2-1: config 0 descriptor?? [ 1033.603436][T12059] ch341 2-1:0.0: ch341-uart converter detected [ 1033.658583][T31097] netlink: 'syz.0.19061': attribute type 2 has an invalid length. [ 1034.415694][T12059] usb 2-1: failed to send control message: -71 [ 1034.451457][T12059] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1034.519371][T12059] usb 2-1: USB disconnect, device number 23 [ 1034.563235][T12059] ch341 2-1:0.0: device disconnected [ 1034.925457][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19076'. [ 1035.008203][T31146] vivid-004: ================= START STATUS ================= [ 1035.032861][T31146] vivid-004: Radio HW Seek Mode: Bounded [ 1035.063737][T31146] vivid-004: Radio Programmable HW Seek: false [ 1035.087268][T31146] vivid-004: RDS Rx I/O Mode: Block I/O [ 1035.114078][T31146] vivid-004: Generate RBDS Instead of RDS: false [ 1035.132272][T31146] vivid-004: RDS Reception: true [ 1035.150837][T31146] vivid-004: RDS Program Type: 0 inactive [ 1035.167567][T31146] vivid-004: RDS PS Name: inactive [ 1035.177689][T31146] vivid-004: RDS Radio Text: inactive [ 1035.195692][T31146] vivid-004: RDS Traffic Announcement: false inactive [ 1035.215812][T31146] vivid-004: RDS Traffic Program: false inactive [ 1035.233386][T31146] vivid-004: RDS Music: false inactive [ 1035.250688][T31146] vivid-004: ================== END STATUS ================== [ 1035.375174][T12059] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1035.536746][T12059] usb 2-1: config 4 has an invalid interface number: 33 but max is 0 [ 1035.555511][T12059] usb 2-1: config 4 has no interface number 0 [ 1035.572075][T12059] usb 2-1: config 4 interface 33 has no altsetting 0 [ 1035.585001][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1035.592821][T12059] usb 2-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=37.54 [ 1035.608347][T12059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.628926][T12059] usb 2-1: Product: syz [ 1035.639048][T12059] usb 2-1: Manufacturer: syz [ 1035.652622][T12059] usb 2-1: SerialNumber: syz [ 1035.758447][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.797105][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.834281][ T10] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1035.867543][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.895711][T12059] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 1035.903656][ T10] usb 3-1: config 0 descriptor?? [ 1035.926543][T12059] gspca_mr97310a: reg write [21] error -22 [ 1035.942457][T12059] mr97310a 2-1:4.33: probe with driver mr97310a failed with error -22 [ 1035.964226][T12059] usb 2-1: USB disconnect, device number 24 [ 1036.359323][ T10] hid-led 0003:1D34:000A.005A: unknown main item tag 0x0 [ 1036.382030][ T10] hid-led 0003:1D34:000A.005A: unknown main item tag 0x0 [ 1036.415237][ T10] hid-led 0003:1D34:000A.005A: unknown main item tag 0x0 [ 1036.546367][ T10] hid-led 0003:1D34:000A.005A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1036.638687][ T10] hid-led 0003:1D34:000A.005A: Dream Cheeky Webmail Notifier initialized [ 1036.776713][T31231] netlink: 'syz.1.19090': attribute type 1 has an invalid length. [ 1036.791518][T12059] usb 3-1: USB disconnect, device number 123 [ 1036.809985][T31231] netlink: 'syz.1.19090': attribute type 2 has an invalid length. [ 1036.844968][T31231] netlink: 'syz.1.19090': attribute type 1 has an invalid length. [ 1037.265372][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1037.311626][T31261] input: syz0 as /devices/virtual/input/input124 [ 1037.436325][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1037.444939][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.457328][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.487563][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.516292][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1037.536769][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.564936][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1037.581676][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.732608][T31276] input: syz1 as /devices/virtual/input/input125 [ 1037.810630][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 1037.828035][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1038.050038][ T10] usb 2-1: USB disconnect, device number 25 [ 1039.129862][T12059] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1039.283009][T31370] kvm: kvm [31369]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1039.305589][T12059] usb 3-1: Using ep0 maxpacket: 16 [ 1039.339441][T12059] usb 3-1: config 0 has no interfaces? [ 1039.366373][T12059] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1039.395070][T12059] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1039.403805][T12059] usb 3-1: Manufacturer: syz [ 1039.429302][T12059] usb 3-1: config 0 descriptor?? [ 1039.482980][T31385] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1039.514343][T31385] bridge0: entered allmulticast mode [ 1039.590885][T31394] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1039.613415][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19126'. [ 1039.670367][T12081] usb 3-1: USB disconnect, device number 124 [ 1039.795231][T12059] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1039.955278][T12059] usb 2-1: Using ep0 maxpacket: 32 [ 1039.966957][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.985328][T12059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.005193][T12059] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1040.025228][T12059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.042185][T12059] usb 2-1: config 0 descriptor?? [ 1040.060011][T12059] hub 2-1:0.0: USB hub found [ 1040.282202][T12059] hub 2-1:0.0: 13 ports detected [ 1040.295531][T12059] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1040.510329][T12059] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1040.524218][T12059] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1040.576511][T12059] usbhid 2-1:0.0: can't add hid device: -71 [ 1040.585142][T12059] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1040.626383][T12059] usb 2-1: USB disconnect, device number 26 [ 1040.821625][T31455] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1040.828380][T31455] syzkaller1: linktype set to 805 [ 1041.195668][T31478] batadv_slave_0: entered promiscuous mode [ 1041.202497][T31477] batadv_slave_0: left promiscuous mode [ 1041.695172][T12059] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1041.771029][T31511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.867956][T12059] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1041.889079][T12059] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1041.909826][T12059] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.926341][T12059] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1041.936478][T12059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1041.946592][T12059] usb 2-1: Product: syz [ 1041.951030][T12059] usb 2-1: Manufacturer: syz [ 1041.957390][T12059] usb 2-1: SerialNumber: syz [ 1042.193479][T12059] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1042.409661][T12081] usb 2-1: USB disconnect, device number 27 [ 1042.435935][T12081] usblp0: removed [ 1042.615887][T12059] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1042.776702][T12059] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1042.788334][T12059] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1042.798870][T12059] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.814316][T12059] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1042.824022][T12059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.832291][T12059] usb 4-1: Product: syz [ 1042.837276][T12059] usb 4-1: Manufacturer: syz [ 1042.847770][T12059] usb 4-1: SerialNumber: syz [ 1042.865282][T12059] hub 4-1:1.0: bad descriptor, ignoring hub [ 1042.871484][T12059] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1042.897876][T31565] ip6erspan1: entered allmulticast mode [ 1043.066523][T12059] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1043.365862][ T10] usb 4-1: USB disconnect, device number 105 [ 1043.390435][ T10] usblp0: removed [ 1043.656570][T31614] [ 1043.658939][T31614] ===================================================== [ 1043.665878][T31614] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1043.673358][T31614] syzkaller #0 Tainted: G L [ 1043.679351][T31614] ----------------------------------------------------- [ 1043.686272][T31614] syz.1.19185/31614 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1043.694067][T31614] ffff88807b47fe20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1043.702676][T31614] [ 1043.702676][T31614] and this task is already holding: [ 1043.710033][T31614] ffff888040bdc360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1043.718725][T31614] which would create a new lock dependency: [ 1043.724607][T31614] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1043.732173][T31614] [ 1043.732173][T31614] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1043.741638][T31614] (&client->buffer_lock){..-.}-{3:3} [ 1043.741680][T31614] [ 1043.741680][T31614] ... which became SOFTIRQ-irq-safe at: [ 1043.754939][T31614] lock_acquire+0x106/0x350 [ 1043.759553][T31614] _raw_spin_lock+0x2e/0x40 [ 1043.764161][T31614] evdev_pass_values+0xb9/0xbd0 [ 1043.769212][T31614] evdev_events+0x1e6/0x340 [ 1043.773817][T31614] input_pass_values+0x288/0x890 [ 1043.778855][T31614] input_event_dispose+0x330/0x6b0 [ 1043.784045][T31614] input_event+0x84/0xc0 [ 1043.788373][T31614] xpad360_process_packet+0x641/0xdc0 [ 1043.793829][T31614] xpad_irq_in+0x14e/0x25c0 [ 1043.798494][T31614] __usb_hcd_giveback_urb+0x376/0x540 [ 1043.803952][T31614] dummy_timer+0xbc0/0x4650 [ 1043.808722][T31614] __hrtimer_run_queues+0x3c0/0xa20 [ 1043.814005][T31614] hrtimer_run_softirq+0x17a/0x240 [ 1043.819212][T31614] handle_softirqs+0x22a/0x840 [ 1043.824147][T31614] __irq_exit_rcu+0xca/0x220 [ 1043.828813][T31614] irq_exit_rcu+0x9/0x30 [ 1043.833146][T31614] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.838897][T31614] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.844962][T31614] finish_task_switch+0x427/0xbe0 [ 1043.850063][T31614] __schedule+0x17bc/0x5680 [ 1043.854649][T31614] preempt_schedule_common+0x82/0xd0 [ 1043.860017][T31614] preempt_schedule_thunk+0x16/0x30 [ 1043.865310][T31614] try_to_wake_up+0x828/0x1380 [ 1043.870170][T31614] wake_up_q+0x85/0xd0 [ 1043.874321][T31614] futex_wake+0x49a/0x580 [ 1043.878734][T31614] do_futex+0x395/0x420 [ 1043.882968][T31614] __se_sys_futex+0x3a8/0x450 [ 1043.887745][T31614] do_syscall_64+0x15f/0xf80 [ 1043.892420][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.898480][T31614] [ 1043.898480][T31614] to a SOFTIRQ-irq-unsafe lock: [ 1043.905484][T31614] (tasklist_lock){.+.+}-{3:3} [ 1043.905510][T31614] [ 1043.905510][T31614] ... which became SOFTIRQ-irq-unsafe at: [ 1043.918117][T31614] ... [ 1043.918132][T31614] lock_acquire+0x106/0x350 [ 1043.925279][T31614] _raw_read_lock+0x36/0x50 [ 1043.929865][T31614] __do_wait+0xde/0x740 [ 1043.934112][T31614] do_wait+0x1e7/0x510 [ 1043.938265][T31614] kernel_wait+0xd6/0x1c0 [ 1043.942683][T31614] call_usermodehelper_exec_work+0xbe/0x230 [ 1043.948651][T31614] process_scheduled_works+0xb5d/0x1860 [ 1043.954272][T31614] worker_thread+0xa53/0xfc0 [ 1043.958952][T31614] kthread+0x388/0x470 [ 1043.963102][T31614] ret_from_fork+0x514/0xb70 [ 1043.967778][T31614] ret_from_fork_asm+0x1a/0x30 [ 1043.972642][T31614] [ 1043.972642][T31614] other info that might help us debug this: [ 1043.972642][T31614] [ 1043.982915][T31614] Chain exists of: [ 1043.982915][T31614] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1043.982915][T31614] [ 1043.996040][T31614] Possible interrupt unsafe locking scenario: [ 1043.996040][T31614] [ 1044.004349][T31614] CPU0 CPU1 [ 1044.009701][T31614] ---- ---- [ 1044.015067][T31614] lock(tasklist_lock); [ 1044.019317][T31614] local_irq_disable(); [ 1044.026146][T31614] lock(&client->buffer_lock); [ 1044.033518][T31614] lock(&new->fa_lock); [ 1044.040446][T31614] [ 1044.043907][T31614] lock(&client->buffer_lock); [ 1044.048927][T31614] [ 1044.048927][T31614] *** DEADLOCK *** [ 1044.048927][T31614] [ 1044.057058][T31614] 4 locks held by syz.1.19185/31614: [ 1044.062328][T31614] #0: ffffffff8eb03f30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 1044.071474][T31614] #1: ffff88803365e438 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 1044.080967][T31614] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1044.090106][T31614] #3: ffff888040bdc360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1044.099262][T31614] [ 1044.099262][T31614] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1044.109665][T31614] -> (&client->buffer_lock){..-.}-{3:3} { [ 1044.115486][T31614] IN-SOFTIRQ-W at: [ 1044.119543][T31614] lock_acquire+0x106/0x350 [ 1044.125904][T31614] _raw_spin_lock+0x2e/0x40 [ 1044.132225][T31614] evdev_pass_values+0xb9/0xbd0 [ 1044.138908][T31614] evdev_events+0x1e6/0x340 [ 1044.145231][T31614] input_pass_values+0x288/0x890 [ 1044.151989][T31614] input_event_dispose+0x330/0x6b0 [ 1044.158921][T31614] input_event+0x84/0xc0 [ 1044.164989][T31614] xpad360_process_packet+0x641/0xdc0 [ 1044.172181][T31614] xpad_irq_in+0x14e/0x25c0 [ 1044.178501][T31614] __usb_hcd_giveback_urb+0x376/0x540 [ 1044.185785][T31614] dummy_timer+0xbc0/0x4650 [ 1044.192113][T31614] __hrtimer_run_queues+0x3c0/0xa20 [ 1044.199130][T31614] hrtimer_run_softirq+0x17a/0x240 [ 1044.206062][T31614] handle_softirqs+0x22a/0x840 [ 1044.212639][T31614] __irq_exit_rcu+0xca/0x220 [ 1044.219049][T31614] irq_exit_rcu+0x9/0x30 [ 1044.225106][T31614] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1044.232558][T31614] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1044.240360][T31614] finish_task_switch+0x427/0xbe0 [ 1044.247298][T31614] __schedule+0x17bc/0x5680 [ 1044.253636][T31614] preempt_schedule_common+0x82/0xd0 [ 1044.260747][T31614] preempt_schedule_thunk+0x16/0x30 [ 1044.267771][T31614] try_to_wake_up+0x828/0x1380 [ 1044.274357][T31614] wake_up_q+0x85/0xd0 [ 1044.280242][T31614] futex_wake+0x49a/0x580 [ 1044.286389][T31614] do_futex+0x395/0x420 [ 1044.292361][T31614] __se_sys_futex+0x3a8/0x450 [ 1044.298854][T31614] do_syscall_64+0x15f/0xf80 [ 1044.305263][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.313056][T31614] INITIAL USE at: [ 1044.317029][T31614] lock_acquire+0x106/0x350 [ 1044.323264][T31614] _raw_spin_lock+0x2e/0x40 [ 1044.329496][T31614] evdev_handle_get_val+0x70/0x9f0 [ 1044.336335][T31614] evdev_ioctl_handler+0x127b/0x1fe0 [ 1044.343345][T31614] __se_sys_ioctl+0xfc/0x170 [ 1044.349677][T31614] do_syscall_64+0x15f/0xf80 [ 1044.356016][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.363661][T31614] } [ 1044.366254][T31614] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1044.374504][T31614] -> (&new->fa_lock){....}-{3:3} { [ 1044.379635][T31614] INITIAL USE at: [ 1044.383513][T31614] lock_acquire+0x106/0x350 [ 1044.389572][T31614] _raw_write_lock_irq+0x3d/0x50 [ 1044.396070][T31614] fasync_remove_entry+0xf1/0x1c0 [ 1044.402653][T31614] lease_modify+0x4f7/0x6c0 [ 1044.408721][T31614] locks_remove_file+0x5f0/0xf70 [ 1044.415227][T31614] __fput+0x3ae/0xa60 [ 1044.420791][T31614] task_work_run+0x1d9/0x270 [ 1044.426949][T31614] exit_to_user_mode_loop+0xed/0x480 [ 1044.433787][T31614] do_syscall_64+0x33e/0xf80 [ 1044.439939][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.447387][T31614] INITIAL READ USE at: [ 1044.451712][T31614] lock_acquire+0x106/0x350 [ 1044.458206][T31614] _raw_read_lock_irqsave+0x48/0x60 [ 1044.465394][T31614] kill_fasync+0x199/0x4d0 [ 1044.471811][T31614] evdev_pass_values+0x627/0xbd0 [ 1044.478858][T31614] evdev_events+0x1e6/0x340 [ 1044.485617][T31614] input_pass_values+0x288/0x890 [ 1044.492552][T31614] input_event_dispose+0x330/0x6b0 [ 1044.499657][T31614] input_inject_event+0x1dc/0x330 [ 1044.506705][T31614] evdev_write+0x325/0x4c0 [ 1044.513120][T31614] vfs_write+0x29a/0xb90 [ 1044.519365][T31614] ksys_write+0x150/0x270 [ 1044.525695][T31614] do_syscall_64+0x15f/0xf80 [ 1044.532273][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.540163][T31614] } [ 1044.542657][T31614] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1044.551333][T31614] ... acquired at: [ 1044.555133][T31614] _raw_read_lock_irqsave+0x48/0x60 [ 1044.560502][T31614] kill_fasync+0x199/0x4d0 [ 1044.565175][T31614] evdev_pass_values+0x627/0xbd0 [ 1044.570298][T31614] evdev_events+0x1e6/0x340 [ 1044.575087][T31614] input_pass_values+0x288/0x890 [ 1044.580205][T31614] input_event_dispose+0x330/0x6b0 [ 1044.585482][T31614] input_inject_event+0x1dc/0x330 [ 1044.590671][T31614] evdev_write+0x325/0x4c0 [ 1044.595350][T31614] vfs_write+0x29a/0xb90 [ 1044.599759][T31614] ksys_write+0x150/0x270 [ 1044.604256][T31614] do_syscall_64+0x15f/0xf80 [ 1044.609010][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.615158][T31614] [ 1044.617467][T31614] [ 1044.617467][T31614] the dependencies between the lock to be acquired [ 1044.617477][T31614] and SOFTIRQ-irq-unsafe lock: [ 1044.630965][T31614] -> (tasklist_lock){.+.+}-{3:3} { [ 1044.636192][T31614] HARDIRQ-ON-R at: [ 1044.640246][T31614] lock_acquire+0x106/0x350 [ 1044.646572][T31614] _raw_read_lock+0x36/0x50 [ 1044.652901][T31614] __do_wait+0xde/0x740 [ 1044.658878][T31614] do_wait+0x1e7/0x510 [ 1044.664867][T31614] kernel_wait+0xd6/0x1c0 [ 1044.671021][T31614] call_usermodehelper_exec_work+0xbe/0x230 [ 1044.678731][T31614] process_scheduled_works+0xb5d/0x1860 [ 1044.686116][T31614] worker_thread+0xa53/0xfc0 [ 1044.692630][T31614] kthread+0x388/0x470 [ 1044.698522][T31614] ret_from_fork+0x514/0xb70 [ 1044.704938][T31614] ret_from_fork_asm+0x1a/0x30 [ 1044.711521][T31614] SOFTIRQ-ON-R at: [ 1044.715589][T31614] lock_acquire+0x106/0x350 [ 1044.722005][T31614] _raw_read_lock+0x36/0x50 [ 1044.728338][T31614] __do_wait+0xde/0x740 [ 1044.734314][T31614] do_wait+0x1e7/0x510 [ 1044.740205][T31614] kernel_wait+0xd6/0x1c0 [ 1044.746424][T31614] call_usermodehelper_exec_work+0xbe/0x230 [ 1044.754145][T31614] process_scheduled_works+0xb5d/0x1860 [ 1044.761532][T31614] worker_thread+0xa53/0xfc0 [ 1044.767948][T31614] kthread+0x388/0x470 [ 1044.773840][T31614] ret_from_fork+0x514/0xb70 [ 1044.780249][T31614] ret_from_fork_asm+0x1a/0x30 [ 1044.786925][T31614] INITIAL USE at: [ 1044.790896][T31614] lock_acquire+0x106/0x350 [ 1044.797127][T31614] _raw_write_lock_irq+0x3d/0x50 [ 1044.803796][T31614] copy_process+0x2b4c/0x4440 [ 1044.810210][T31614] kernel_clone+0x284/0x8f0 [ 1044.816447][T31614] user_mode_thread+0x110/0x180 [ 1044.823039][T31614] rest_init+0x23/0x300 [ 1044.828920][T31614] start_kernel+0x38a/0x3e0 [ 1044.835154][T31614] x86_64_start_reservations+0x24/0x30 [ 1044.842344][T31614] x86_64_start_kernel+0x143/0x1c0 [ 1044.849190][T31614] common_startup_64+0x13e/0x147 [ 1044.855867][T31614] INITIAL READ USE at: [ 1044.860275][T31614] lock_acquire+0x106/0x350 [ 1044.866944][T31614] _raw_read_lock+0x36/0x50 [ 1044.873624][T31614] __do_wait+0xde/0x740 [ 1044.879945][T31614] do_wait+0x1e7/0x510 [ 1044.886182][T31614] kernel_wait+0xd6/0x1c0 [ 1044.892680][T31614] call_usermodehelper_exec_work+0xbe/0x230 [ 1044.900733][T31614] process_scheduled_works+0xb5d/0x1860 [ 1044.908470][T31614] worker_thread+0xa53/0xfc0 [ 1044.915228][T31614] kthread+0x388/0x470 [ 1044.921461][T31614] ret_from_fork+0x514/0xb70 [ 1044.928213][T31614] ret_from_fork_asm+0x1a/0x30 [ 1044.935141][T31614] } [ 1044.937710][T31614] ... key at: [] tasklist_lock+0x18/0x40 [ 1044.945513][T31614] ... acquired at: [ 1044.949389][T31614] _raw_read_lock+0x36/0x50 [ 1044.954057][T31614] send_sigurg+0x12b/0x420 [ 1044.958643][T31614] sk_send_sigurg+0x6c/0x2e0 [ 1044.963390][T31614] queue_oob+0x42c/0x4f0 [ 1044.967805][T31614] unix_stream_sendmsg+0xcb1/0xe80 [ 1044.973166][T31614] ____sys_sendmsg+0x972/0x9f0 [ 1044.978098][T31614] ___sys_sendmsg+0x2a5/0x360 [ 1044.982942][T31614] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1044.988050][T31614] do_syscall_64+0x15f/0xf80 [ 1044.992807][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.998863][T31614] [ 1045.001173][T31614] -> (&f_owner->lock){....}-{3:3} { [ 1045.006375][T31614] INITIAL USE at: [ 1045.010260][T31614] lock_acquire+0x106/0x350 [ 1045.016318][T31614] _raw_write_lock_irq+0x3d/0x50 [ 1045.022810][T31614] __f_setown+0x67/0x370 [ 1045.028609][T31614] generic_setlease+0xacf/0xfd0 [ 1045.035029][T31614] do_fcntl_add_lease+0x35e/0x470 [ 1045.041611][T31614] fcntl_setlease+0x123/0x180 [ 1045.047870][T31614] do_fcntl+0x8b3/0x1a20 [ 1045.053670][T31614] __se_sys_fcntl+0xc8/0x150 [ 1045.059814][T31614] do_syscall_64+0x15f/0xf80 [ 1045.065959][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.073415][T31614] INITIAL READ USE at: [ 1045.077730][T31614] lock_acquire+0x106/0x350 [ 1045.084240][T31614] _raw_read_lock_irq+0x45/0x60 [ 1045.091080][T31614] do_fcntl+0xaa3/0x1a20 [ 1045.097317][T31614] __se_sys_fcntl+0xc8/0x150 [ 1045.103898][T31614] do_syscall_64+0x15f/0xf80 [ 1045.110485][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.118364][T31614] } [ 1045.120860][T31614] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1045.129702][T31614] ... acquired at: [ 1045.133529][T31614] _raw_read_lock_irqsave+0x48/0x60 [ 1045.138891][T31614] send_sigio+0x38/0x370 [ 1045.143299][T31614] kill_fasync+0x24d/0x4d0 [ 1045.147890][T31614] lease_break_callback+0x26/0x30 [ 1045.153085][T31614] __break_lease+0x81f/0x1ea0 [ 1045.157930][T31614] do_dentry_open+0x1010/0x14e0 [ 1045.162946][T31614] vfs_open+0x3b/0x340 [ 1045.167179][T31614] path_openat+0x2e08/0x3860 [ 1045.171939][T31614] do_file_open+0x23e/0x4a0 [ 1045.176607][T31614] do_sys_openat2+0x113/0x200 [ 1045.181452][T31614] __x64_sys_openat+0x138/0x170 [ 1045.186469][T31614] do_syscall_64+0x15f/0xf80 [ 1045.191227][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.197279][T31614] [ 1045.199589][T31614] [ 1045.199589][T31614] stack backtrace: [ 1045.205468][T31614] CPU: 1 UID: 0 PID: 31614 Comm: syz.1.19185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.205491][T31614] Tainted: [L]=SOFTLOCKUP [ 1045.205498][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1045.205509][T31614] Call Trace: [ 1045.205517][T31614] [ 1045.205525][T31614] dump_stack_lvl+0xe8/0x150 [ 1045.205545][T31614] __lock_acquire+0x2a94/0x2cf0 [ 1045.205570][T31614] ? send_sigio+0x38/0x370 [ 1045.205591][T31614] lock_acquire+0x106/0x350 [ 1045.205607][T31614] ? send_sigio+0x38/0x370 [ 1045.205629][T31614] ? kill_fasync+0x199/0x4d0 [ 1045.205650][T31614] ? lock_acquire+0x106/0x350 [ 1045.205666][T31614] ? kill_fasync+0x199/0x4d0 [ 1045.205689][T31614] _raw_read_lock_irqsave+0x48/0x60 [ 1045.205709][T31614] ? send_sigio+0x38/0x370 [ 1045.205729][T31614] send_sigio+0x38/0x370 [ 1045.205752][T31614] kill_fasync+0x24d/0x4d0 [ 1045.205774][T31614] ? kill_fasync+0x53/0x4d0 [ 1045.205796][T31614] lease_break_callback+0x26/0x30 [ 1045.205820][T31614] __break_lease+0x81f/0x1ea0 [ 1045.205846][T31614] ? __pfx___break_lease+0x10/0x10 [ 1045.205867][T31614] ? __pfx_apparmor_file_open+0x10/0x10 [ 1045.205884][T31614] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1045.205909][T31614] do_dentry_open+0x1010/0x14e0 [ 1045.205931][T31614] vfs_open+0x3b/0x340 [ 1045.205947][T31614] ? path_openat+0x2df0/0x3860 [ 1045.205970][T31614] path_openat+0x2e08/0x3860 [ 1045.206003][T31614] ? __pfx_stack_trace_save+0x10/0x10 [ 1045.206028][T31614] ? stack_depot_save_flags+0x33/0x810 [ 1045.206051][T31614] ? __pfx_path_openat+0x10/0x10 [ 1045.206072][T31614] ? __x64_sys_openat+0x138/0x170 [ 1045.206092][T31614] ? __lock_acquire+0x6b5/0x2cf0 [ 1045.206112][T31614] do_file_open+0x23e/0x4a0 [ 1045.206135][T31614] ? __pfx_do_file_open+0x10/0x10 [ 1045.206163][T31614] ? _raw_spin_unlock+0x28/0x50 [ 1045.206180][T31614] ? alloc_fd+0x64b/0x6c0 [ 1045.206200][T31614] do_sys_openat2+0x113/0x200 [ 1045.206219][T31614] ? __se_sys_futex+0x3a8/0x450 [ 1045.206238][T31614] ? __pfx_do_sys_openat2+0x10/0x10 [ 1045.206258][T31614] ? rcu_is_watching+0x15/0xb0 [ 1045.206278][T31614] __x64_sys_openat+0x138/0x170 [ 1045.206297][T31614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.206314][T31614] do_syscall_64+0x15f/0xf80 [ 1045.206334][T31614] ? trace_irq_disable+0x3b/0x140 [ 1045.206357][T31614] ? clear_bhb_loop+0x40/0x90 [ 1045.206375][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.206392][T31614] RIP: 0033:0x7f786ff9cdd9 [ 1045.206410][T31614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.206425][T31614] RSP: 002b:00007f786e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1045.206444][T31614] RAX: ffffffffffffffda RBX: 00007f7870215fa0 RCX: 00007f786ff9cdd9 [ 1045.206456][T31614] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1045.206468][T31614] RBP: 00007f7870032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1045.206479][T31614] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1045.206489][T31614] R13: 00007f7870216038 R14: 00007f7870215fa0 R15: 00007f787033fa48 [ 1045.206507][T31614] [ 1045.985064][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1046.624626][ C1] bridge0: port 2(bridge_slave_1) entered learning state