last executing test programs: 2.528402601s ago: executing program 2 (id=1812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.421700076s ago: executing program 4 (id=1813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="b1", 0x1}], 0x1}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140)=0x2, 0x4) 2.367148047s ago: executing program 4 (id=1815): syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001780)=""/4096) 2.180516577s ago: executing program 4 (id=1817): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 1.932571519s ago: executing program 1 (id=1819): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) timer_create(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x24}, 0x94) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.863481285s ago: executing program 0 (id=1820): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 1.673796789s ago: executing program 0 (id=1821): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@init={0x18, 0x84, 0x0, {0x1, 0x4, 0x7f80, 0x2}}], 0x18}, 0x8050) 1.673606449s ago: executing program 4 (id=1822): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.630426703s ago: executing program 1 (id=1824): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x40014) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1.477465317s ago: executing program 0 (id=1826): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)="90", 0x1, 0x10, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000200)={0x0, 0xe7c, [0x5, 0x8000000000000000, 0x4, 0x8, 0xf, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.455302164s ago: executing program 2 (id=1827): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000580)='\b', 0x1}, {0x0}], 0x2) 1.323056566s ago: executing program 1 (id=1829): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x8, 0x4) 1.241563663s ago: executing program 4 (id=1830): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45) 1.149071955s ago: executing program 2 (id=1831): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.09848651s ago: executing program 4 (id=1833): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.062589064s ago: executing program 1 (id=1834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000f1ffffff00000000000000008500000036000000850000009e00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 909.5246ms ago: executing program 3 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff24bd7000fadbdf250000e000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c0002800600020030000000080005000800"], 0x4c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) 909.30556ms ago: executing program 1 (id=1836): epoll_create(0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x8000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) inotify_init1(0x80000) 798.025363ms ago: executing program 2 (id=1837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 796.981382ms ago: executing program 3 (id=1838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="b1", 0x1}], 0x1}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140)=0x2, 0x4) 573.749345ms ago: executing program 3 (id=1839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xf) 573.503668ms ago: executing program 2 (id=1840): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 480.128956ms ago: executing program 3 (id=1841): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) write(r0, &(0x7f0000000540)="fb", 0x1) bind$inet(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 476.849329ms ago: executing program 0 (id=1842): r0 = socket(0x2, 0xa, 0x300) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2, 0x0) 233.790018ms ago: executing program 0 (id=1843): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45) 233.661343ms ago: executing program 3 (id=1844): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x8, 0x4) 146.84197ms ago: executing program 0 (id=1845): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/cpu_byteorder', 0x103a00, 0x150) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001140)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x5, "faea7557e5a11499ffffffff0000000000000400000000000000000000000000000000000000feff0000f7ff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "715237641a8ccf162e43ac61f700000000009b4100", [0xd, 0x5]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 51.642023ms ago: executing program 1 (id=1846): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x8, 0x5, 0x0, 0x2, 0x400}) 1.208898ms ago: executing program 3 (id=1847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000016c0)="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", 0xb31}], 0x1}, 0x20000000) 0s ago: executing program 2 (id=1848): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x2e29, {"00000000000000000000000000000001"}, 0x1119dfd, 0x7, 0xed41}}}, 0x90) kernel console output (not intermixed with test programs): nvalid interface number: 89 but max is 0 [ 345.918656][ T5685] usb 2-1: config 0 has no interface number 0 [ 345.955454][ T5685] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.000922][ T5685] usb 2-1: config 0 interface 89 has no altsetting 0 [ 346.035282][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.065556][ T5685] usb 2-1: Product: syz [ 346.087800][ T5685] usb 2-1: Manufacturer: syz [ 346.104049][ T5685] usb 2-1: SerialNumber: syz [ 346.134618][ T5685] usb 2-1: config 0 descriptor?? [ 346.157238][ T5685] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 346.213850][ T5685] em28xx 2-1:0.89: Video interface 89 found: [ 346.896482][ T5685] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 347.138328][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.149667][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.168810][ T5684] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 347.338472][ T5684] usb 5-1: Using ep0 maxpacket: 32 [ 347.350588][ T5684] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 347.368526][ T187] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 347.376121][ T187] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 347.392125][ T187] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 347.401302][ T5684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 347.417617][ T187] usb 1-1: USB disconnect, device number 72 [ 347.430526][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 347.441785][ T5684] usb 5-1: Product: syz [ 347.447408][ T5684] usb 5-1: Manufacturer: syz [ 347.454515][ T5684] usb 5-1: SerialNumber: syz [ 347.460047][ T5685] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 347.475747][ T5684] usb 5-1: config 0 descriptor?? [ 347.487494][ T9122] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 347.501405][ T5684] hub 5-1:0.0: bad descriptor, ignoring hub [ 347.513180][ T5684] hub 5-1:0.0: probe with driver hub failed with error -5 [ 347.644639][ T5685] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 347.658739][ T5685] em28xx 2-1:0.89: board has no eeprom [ 347.718756][ T5685] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 347.734583][ T5685] em28xx 2-1:0.89: analog set to bulk mode. [ 347.747923][ T187] em28xx 2-1:0.89: Registering V4L2 extension [ 347.776754][ T5685] usb 2-1: USB disconnect, device number 87 [ 347.815443][ T5714] usb 3-1: USB disconnect, device number 72 [ 347.836158][ T5685] em28xx 2-1:0.89: Disconnecting em28xx [ 347.953824][ T187] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 347.986582][ T187] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 348.028126][ T187] em28xx 2-1:0.89: No AC97 audio processor [ 348.121776][ T29] audit: type=1326 audit(1786265578.238:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.3.970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 348.187679][ T187] usb 2-1: Decoder not found [ 348.201568][ T187] em28xx 2-1:0.89: failed to create media graph [ 348.217938][ T187] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 348.223223][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 348.229824][ T29] audit: type=1326 audit(1786265578.238:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.3.970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 348.330716][ T187] em28xx 2-1:0.89: Registering snapshot button... [ 348.367503][ T29] audit: type=1326 audit(1786265578.238:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.3.970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 348.417333][ T187] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input26 [ 348.465462][ T29] audit: type=1326 audit(1786265578.578:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.3.970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 348.539820][ T187] em28xx 2-1:0.89: Remote control support is not available for this card. [ 348.566433][ T29] audit: type=1326 audit(1786265578.578:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.3.970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 348.610343][ T5685] em28xx 2-1:0.89: Closing input extension [ 348.644043][ T5685] em28xx 2-1:0.89: Deregistering snapshot button [ 348.677963][ T9139] netlink: 'syz.1.972': attribute type 16 has an invalid length. [ 349.033729][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 349.118370][ T187] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 349.296176][ T5685] em28xx 2-1:0.89: Freeing device [ 349.302367][ T187] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 349.340633][ T187] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 349.377412][ T187] usb 1-1: config 0 has no interface number 0 [ 349.385123][ T5677] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 349.428735][ T187] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.459968][ T35] raw-gadget.5 gadget.4: failed to queue suspend event [ 349.471138][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.493378][ T187] usb 1-1: Product: syz [ 349.500931][ T187] usb 1-1: Manufacturer: syz [ 349.506397][ T187] usb 1-1: SerialNumber: syz [ 349.541867][ T187] usb 1-1: config 0 descriptor?? [ 349.559864][ T9122] raw-gadget.5 gadget.4: failed to queue resume event [ 349.586052][ T5677] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 349.625851][ T200] raw-gadget.5 gadget.4: failed to queue suspend event [ 349.643542][ T5677] usb 3-1: no configurations [ 349.664204][ T187] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 349.679452][ T5677] usb 3-1: can't read configurations, error -22 [ 349.772744][ T9122] raw-gadget.5 gadget.4: failed to queue resume event [ 349.820128][ T35] raw-gadget.5 gadget.4: failed to queue suspend event [ 349.855114][ T5677] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 349.921078][ T9122] raw-gadget.5 gadget.4: failed to queue resume event [ 349.980715][ T57] raw-gadget.5 gadget.4: failed to queue suspend event [ 350.029675][ T5677] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 350.062683][ T5677] usb 3-1: no configurations [ 350.082869][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.093544][ T5677] usb 3-1: can't read configurations, error -22 [ 350.113918][ T5677] usb usb3-port1: attempt power cycle [ 350.121788][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.131424][ T9122] raw-gadget.5 gadget.4: failed to queue disconnect event [ 350.170199][ T5685] usb 1-1: USB disconnect, device number 73 [ 350.210652][ T187] usb 5-1: USB disconnect, device number 69 [ 350.221750][ T5685] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 350.498379][ T5677] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 350.531868][ T5677] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 350.553097][ T5677] usb 3-1: no configurations [ 350.568383][ T5677] usb 3-1: can't read configurations, error -22 [ 350.718783][ T5677] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 350.769839][ T5677] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 350.803047][ T5677] usb 3-1: no configurations [ 350.818477][ T5677] usb 3-1: can't read configurations, error -22 [ 350.847848][ T5677] usb usb3-port1: unable to enumerate USB device [ 351.204715][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 351.514343][ T5685] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 351.568788][ T5685] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.743028][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 351.889372][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 352.390508][ T9194] netlink: 'syz.4.991': attribute type 16 has an invalid length. [ 352.630215][ T9199] FAULT_INJECTION: forcing a failure. [ 352.630215][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 352.639784][ T5700] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 352.643314][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.2.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.643341][ T9199] Tainted: [L]=SOFTLOCKUP [ 352.643347][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.643357][ T9199] Call Trace: [ 352.643365][ T9199] [ 352.643372][ T9199] dump_stack_lvl+0xe8/0x150 [ 352.643535][ T9199] should_fail_ex+0x40c/0x560 [ 352.643630][ T9199] should_failslab+0xa8/0x100 [ 352.643687][ T9199] ? __pfx_ip6_dst_gc+0x10/0x10 [ 352.643804][ T9199] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 352.643829][ T9199] ? lock_acquire+0x106/0x350 [ 352.643872][ T9199] ? dst_alloc+0x105/0x170 [ 352.643934][ T9199] ? dst_alloc+0x105/0x170 [ 352.643956][ T9199] ? __pfx_ip6_dst_gc+0x10/0x10 [ 352.643978][ T9199] dst_alloc+0x105/0x170 [ 352.644003][ T9199] ip6_pol_route+0xba1/0x14d0 [ 352.644026][ T9199] ? ip6_pol_route+0x163/0x14d0 [ 352.644052][ T9199] ? __pfx_ip6_pol_route+0x10/0x10 [ 352.644073][ T9199] ? ip6t_do_table+0x1d1/0x15b0 [ 352.644138][ T9199] ? __local_bh_enable_ip+0xd0/0x130 [ 352.644174][ T9199] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.644272][ T9199] ? ip6t_do_table+0x1d1/0x15b0 [ 352.644295][ T9199] ? ip6t_do_table+0x13c4/0x15b0 [ 352.644322][ T9199] fib6_rule_lookup+0x556/0x730 [ 352.644365][ T9199] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 352.644389][ T9199] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 352.644412][ T9199] ? inet6_ehashfn+0x2f/0x3b0 [ 352.644466][ T9199] ? __inet6_lookup_established+0xc0c/0xc60 [ 352.644500][ T9199] ip6_route_input+0x78d/0xb20 [ 352.644530][ T9199] ? __pfx_ip6_route_input+0x10/0x10 [ 352.644572][ T9199] ? tcp_v6_early_demux+0x62f/0x970 [ 352.644622][ T9199] ? ip6_rcv_finish_core+0x222/0x420 [ 352.644644][ T9199] ip6_rcv_finish+0x141/0x280 [ 352.644670][ T9199] NF_HOOK+0x336/0x3c0 [ 352.644687][ T9199] ? __pfx_sock_wfree+0x10/0x10 [ 352.644732][ T9199] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.644749][ T9199] ? NF_HOOK+0x9e/0x3c0 [ 352.644766][ T9199] ? __pfx_NF_HOOK+0x10/0x10 [ 352.644791][ T9199] ? ip6_rcv_core+0xa1/0x1870 [ 352.644811][ T9199] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.644836][ T9199] ? netif_receive_skb+0x102/0xbf0 [ 352.644898][ T9199] netif_receive_skb+0x278/0xbf0 [ 352.644926][ T9199] ? __pfx_netif_receive_skb+0x10/0x10 [ 352.644953][ T9199] ? rcu_is_watching+0x15/0xb0 [ 352.644986][ T9199] ? tun_rx_batched+0x185/0x790 [ 352.645083][ T9199] tun_rx_batched+0x1de/0x790 [ 352.645111][ T9199] ? __pfx_tun_rx_batched+0x10/0x10 [ 352.645134][ T9199] ? tun_get_user+0x2717/0x4370 [ 352.645157][ T9199] ? tun_get_user+0x2717/0x4370 [ 352.645179][ T9199] ? tun_get_user+0x23cb/0x4370 [ 352.645202][ T9199] ? tun_get_user+0x23cb/0x4370 [ 352.645223][ T9199] ? __local_bh_enable_ip+0xd0/0x130 [ 352.645241][ T9199] ? tun_get_user+0x2717/0x4370 [ 352.645262][ T9199] ? tun_get_user+0x2717/0x4370 [ 352.645284][ T9199] tun_get_user+0x2b44/0x4370 [ 352.645327][ T9199] ? aa_file_perm+0x4ed/0x15f0 [ 352.645386][ T9199] ? __pfx_tun_get_user+0x10/0x10 [ 352.645411][ T9199] ? __lock_acquire+0x683/0x2cf0 [ 352.645446][ T9199] ? ref_tracker_alloc+0x341/0x4b0 [ 352.645494][ T9199] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 352.645515][ T9199] ? tun_get+0x1c/0x2f0 [ 352.645538][ T9199] ? tun_get+0x1c/0x2f0 [ 352.645564][ T9199] ? tun_get+0x1c/0x2f0 [ 352.645585][ T9199] ? tun_get+0x1c/0x2f0 [ 352.645611][ T9199] tun_chr_write_iter+0x113/0x200 [ 352.645636][ T9199] vfs_write+0x612/0xba0 [ 352.645669][ T9199] ? __pfx_vfs_write+0x10/0x10 [ 352.645703][ T9199] ? __fget_files+0x2a/0x420 [ 352.645750][ T9199] ksys_write+0x150/0x270 [ 352.645776][ T9199] ? __pfx_ksys_write+0x10/0x10 [ 352.645815][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.645851][ T9199] do_syscall_64+0x174/0x580 [ 352.645872][ T9199] ? trace_irq_disable+0x3b/0x140 [ 352.645908][ T9199] ? clear_bhb_loop+0x70/0xc0 [ 352.645930][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.645946][ T9199] RIP: 0033:0x7f4372d5e90e [ 352.645963][ T9199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 352.645978][ T9199] RSP: 002b:00007f4373bdafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.645997][ T9199] RAX: ffffffffffffffda RBX: 00007f4373bdb6c0 RCX: 00007f4372d5e90e [ 352.646009][ T9199] RDX: 0000000000000056 RSI: 0000200000000200 RDI: 00000000000000c8 [ 352.646019][ T9199] RBP: 00007f4373bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 352.646030][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.646040][ T9199] R13: 00007f4373026128 R14: 00007f4373026090 R15: 00007f437314fa48 [ 352.646070][ T9199] [ 353.592831][ T5700] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 353.717611][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 353.757467][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.792523][ T5700] usb 4-1: config 0 descriptor?? [ 354.089282][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.101845][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.140762][ T5700] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 354.189436][ T5700] [drm:udl_init] *ERROR* Selecting channel failed [ 354.212848][ T5700] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 354.219596][ T5700] [drm] Initialized udl on minor 1 [ 354.270188][ T5701] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 354.313548][ T5700] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.326672][ T5700] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 354.340310][ T5700] usb 4-1: USB disconnect, device number 70 [ 354.363104][ T5763] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.389019][ T5763] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 354.479990][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 354.497314][ T5701] usb 5-1: no configurations [ 354.511965][ T5701] usb 5-1: can't read configurations, error -22 [ 354.658486][ T5701] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 354.821045][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 354.832060][ T5701] usb 5-1: no configurations [ 354.837004][ T5701] usb 5-1: can't read configurations, error -22 [ 354.845467][ T5701] usb usb5-port1: attempt power cycle [ 354.890359][ T5763] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 355.038086][ T9230] netlink: 'syz.0.1004': attribute type 16 has an invalid length. [ 355.062689][ T5763] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 355.082514][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.100945][ T5763] usb 3-1: config 0 descriptor?? [ 355.123515][ T9232] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 355.188853][ T5701] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 355.260806][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 355.284413][ T5701] usb 5-1: no configurations [ 355.298078][ T5701] usb 5-1: can't read configurations, error -22 [ 355.371213][ T9238] loop3: detected capacity change from 0 to 7 [ 355.384412][ T9238] Dev loop3: unable to read RDB block 7 [ 355.390771][ T9238] loop3: unable to read partition table [ 355.396898][ T9238] loop3: partition table beyond EOD, truncated [ 355.405731][ T9238] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 355.445210][ T9238] netlink: 'syz.0.1008': attribute type 21 has an invalid length. [ 355.463379][ T9238] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1008'. [ 355.501569][ T5701] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 355.604059][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 355.620834][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 355.630724][ T5701] usb 5-1: no configurations [ 355.635638][ T5701] usb 5-1: can't read configurations, error -22 [ 355.648721][ T5701] usb usb5-port1: unable to enumerate USB device [ 355.663410][ T9240] loop6: detected capacity change from 0 to 524288000 [ 355.948415][ T187] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 356.118404][ T187] usb 1-1: Using ep0 maxpacket: 16 [ 356.127788][ T187] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.144608][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 356.159255][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.169384][ T187] usb 1-1: Product: syz [ 356.173722][ T187] usb 1-1: Manufacturer: syz [ 356.182875][ T187] usb 1-1: SerialNumber: syz [ 356.192089][ T187] usb 1-1: config 0 descriptor?? [ 356.208178][ T187] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 356.227347][ T187] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 356.349106][ T5685] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 356.456716][ T5763] usb 3-1: Cannot set autoneg [ 356.465625][ T5763] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 356.519728][ T5763] usb 3-1: USB disconnect, device number 77 [ 356.528567][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 356.546856][ T5685] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.571173][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.592422][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.605581][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.632707][ T5685] usb 2-1: config 0 descriptor?? [ 356.663857][ T5685] hub 2-1:0.0: USB hub found [ 356.858894][ T5685] hub 2-1:0.0: 1 port detected [ 357.045082][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 357.173269][ T9253] gtp0: entered promiscuous mode [ 357.206032][ T9253] gtp0: entered allmulticast mode [ 357.510818][ T187] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 357.575837][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 357.643058][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 357.678990][ T187] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 357.702810][ T187] em28xx 1-1:0.0: board has no eeprom [ 357.808423][ T187] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.822293][ T187] em28xx 1-1:0.0: dvb set to bulk mode. [ 357.828104][ T5685] em28xx 1-1:0.0: Binding DVB extension [ 357.858564][ T187] usb 1-1: USB disconnect, device number 74 [ 357.872319][ T187] em28xx 1-1:0.0: Disconnecting em28xx [ 357.901725][ T9273] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 357.943728][ T9272] netlink: 'syz.2.1018': attribute type 16 has an invalid length. [ 357.982617][ T9] usb 2-1: USB disconnect, device number 88 [ 357.988792][ T5677] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 358.199290][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 358.215424][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 358.228685][ T9279] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 358.262247][ T9279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1019'. [ 358.271856][ T5684] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 358.289400][ T5685] em28xx 1-1:0.0: Registering input extension [ 358.302205][ T187] em28xx 1-1:0.0: Closing input extension [ 358.437403][ T9284] FAULT_INJECTION: forcing a failure. [ 358.437403][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.439948][ T187] em28xx 1-1:0.0: Freeing device [ 358.453576][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.1.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.453605][ T9284] Tainted: [L]=SOFTLOCKUP [ 358.453612][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.453621][ T9284] Call Trace: [ 358.453628][ T9284] [ 358.453635][ T9284] dump_stack_lvl+0xe8/0x150 [ 358.453665][ T9284] should_fail_ex+0x40c/0x560 [ 358.453690][ T9284] _copy_from_iter+0x1d3/0x1660 [ 358.453795][ T9284] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 358.453817][ T9284] ? rcu_is_watching+0x15/0xb0 [ 358.453841][ T9284] ? trace_kmem_cache_alloc+0x29/0xe0 [ 358.453862][ T9284] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 358.453881][ T9284] ? __pfx__copy_from_iter+0x10/0x10 [ 358.453901][ T9284] ? __alloc_skb+0x276/0x7a0 [ 358.453939][ T9284] ? __alloc_skb+0x276/0x7a0 [ 358.453959][ T9284] ? netlink_sendmsg+0x650/0xb40 [ 358.454023][ T9284] ? skb_put+0x112/0x210 [ 358.454043][ T9284] netlink_sendmsg+0x6c0/0xb40 [ 358.454070][ T9284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.454093][ T9284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.454116][ T9284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.454133][ T9284] sock_sendmsg_nosec+0x13a/0x180 [ 358.454177][ T9284] ____sys_sendmsg+0x54e/0x850 [ 358.454200][ T9284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.454227][ T9284] ? import_iovec+0x73/0xa0 [ 358.454272][ T9284] ___sys_sendmsg+0x2a5/0x360 [ 358.454289][ T9284] ? __lock_acquire+0x683/0x2cf0 [ 358.454315][ T9284] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.454365][ T9284] ? __fget_files+0x2a/0x420 [ 358.454385][ T9284] ? __fget_files+0x3a2/0x420 [ 358.454414][ T9284] __x64_sys_sendmsg+0x1b1/0x290 [ 358.454435][ T9284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.454470][ T9284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.454489][ T9284] do_syscall_64+0x174/0x580 [ 358.454513][ T9284] ? clear_bhb_loop+0x70/0xc0 [ 358.454534][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.454551][ T9284] RIP: 0033:0x7f9a5579e0d9 [ 358.454568][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.454582][ T9284] RSP: 002b:00007f9a56631028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.454602][ T9284] RAX: ffffffffffffffda RBX: 00007f9a55a25fa0 RCX: 00007f9a5579e0d9 [ 358.454614][ T9284] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 358.454625][ T9284] RBP: 00007f9a56631090 R08: 0000000000000000 R09: 0000000000000000 [ 358.454635][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.454645][ T9284] R13: 00007f9a55a26038 R14: 00007f9a55a25fa0 R15: 00007f9a55b4fa48 [ 358.454672][ T9284] [ 358.607677][ T5684] usb 4-1: Using ep0 maxpacket: 32 [ 358.652490][ T9287] 8021q: VLANs not supported on ip6gre0 [ 358.666425][ T5684] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 358.822995][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 358.861213][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.880436][ T5684] usb 4-1: Product: syz [ 358.888349][ T5684] usb 4-1: Manufacturer: syz [ 358.894907][ T5684] usb 4-1: SerialNumber: syz [ 358.928504][ T5684] usb 4-1: config 0 descriptor?? [ 358.978606][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 358.990565][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 359.006796][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.015232][ T9] usb 5-1: Product: syz [ 359.020050][ T9] usb 5-1: Manufacturer: syz [ 359.032829][ T9] usb 5-1: SerialNumber: syz [ 359.253566][ T9304] FAULT_INJECTION: forcing a failure. [ 359.253566][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 359.308524][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.1.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.308557][ T9304] Tainted: [L]=SOFTLOCKUP [ 359.308564][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.308574][ T9304] Call Trace: [ 359.308582][ T9304] [ 359.308591][ T9304] dump_stack_lvl+0xe8/0x150 [ 359.308624][ T9304] should_fail_ex+0x40c/0x560 [ 359.308652][ T9304] should_failslab+0xa8/0x100 [ 359.308678][ T9304] __kmalloc_cache_noprof+0xa8/0x660 [ 359.308699][ T9304] ? sctp_add_bind_addr+0x8c/0x370 [ 359.308805][ T9304] ? sctp_add_bind_addr+0x8c/0x370 [ 359.308825][ T9304] ? __pfx_sctp_get_port_local+0x10/0x10 [ 359.308855][ T9304] sctp_add_bind_addr+0x8c/0x370 [ 359.308867][ T9304] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 359.308885][ T9304] sctp_do_bind+0x597/0x9a0 [ 359.308910][ T9304] sctp_connect_new_asoc+0x270/0x6b0 [ 359.308937][ T9304] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 359.308970][ T9304] ? __local_bh_enable_ip+0xd0/0x130 [ 359.308988][ T9304] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 359.309028][ T9304] ? security_sctp_bind_connect+0x7e/0x2c0 [ 359.309087][ T9304] sctp_sendmsg+0x159b/0x2d00 [ 359.309127][ T9304] ? __pfx_sctp_sendmsg+0x10/0x10 [ 359.309156][ T9304] ? aa_sk_perm+0x6d5/0x900 [ 359.309211][ T9304] ? sock_rps_record_flow+0x19/0x350 [ 359.309276][ T9304] ? inet_sendmsg+0x298/0x320 [ 359.309298][ T9304] ? __pfx_inet_sendmsg+0x10/0x10 [ 359.309316][ T9304] sock_sendmsg_nosec+0x10e/0x180 [ 359.309336][ T9304] ____sys_sendmsg+0x54e/0x850 [ 359.309353][ T9304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.309370][ T9304] ? import_iovec+0x73/0xa0 [ 359.309398][ T9304] ___sys_sendmsg+0x2a5/0x360 [ 359.309417][ T9304] ? __lock_acquire+0x683/0x2cf0 [ 359.309445][ T9304] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.309490][ T9304] ? __fget_files+0x2a/0x420 [ 359.309504][ T9304] ? __fget_files+0x3a2/0x420 [ 359.309524][ T9304] __x64_sys_sendmsg+0x1b1/0x290 [ 359.309543][ T9304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.309582][ T9304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.309604][ T9304] do_syscall_64+0x174/0x580 [ 359.309628][ T9304] ? trace_irq_disable+0x3b/0x140 [ 359.309649][ T9304] ? clear_bhb_loop+0x70/0xc0 [ 359.309671][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.309688][ T9304] RIP: 0033:0x7f9a5579e0d9 [ 359.309703][ T9304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.309718][ T9304] RSP: 002b:00007f9a56631028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.309739][ T9304] RAX: ffffffffffffffda RBX: 00007f9a55a25fa0 RCX: 00007f9a5579e0d9 [ 359.309752][ T9304] RDX: 0000000000048043 RSI: 0000200000000800 RDI: 0000000000000004 [ 359.309764][ T9304] RBP: 00007f9a56631090 R08: 0000000000000000 R09: 0000000000000000 [ 359.309775][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.309786][ T9304] R13: 00007f9a55a26038 R14: 00007f9a55a25fa0 R15: 00007f9a55b4fa48 [ 359.309813][ T9304] [ 359.751952][ T5684] airspy 4-1:0.0: Board ID: 00 [ 359.763133][ T5684] airspy 4-1:0.0: Firmware version: [ 360.139298][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 360.190078][ T9] usb 5-1: USB disconnect, device number 74 [ 360.638403][ T9317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.655481][ T9317] FAULT_INJECTION: forcing a failure. [ 360.655481][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.670621][ T9317] CPU: 1 UID: 0 PID: 9317 Comm: syz.1.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.670655][ T9317] Tainted: [L]=SOFTLOCKUP [ 360.670662][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.670684][ T9317] Call Trace: [ 360.670692][ T9317] [ 360.670700][ T9317] dump_stack_lvl+0xe8/0x150 [ 360.670724][ T9317] should_fail_ex+0x40c/0x560 [ 360.670741][ T9317] _copy_from_iter+0x1d3/0x1660 [ 360.670755][ T9317] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 360.670777][ T9317] ? rcu_is_watching+0x15/0xb0 [ 360.670804][ T9317] ? trace_kmem_cache_alloc+0x29/0xe0 [ 360.670826][ T9317] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 360.670846][ T9317] ? __pfx__copy_from_iter+0x10/0x10 [ 360.670864][ T9317] ? __alloc_skb+0x276/0x7a0 [ 360.670874][ T9317] ? __alloc_skb+0x276/0x7a0 [ 360.670887][ T9317] ? netlink_sendmsg+0x650/0xb40 [ 360.670900][ T9317] ? skb_put+0x112/0x210 [ 360.670912][ T9317] netlink_sendmsg+0x6c0/0xb40 [ 360.670941][ T9317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.670966][ T9317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.670989][ T9317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.671007][ T9317] sock_sendmsg_nosec+0x13a/0x180 [ 360.671027][ T9317] ____sys_sendmsg+0x54e/0x850 [ 360.671042][ T9317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.671059][ T9317] ? import_iovec+0x73/0xa0 [ 360.671080][ T9317] ___sys_sendmsg+0x2a5/0x360 [ 360.671099][ T9317] ? __lock_acquire+0x683/0x2cf0 [ 360.671127][ T9317] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.671179][ T9317] ? __fget_files+0x2a/0x420 [ 360.671193][ T9317] ? __fget_files+0x3a2/0x420 [ 360.671212][ T9317] __x64_sys_sendmsg+0x1b1/0x290 [ 360.671226][ T9317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.671261][ T9317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.671282][ T9317] do_syscall_64+0x174/0x580 [ 360.671305][ T9317] ? trace_irq_disable+0x3b/0x140 [ 360.671326][ T9317] ? clear_bhb_loop+0x70/0xc0 [ 360.671341][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.671352][ T9317] RIP: 0033:0x7f9a5579e0d9 [ 360.671364][ T9317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.671374][ T9317] RSP: 002b:00007f9a56631028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.671389][ T9317] RAX: ffffffffffffffda RBX: 00007f9a55a25fa0 RCX: 00007f9a5579e0d9 [ 360.671402][ T9317] RDX: 0000000020004004 RSI: 0000200000000240 RDI: 000000000000000b [ 360.671415][ T9317] RBP: 00007f9a56631090 R08: 0000000000000000 R09: 0000000000000000 [ 360.671426][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.671437][ T9317] R13: 00007f9a55a26038 R14: 00007f9a55a25fa0 R15: 00007f9a55b4fa48 [ 360.671467][ T9317] [ 360.727566][ T5684] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 360.754208][ T9322] netlink: 'syz.4.1033': attribute type 16 has an invalid length. [ 361.142674][ T5684] airspy 4-1:0.0: Registered as swradio24 [ 361.158353][ T5684] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 361.179551][ T5684] usb 4-1: USB disconnect, device number 71 [ 361.533750][ T9331] FAULT_INJECTION: forcing a failure. [ 361.533750][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.547083][ T9331] CPU: 0 UID: 0 PID: 9331 Comm: syz.3.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.547113][ T9331] Tainted: [L]=SOFTLOCKUP [ 361.547120][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.547131][ T9331] Call Trace: [ 361.547140][ T9331] [ 361.547149][ T9331] dump_stack_lvl+0xe8/0x150 [ 361.547181][ T9331] should_fail_ex+0x40c/0x560 [ 361.547209][ T9331] _copy_to_user+0x31/0xb0 [ 361.547303][ T9331] simple_read_from_buffer+0xe1/0x170 [ 361.547334][ T9331] proc_fail_nth_read+0x1bb/0x230 [ 361.547380][ T9331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.547410][ T9331] ? rw_verify_area+0x24a/0x4c0 [ 361.547440][ T9331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.547467][ T9331] vfs_read+0x213/0xa80 [ 361.547501][ T9331] ? __pfx___mutex_lock+0x10/0x10 [ 361.547555][ T9331] ? __pfx_vfs_read+0x10/0x10 [ 361.547585][ T9331] ? __fget_files+0x2a/0x420 [ 361.547614][ T9331] ? __fget_files+0x3a2/0x420 [ 361.547637][ T9331] ? __fget_files+0x2a/0x420 [ 361.547680][ T9331] ksys_read+0x150/0x270 [ 361.547711][ T9331] ? __pfx_ksys_read+0x10/0x10 [ 361.547738][ T9331] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 361.547772][ T9331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.547794][ T9331] do_syscall_64+0x174/0x580 [ 361.547818][ T9331] ? trace_irq_disable+0x3b/0x140 [ 361.547842][ T9331] ? clear_bhb_loop+0x70/0xc0 [ 361.547866][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.547885][ T9331] RIP: 0033:0x7f48bdd5e90e [ 361.547904][ T9331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.547919][ T9331] RSP: 002b:00007f48beb89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.547941][ T9331] RAX: ffffffffffffffda RBX: 00007f48beb8a6c0 RCX: 00007f48bdd5e90e [ 361.547954][ T9331] RDX: 000000000000000f RSI: 00007f48beb8a0a0 RDI: 0000000000000004 [ 361.547966][ T9331] RBP: 00007f48beb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 361.547978][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.547990][ T9331] R13: 00007f48be026038 R14: 00007f48be025fa0 R15: 00007f48be14fa48 [ 361.548029][ T9331] [ 362.120828][ T9335] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 362.285012][ T29] audit: type=1804 audit(1786265592.408:576): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1040" name="file0" dev="ramfs" ino=27624 res=1 errno=0 [ 362.459147][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 362.489997][ T9353] team0: Port device team_slave_0 removed [ 362.751539][ T5701] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 362.762755][ T5714] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 363.422879][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 363.574579][ T9381] FAULT_INJECTION: forcing a failure. [ 363.574579][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 363.587406][ T9381] CPU: 0 UID: 0 PID: 9381 Comm: syz.2.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.587434][ T9381] Tainted: [L]=SOFTLOCKUP [ 363.587438][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.587445][ T9381] Call Trace: [ 363.587451][ T9381] [ 363.587456][ T9381] dump_stack_lvl+0xe8/0x150 [ 363.587478][ T9381] should_fail_ex+0x40c/0x560 [ 363.587494][ T9381] should_failslab+0xa8/0x100 [ 363.587511][ T9381] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 363.587526][ T9381] ? skb_clone+0x212/0x3a0 [ 363.587539][ T9381] ? skb_clone+0x212/0x3a0 [ 363.587554][ T9381] skb_clone+0x212/0x3a0 [ 363.587569][ T9381] __netlink_deliver_tap+0x413/0x860 [ 363.587588][ T9381] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.587602][ T9381] netlink_deliver_tap+0x19c/0x1b0 [ 363.587615][ T9381] netlink_unicast+0x77f/0x940 [ 363.587632][ T9381] netlink_sendmsg+0x813/0xb40 [ 363.587657][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.587673][ T9381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.587687][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.587699][ T9381] sock_sendmsg_nosec+0x13a/0x180 [ 363.587716][ T9381] ____sys_sendmsg+0x54e/0x850 [ 363.587735][ T9381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.587752][ T9381] ? import_iovec+0x73/0xa0 [ 363.587769][ T9381] ___sys_sendmsg+0x2a5/0x360 [ 363.587781][ T9381] ? __lock_acquire+0x683/0x2cf0 [ 363.587797][ T9381] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.587827][ T9381] ? __fget_files+0x2a/0x420 [ 363.587841][ T9381] ? __fget_files+0x3a2/0x420 [ 363.587859][ T9381] __x64_sys_sendmsg+0x1b1/0x290 [ 363.587873][ T9381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.587895][ T9381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.587907][ T9381] do_syscall_64+0x174/0x580 [ 363.587921][ T9381] ? trace_irq_disable+0x3b/0x140 [ 363.587935][ T9381] ? clear_bhb_loop+0x70/0xc0 [ 363.587948][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.587959][ T9381] RIP: 0033:0x7f4372d9e0d9 [ 363.587972][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.587981][ T9381] RSP: 002b:00007f4373bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.587995][ T9381] RAX: ffffffffffffffda RBX: 00007f4373025fa0 RCX: 00007f4372d9e0d9 [ 363.588006][ T9381] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 363.588013][ T9381] RBP: 00007f4373bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 363.588019][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.588026][ T9381] R13: 00007f4373026038 R14: 00007f4373025fa0 R15: 00007f437314fa48 [ 363.588043][ T9381] [ 363.644742][ T5714] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 363.708539][ T5684] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 364.090360][ T5714] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 364.098503][ T5714] usb 5-1: config 0 has no interface number 0 [ 364.104658][ T5714] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 364.114688][ T5714] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 364.208651][ T5684] usb 1-1: device descriptor read/64, error -71 [ 364.458476][ T5684] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 364.618939][ T5684] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.634508][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 364.649000][ T5684] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 364.657371][ T5684] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.667590][ T5684] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.677237][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.685949][ T5684] usb 1-1: Product: syz [ 364.690621][ T5684] usb 1-1: Manufacturer: syz [ 364.695382][ T5684] usb 1-1: SerialNumber: syz [ 364.714361][ T5684] usb 1-1: config 0 descriptor?? [ 364.729227][ T5684] hub 1-1:0.0: bad descriptor, ignoring hub [ 364.741421][ T5684] hub 1-1:0.0: probe with driver hub failed with error -5 [ 364.753452][ T5684] usb 1-1: selecting invalid altsetting 0 [ 364.806472][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 364.813648][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 364.834896][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 364.843680][ T9] usb 4-1: config 0 has no interface number 0 [ 364.850357][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 364.863552][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 364.908415][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.927731][ T9] usb 4-1: Product: syz [ 364.939331][ T9] usb 4-1: Manufacturer: syz [ 364.949398][ T9] usb 4-1: SerialNumber: syz [ 364.979204][ T9] usb 4-1: config 0 descriptor?? [ 364.984678][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.992706][ T5714] usb 5-1: Product: syz [ 364.996893][ T5714] usb 5-1: Manufacturer: syz [ 365.001521][ T5714] usb 5-1: SerialNumber: syz [ 365.008062][ T9396] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 365.015349][ T9396] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 365.038301][ T5714] usb 5-1: config 0 descriptor?? [ 365.052086][ T9383] loop5: detected capacity change from 0 to 8 [ 365.091541][ T9348] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.124552][ T9348] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.231165][ T9383] Dev loop5: unable to read RDB block 8 [ 365.248987][ T9383] loop5: unable to read partition table [ 365.257646][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 365.267935][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 365.270820][ T9383] loop5: partition table beyond EOD, truncated [ 365.298393][ T9383] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 365.324250][ T9396] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 365.338052][ T9396] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 365.406778][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1062'. [ 365.540218][ T5714] asix 5-1:0.34: probe with driver asix failed with error -71 [ 365.565817][ T5714] usb 5-1: USB disconnect, device number 75 [ 365.579292][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 365.649828][ T5763] usb 1-1: USB disconnect, device number 76 [ 366.305226][ T5714] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 366.932435][ T9428] FAULT_INJECTION: forcing a failure. [ 366.932435][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.946416][ T9428] CPU: 0 UID: 0 PID: 9428 Comm: syz.2.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.946450][ T9428] Tainted: [L]=SOFTLOCKUP [ 366.946457][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.946469][ T9428] Call Trace: [ 366.946477][ T9428] [ 366.946485][ T9428] dump_stack_lvl+0xe8/0x150 [ 366.946525][ T9428] should_fail_ex+0x40c/0x560 [ 366.946554][ T9428] _copy_from_user+0x2d/0xb0 [ 366.946583][ T9428] kstrtouint_from_user+0xd6/0x180 [ 366.946610][ T9428] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 366.946652][ T9428] proc_fail_nth_write+0x8e/0x210 [ 366.946679][ T9428] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.946724][ T9428] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.946749][ T9428] vfs_write+0x296/0xba0 [ 366.946787][ T9428] ? __pfx_vfs_write+0x10/0x10 [ 366.946817][ T9428] ? __fget_files+0x2a/0x420 [ 366.946846][ T9428] ? __fget_files+0x3a2/0x420 [ 366.946868][ T9428] ? __fget_files+0x2a/0x420 [ 366.946902][ T9428] ksys_write+0x150/0x270 [ 366.946932][ T9428] ? __pfx_ksys_write+0x10/0x10 [ 366.946969][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.946991][ T9428] do_syscall_64+0x174/0x580 [ 366.947017][ T9428] ? trace_irq_disable+0x3b/0x140 [ 366.947041][ T9428] ? clear_bhb_loop+0x70/0xc0 [ 366.947065][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.947085][ T9428] RIP: 0033:0x7f4372d5e90e [ 366.947104][ T9428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.947120][ T9428] RSP: 002b:00007f4373bfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.947142][ T9428] RAX: ffffffffffffffda RBX: 00007f4373bfc6c0 RCX: 00007f4372d5e90e [ 366.947156][ T9428] RDX: 0000000000000001 RSI: 00007f4373bfc0a0 RDI: 0000000000000006 [ 366.947168][ T9428] RBP: 00007f4373bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 366.947180][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.947191][ T9428] R13: 00007f4373026038 R14: 00007f4373025fa0 R15: 00007f437314fa48 [ 366.947232][ T9428] [ 367.156777][ T5685] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 367.398625][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 367.402130][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 367.404910][ T5685] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.411565][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 367.444121][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.455702][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.475568][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.491220][ T5685] usb 1-1: config 0 descriptor?? [ 367.500693][ T5685] hub 1-1:0.0: USB hub found [ 367.636318][ T9441] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 367.699706][ T5685] hub 1-1:0.0: 1 port detected [ 367.837976][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.848745][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.059360][ T5714] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 368.218766][ T9446] FAULT_INJECTION: forcing a failure. [ 368.218766][ T9446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.233430][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.2.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.233454][ T9446] Tainted: [L]=SOFTLOCKUP [ 368.233458][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.233466][ T9446] Call Trace: [ 368.233471][ T9446] [ 368.233477][ T9446] dump_stack_lvl+0xe8/0x150 [ 368.233508][ T9446] should_fail_ex+0x40c/0x560 [ 368.233537][ T9446] _copy_from_user+0x2d/0xb0 [ 368.233565][ T9446] vhost_vring_ioctl+0x39a/0x18f0 [ 368.233667][ T9446] ? __mutex_lock+0x30d/0x1550 [ 368.233701][ T9446] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 368.233721][ T9446] ? do_vfs_ioctl+0x116f/0x1530 [ 368.233744][ T9446] ? vhost_dev_ioctl+0x3d2/0x11f0 [ 368.233766][ T9446] ? __pfx___mutex_lock+0x10/0x10 [ 368.233791][ T9446] vhost_vsock_dev_ioctl+0x265/0xed0 [ 368.233839][ T9446] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 368.233864][ T9446] ? __fget_files+0x2a/0x420 [ 368.233886][ T9446] ? __fget_files+0x3a2/0x420 [ 368.233907][ T9446] ? __fget_files+0x2a/0x420 [ 368.233927][ T9446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.233940][ T9446] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 368.233955][ T9446] __se_sys_ioctl+0xfc/0x170 [ 368.233966][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.233986][ T9446] do_syscall_64+0x174/0x580 [ 368.234010][ T9446] ? trace_irq_disable+0x3b/0x140 [ 368.234033][ T9446] ? clear_bhb_loop+0x70/0xc0 [ 368.234056][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.234073][ T9446] RIP: 0033:0x7f4372d9e0d9 [ 368.234088][ T9446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.234098][ T9446] RSP: 002b:00007f4373bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.234112][ T9446] RAX: ffffffffffffffda RBX: 00007f4373025fa0 RCX: 00007f4372d9e0d9 [ 368.234121][ T9446] RDX: 00002000000001c0 RSI: 000000004028af11 RDI: 0000000000000003 [ 368.234131][ T9446] RBP: 00007f4373bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 368.234141][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.234153][ T9446] R13: 00007f4373026038 R14: 00007f4373025fa0 R15: 00007f437314fa48 [ 368.234185][ T9446] [ 368.527419][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 368.578766][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 368.591201][ T9] usb 4-1: USB disconnect, device number 72 [ 368.760735][ T5701] usb 1-1: USB disconnect, device number 77 [ 368.771812][ T5685] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 369.231897][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'. [ 370.530190][ T9478] netlink: 'syz.0.1081': attribute type 13 has an invalid length. [ 370.560243][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 370.631051][ T5685] usb 5-1: USB disconnect, device number 76 [ 370.734041][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 370.763218][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.805890][ T9] usb 4-1: config 0 descriptor?? [ 370.982879][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.146618][ T9489] dvmrp0: tun_chr_ioctl cmd 2147767511 [ 371.170539][ T9489] syzkaller0: entered promiscuous mode [ 371.176169][ T9489] syzkaller0: entered allmulticast mode [ 371.548973][ T5685] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 371.741508][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 371.747514][ T5685] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 371.757846][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.768392][ T5685] usb 2-1: config 0 descriptor?? [ 371.777886][ T5685] gspca_main: sunplus-2.14.0 probing 041e:400b [ 371.943085][ T9] usb 4-1: Cannot set autoneg [ 371.958686][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 371.982587][ T9] usb 4-1: USB disconnect, device number 73 [ 372.013632][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 372.066282][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 372.075286][ T9499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1090'. [ 372.457326][ T5714] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 372.645918][ T5685] gspca_sunplus: reg_r err -71 [ 372.652512][ T5685] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 372.663889][ T5685] usb 2-1: USB disconnect, device number 90 [ 372.847149][ T9507] FAULT_INJECTION: forcing a failure. [ 372.847149][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 372.859970][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.2.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.860000][ T9507] Tainted: [L]=SOFTLOCKUP [ 372.860008][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.860018][ T9507] Call Trace: [ 372.860027][ T9507] [ 372.860034][ T9507] dump_stack_lvl+0xe8/0x150 [ 372.860066][ T9507] should_fail_ex+0x40c/0x560 [ 372.860095][ T9507] should_failslab+0xa8/0x100 [ 372.860123][ T9507] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 372.860147][ T9507] ? skb_clone+0x212/0x3a0 [ 372.860167][ T9507] ? skb_clone+0x212/0x3a0 [ 372.860194][ T9507] skb_clone+0x212/0x3a0 [ 372.860218][ T9507] __netlink_deliver_tap+0x413/0x860 [ 372.860261][ T9507] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.860284][ T9507] netlink_deliver_tap+0x19c/0x1b0 [ 372.860307][ T9507] netlink_sendskb+0x68/0x140 [ 372.860329][ T9507] netlink_rcv_skb+0x2a4/0x4a0 [ 372.860352][ T9507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.860472][ T9507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.860488][ T9507] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.860515][ T9507] netlink_unicast+0x7bb/0x940 [ 372.860532][ T9507] netlink_sendmsg+0x813/0xb40 [ 372.860551][ T9507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.860566][ T9507] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.860580][ T9507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.860592][ T9507] sock_sendmsg_nosec+0x13a/0x180 [ 372.860609][ T9507] ____sys_sendmsg+0x54e/0x850 [ 372.860624][ T9507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.860641][ T9507] ? import_iovec+0x73/0xa0 [ 372.860660][ T9507] ___sys_sendmsg+0x2a5/0x360 [ 372.860671][ T9507] ? __lock_acquire+0x683/0x2cf0 [ 372.860689][ T9507] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.860719][ T9507] ? __fget_files+0x2a/0x420 [ 372.860735][ T9507] ? __fget_files+0x3a2/0x420 [ 372.860756][ T9507] __x64_sys_sendmsg+0x1b1/0x290 [ 372.860771][ T9507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.860793][ T9507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.860805][ T9507] do_syscall_64+0x174/0x580 [ 372.860819][ T9507] ? trace_irq_disable+0x3b/0x140 [ 372.860833][ T9507] ? clear_bhb_loop+0x70/0xc0 [ 372.860846][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.860858][ T9507] RIP: 0033:0x7f4372d9e0d9 [ 372.860872][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.860882][ T9507] RSP: 002b:00007f4373bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.860896][ T9507] RAX: ffffffffffffffda RBX: 00007f4373025fa0 RCX: 00007f4372d9e0d9 [ 372.860905][ T9507] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 372.860912][ T9507] RBP: 00007f4373bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 372.860920][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.860927][ T9507] R13: 00007f4373026038 R14: 00007f4373025fa0 R15: 00007f437314fa48 [ 372.860944][ T9507] [ 372.900220][ T5714] usb 5-1: device descriptor read/64, error -71 [ 373.376502][ T9518] xt_hashlimit: size too large, truncated to 1048576 [ 373.452708][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 373.529848][ T5714] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 373.588558][ T5347] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 373.678821][ T5714] usb 5-1: device descriptor read/64, error -71 [ 373.769852][ T5347] usb 2-1: Using ep0 maxpacket: 16 [ 373.779477][ T5347] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 373.810441][ T5714] usb usb5-port1: attempt power cycle [ 373.819970][ T5347] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 373.831455][ T5347] usb 2-1: config 0 has no interface number 0 [ 373.839350][ T5347] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 373.884707][ T5347] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 373.968918][ T9524] fuse: Unknown parameter '' [ 374.331299][ T5714] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 374.441084][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.454695][ T5347] usb 2-1: Product: syz [ 374.460293][ T5714] usb 5-1: device descriptor read/8, error -71 [ 374.467238][ T5347] usb 2-1: Manufacturer: syz [ 374.472840][ T5347] usb 2-1: SerialNumber: syz [ 374.493315][ T5347] usb 2-1: config 0 descriptor?? [ 374.503035][ T9515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.516431][ T9515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.708747][ T5714] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 374.741595][ T9515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.775465][ T9515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.775599][ T5714] usb 5-1: device descriptor read/8, error -71 [ 374.919222][ T5714] usb usb5-port1: unable to enumerate USB device [ 374.948573][ T9275] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 375.017595][ T5347] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 375.132170][ T9275] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.146247][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 375.164086][ T9275] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 375.194180][ T9275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.222925][ T5347] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 375.244010][ T9275] usb 4-1: Product: syz [ 375.269338][ T9275] usb 4-1: Manufacturer: syz [ 375.285841][ T9275] usb 4-1: SerialNumber: syz [ 375.387502][ T5347] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 375.411385][ T5685] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.433851][ T5347] asix 2-1:0.34: probe with driver asix failed with error -61 [ 375.559826][ T29] audit: type=1800 audit(1786265605.668:577): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1104" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 375.646645][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.687044][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.726793][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.745552][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.782229][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.825334][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.105314][ T9275] usb 4-1: USB disconnect, device number 74 [ 376.257116][ T5347] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 376.479567][ T5685] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 376.496891][ T5685] ath9k_htc: Failed to initialize the device [ 376.522303][ T9275] usb 4-1: ath9k_htc: USB layer deinitialized [ 376.609470][ T5347] usb 5-1: Using ep0 maxpacket: 32 [ 376.616261][ T5347] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 376.721463][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 377.008742][ T9275] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 377.342121][ T9275] usb 4-1: Using ep0 maxpacket: 32 [ 377.396428][ T9275] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 377.469369][ T9275] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 377.543406][ T9275] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 377.592025][ T9275] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 377.664360][ T9275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.713595][ T9275] usb 4-1: config 0 descriptor?? [ 377.748374][ T9275] usb 4-1: can't set config #0, error -71 [ 377.780189][ T9275] usb 4-1: USB disconnect, device number 75 [ 377.955958][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.965954][ T5347] usb 5-1: Product: syz [ 377.986410][ T5347] usb 5-1: Manufacturer: syz [ 377.991083][ T5347] usb 5-1: SerialNumber: syz [ 378.003340][ T5347] usb 5-1: config 0 descriptor?? [ 378.030435][ T9] usb 2-1: USB disconnect, device number 91 [ 378.096009][ T29] audit: type=1804 audit(1786265608.198:578): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1112" name="bus" dev="ramfs" ino=29307 res=1 errno=0 [ 378.129809][ T187] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 378.399820][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 378.423337][ T187] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 378.444773][ T187] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 378.455049][ T187] usb 1-1: config 0 has no interface number 0 [ 378.469323][ T187] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 378.496510][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.521933][ T187] usb 1-1: Product: syz [ 378.530820][ T187] usb 1-1: Manufacturer: syz [ 378.540351][ T187] usb 1-1: SerialNumber: syz [ 378.566101][ T187] usb 1-1: config 0 descriptor?? [ 378.573579][ T9617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 378.661673][ T5347] airspy 5-1:0.0: Board ID: 00 [ 378.666528][ T5347] airspy 5-1:0.0: Firmware version: [ 378.787057][ T9617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 378.888034][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.894387][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.006353][ T187] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 379.028952][ T187] asix 1-1:0.188: probe with driver asix failed with error -32 [ 379.057257][ T187] usb 1-1: USB disconnect, device number 78 [ 379.738484][ T5714] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 379.870103][ T187] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 379.904090][ T5714] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 379.923737][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.935661][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.954627][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.076434][ T5347] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 380.077791][ T187] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.085064][ T5700] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 380.094687][ T187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.102387][ T5347] airspy 5-1:0.0: Registered as swradio24 [ 380.111931][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.116676][ T5347] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 380.135891][ T187] usb 1-1: config 0 descriptor?? [ 380.145996][ T5347] usb 5-1: USB disconnect, device number 81 [ 380.150041][ T187] pwc: Askey VC010 type 2 USB webcam detected. [ 380.307799][ T5701] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 380.630685][ T187] pwc: recv_control_msg error -32 req 02 val 2b00 [ 380.845654][ T187] pwc: recv_control_msg error -71 req 02 val 2c00 [ 380.853908][ T187] pwc: recv_control_msg error -71 req 04 val 1000 [ 380.860967][ T187] pwc: recv_control_msg error -71 req 04 val 1300 [ 380.867932][ T187] pwc: recv_control_msg error -71 req 04 val 1400 [ 380.874858][ T187] pwc: recv_control_msg error -71 req 02 val 2000 [ 380.881909][ T187] pwc: recv_control_msg error -71 req 02 val 2100 [ 380.888899][ T187] pwc: recv_control_msg error -71 req 04 val 1500 [ 380.895696][ T187] pwc: recv_control_msg error -71 req 02 val 2500 [ 380.902812][ T187] pwc: recv_control_msg error -71 req 02 val 2400 [ 380.909919][ T187] pwc: recv_control_msg error -71 req 02 val 2600 [ 380.916733][ T187] pwc: recv_control_msg error -71 req 02 val 2900 [ 380.923734][ T187] pwc: recv_control_msg error -71 req 02 val 2800 [ 380.930599][ T187] pwc: recv_control_msg error -71 req 04 val 1100 [ 380.937571][ T187] pwc: recv_control_msg error -71 req 04 val 1200 [ 380.946412][ T187] pwc: Registered as video103. [ 380.957994][ T5700] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 380.962963][ T187] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 381.004043][ T187] usb 1-1: USB disconnect, device number 79 [ 381.090018][ T5701] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 381.101643][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.115306][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.127176][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 381.143128][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.152179][ T5700] usb 2-1: Product: syz [ 381.156933][ T5700] usb 2-1: Manufacturer: syz [ 381.164206][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 381.173339][ T5700] usb 2-1: SerialNumber: syz [ 381.178489][ T5701] usb 4-1: Product: syz [ 381.187466][ T5701] usb 4-1: Manufacturer: syz [ 381.203643][ T5700] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 381.317250][ T5347] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 381.633474][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.650536][ T5700] gspca_mr97310a: reg write [21] error -71 [ 381.656478][ T5700] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 381.665677][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.676991][ T5700] usb 2-1: USB disconnect, device number 92 [ 381.876042][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.886844][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.900562][ T5701] usb 4-1: USB disconnect, device number 76 [ 381.969820][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 382.185121][ T5347] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 382.313282][ T5347] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 382.322287][ T5347] usb 5-1: config 0 has no interface number 0 [ 382.329369][ T5347] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 382.340468][ T5347] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 382.411213][ T9] usb 3-1: USB disconnect, device number 78 [ 382.633186][ T5685] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 382.814234][ T9679] netlink: 848 bytes leftover after parsing attributes in process `syz.3.1134'. [ 382.826651][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1134'. [ 382.860238][ T5685] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 382.870554][ T5685] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 382.883253][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.894282][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.905079][ T5685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 382.922306][ T5685] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 382.930765][ T5685] usb 2-1: Manufacturer: syz [ 382.939434][ T5685] usb 2-1: config 0 descriptor?? [ 382.978116][ T9681] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 383.078549][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 383.131717][ T5700] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 383.241786][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.249841][ T5347] usb 5-1: Product: syz [ 383.254027][ T5347] usb 5-1: Manufacturer: syz [ 383.258724][ T5347] usb 5-1: SerialNumber: syz [ 383.267707][ T5347] usb 5-1: config 0 descriptor?? [ 383.351380][ T9649] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 383.351621][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 383.358697][ T9649] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 383.371903][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.382806][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.393934][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.408532][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.419679][ T9] usb 1-1: config 0 descriptor?? [ 383.430000][ T9] hub 1-1:0.0: USB hub found [ 383.453124][ T5685] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 383.480598][ T5685] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 383.635540][ T9] hub 1-1:0.0: 1 port detected [ 383.689336][ T5347] asix 5-1:0.34: probe with driver asix failed with error -71 [ 383.714626][ T5347] usb 5-1: USB disconnect, device number 82 [ 383.831393][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 383.871458][ T5685] usb 2-1: USB disconnect, device number 93 [ 384.031688][ T5700] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 384.295866][ T9] hub 1-1:0.0: activate --> -90 [ 384.473597][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.487579][ T5700] usb 3-1: config 0 descriptor?? [ 384.543274][ T187] usb 1-1: USB disconnect, device number 80 [ 384.549653][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 384.698129][ T5347] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 384.948928][ T29] audit: type=1800 audit(1786265615.048:579): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1140" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1170 res=0 errno=0 [ 384.963794][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 385.054656][ T9699] bond0: entered promiscuous mode [ 385.065785][ T9699] bond_slave_0: entered promiscuous mode [ 385.078464][ T9699] bond_slave_1: entered promiscuous mode [ 385.115917][ T9699] gretap0: entered promiscuous mode [ 385.143234][ T9699] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 385.164222][ T9699] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 385.192519][ T9699] hsr1: entered promiscuous mode [ 385.298299][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 385.331415][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 385.661127][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1143'. [ 385.708921][ T5347] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 385.763928][ T9711] openvswitch: netlink: IP tunnel TTL not specified. [ 385.770868][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.877833][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1143'. [ 386.048487][ T5700] usb 3-1: Cannot set autoneg [ 386.053452][ T5700] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 386.068572][ T5700] usb 3-1: USB disconnect, device number 79 [ 386.161640][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.199410][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 386.210294][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 386.396338][ T5347] snd-ua101 4-1:1.0: probe with driver snd-ua101 failed with error -2 [ 386.491297][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 386.506188][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.535428][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.578095][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.586894][ T9] usb 2-1: Product: syz [ 386.592501][ T9] usb 2-1: Manufacturer: syz [ 386.597421][ T9] usb 2-1: SerialNumber: syz [ 386.616362][ T9] usb 2-1: config 0 descriptor?? [ 386.640633][ T5347] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 386.648561][ T187] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 386.928618][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 386.935615][ T187] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 386.947317][ T187] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 386.960165][ T187] usb 5-1: config 0 has no interface number 0 [ 386.966326][ T187] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 386.976546][ T187] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 386.989341][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.997523][ T187] usb 5-1: Product: syz [ 387.001740][ T187] usb 5-1: Manufacturer: syz [ 387.006348][ T187] usb 5-1: SerialNumber: syz [ 387.014529][ T187] usb 5-1: config 0 descriptor?? [ 387.020440][ T9722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 387.027857][ T9722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 387.240324][ T9722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 387.247642][ T9722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 387.266959][ T5347] usb 1-1: Using ep0 maxpacket: 8 [ 387.487063][ T5347] usb 1-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 387.505154][ T187] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 387.716425][ T187] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 387.727586][ T187] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 387.738823][ T187] asix 5-1:0.34: probe with driver asix failed with error -61 [ 387.841889][ T187] usb 4-1: USB disconnect, device number 77 [ 387.921894][ T5347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.928604][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.945401][ T5347] usb 1-1: config 0 descriptor?? [ 388.204634][ T9747] [U] .h0FwZ,iqgҏV2sO [ 388.217185][ T9747] [U] ` w*BBOLhU [ 388.221739][ T9747] [U] w$n|#%o.z\̧mРw [ 388.259151][ T9747] [U] R{ꫢ S [ 388.498363][ T187] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 388.566915][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x2 [ 388.575208][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x6 [ 388.586641][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.597194][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.610484][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.622716][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.632160][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.639082][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.645959][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.652852][ T5347] ntrig 0003:1B96:0005.001C: unknown main item tag 0x0 [ 388.661863][ T5347] ntrig 0003:1B96:0005.001C: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.0-1/input0 [ 388.738690][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 388.747679][ T187] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.767466][ T187] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 388.784613][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.804062][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.812660][ T187] usb 4-1: Product: syz [ 388.818541][ T187] usb 4-1: Manufacturer: syz [ 388.828474][ T187] usb 4-1: SerialNumber: syz [ 388.863966][ T187] usb 4-1: 0:2 : does not exist [ 389.089473][ T9744] [U] [ 389.111017][ T187] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 389.155897][ T5685] usb 2-1: USB disconnect, device number 94 [ 389.310146][ T9] usb 1-1: USB disconnect, device number 81 [ 389.367288][ T187] usb 4-1: USB disconnect, device number 78 [ 390.121865][ T187] usb 5-1: USB disconnect, device number 83 [ 390.372044][ T5700] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 390.517844][ T29] audit: type=1326 audit(1786265620.608:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48bdd9e0d9 code=0x0 [ 390.594258][ T5347] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 391.256022][ T5700] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 391.265355][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 391.479620][ T5347] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 391.700586][ T5700] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 391.708882][ T5700] usb 1-1: config 0 has no interface number 0 [ 391.715403][ T5700] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 391.727084][ T5700] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 391.738412][ T5700] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 391.749846][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.812585][ T5700] usb 1-1: config 0 descriptor?? [ 391.923786][ T9769] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.931253][ T5347] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 391.939403][ T5347] usb 2-1: config 0 has no interface number 0 [ 391.945536][ T5347] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.956512][ T5347] usb 2-1: config 0 interface 85 has no altsetting 0 [ 392.257353][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.266656][ T5347] usb 2-1: Product: syz [ 392.270898][ T5347] usb 2-1: Manufacturer: syz [ 392.275621][ T5347] usb 2-1: SerialNumber: syz [ 392.288023][ T5347] usb 2-1: config 0 descriptor?? [ 392.300317][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.327672][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.936126][ T5700] usb 1-1: string descriptor 0 read error: -71 [ 392.945614][ T5700] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected [ 392.953496][ T5700] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1 [ 392.962565][ T5700] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84 [ 392.970459][ T5700] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2 [ 392.997293][ T5700] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 393.013714][ T5700] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88 [ 393.021654][ T5700] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6 [ 393.042330][ T5701] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 393.092323][ T5700] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 393.182402][ T5700] usb 1-1: USB disconnect, device number 82 [ 393.192540][ T5700] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 393.209537][ T5700] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 393.220456][ T5700] keyspan 1-1:0.168: device disconnected [ 393.375552][ T5347] appletouch 2-1:0.85: Geyser mode initialized. [ 393.383340][ T5347] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input30 [ 393.711668][ T5347] usb 2-1: USB disconnect, device number 95 [ 393.752390][ T5347] appletouch 2-1:0.85: input: appletouch disconnected [ 393.927956][ T5701] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 394.388527][ T5701] usb 4-1: config index 0 descriptor too short (expected 757, got 18) [ 394.396780][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.406869][ T5701] usb 4-1: config 0 has no interfaces? [ 394.519237][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.538311][ T5701] usb 4-1: Product: syz [ 394.542624][ T5701] usb 4-1: Manufacturer: syz [ 394.547255][ T5701] usb 4-1: SerialNumber: syz [ 394.572945][ T5701] usb 4-1: config 0 descriptor?? [ 394.990837][ T5701] usb 4-1: USB disconnect, device number 79 [ 395.720155][ T9854] syzkaller1: entered promiscuous mode [ 395.741124][ T9854] syzkaller1: entered allmulticast mode [ 396.094081][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1188'. [ 396.393821][ T5701] logitech-hidpp-device 0005:046D:B012.001D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 396.491728][ T9869] fido_id[9869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 397.038744][ T5700] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 397.308500][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 397.334783][ T5700] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.388062][ T5700] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 397.441924][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.480405][ T5700] usb 5-1: Product: syz [ 397.503665][ T5700] usb 5-1: Manufacturer: syz [ 397.528742][ T5700] usb 5-1: SerialNumber: syz [ 397.597653][ T5700] usb 5-1: config 0 descriptor?? [ 397.634559][ T9879] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.980631][ T187] usb 5-1: USB disconnect, device number 84 [ 399.491782][ T5700] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 400.154291][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 400.374882][ T5700] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 400.410258][ T9940] xt_hashlimit: size too large, truncated to 1048576 [ 400.823591][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 400.840017][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.852264][ T5700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.861953][ T5700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 400.871818][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.962457][ T5700] usb 1-1: config 0 descriptor?? [ 401.043737][ T9913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.377819][ T4931] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 401.389349][ T5701] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 401.404923][ T4931] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 401.412527][ T4931] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 401.420722][ T4931] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 401.571746][ T9] usb 1-1: USB disconnect, device number 83 [ 401.582023][ T5624] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 401.713553][ T9960] kAFS: unable to lookup cell '' [ 401.898464][ T187] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 401.922211][ T5701] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 401.945384][ T5701] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 401.959547][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0 [ 401.966212][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.985754][ T5701] usb 3-1: config 0 descriptor?? [ 402.060319][ T187] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 402.070287][ T9951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 402.080191][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.093918][ T187] usb 5-1: config 0 descriptor?? [ 402.410500][ T187] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 402.641575][ T5701] hid_parser_main: 17 callbacks suppressed [ 402.641602][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.654413][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.661323][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.669162][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.692437][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.699980][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.706994][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.713901][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.747327][ T187] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 402.761902][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.768935][ T5701] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 402.772108][ T187] [drm] Initialized udl on minor 1 [ 402.800878][ T5701] razer 0003:1532:010D.001E: collection stack underflow [ 402.817317][ T5701] razer 0003:1532:010D.001E: item 0 0 0 12 parsing failed [ 402.825309][ T5701] razer 0003:1532:010D.001E: probe with driver razer failed with error -22 [ 402.856015][ T5701] usb 3-1: USB disconnect, device number 80 [ 403.023531][ T187] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 403.046944][ T187] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 403.071819][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 403.082730][ T187] usb 5-1: USB disconnect, device number 85 [ 403.093854][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 403.948328][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 404.028359][ T187] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 404.119106][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 404.135605][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.146698][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 404.186894][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 404.197103][ T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 404.206394][ T9] usb 5-1: config 14 has no interface number 0 [ 404.213055][ T187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.222971][ T9] usb 5-1: config 14 has no interface number 1 [ 404.229950][ T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 404.243514][ T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 404.255603][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.264098][ T187] usb 3-1: Product: syz [ 404.268747][ T187] usb 3-1: Manufacturer: syz [ 404.273444][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 404.285824][ T187] usb 3-1: SerialNumber: syz [ 404.292766][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 404.306547][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 404.318703][ T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.332404][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 404.350820][ T9] usb 5-1: config 14 interface 228 has no altsetting 0 [ 404.384657][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.393636][ T9] usb 5-1: Product: syz [ 404.403243][ T9] usb 5-1: Manufacturer: syz [ 404.419011][ T9] usb 5-1: SerialNumber: syz [ 404.874173][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 404.951115][ T187] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 404.959257][ T187] cdc_ncm 3-1:1.0: bind() failure [ 404.985809][ T187] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 404.998763][ T187] cdc_ncm 3-1:1.1: bind() failure [ 405.026590][ T187] usb 3-1: USB disconnect, device number 81 [ 405.316405][ T9] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 405.336666][ T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 406.399576][ T9275] usb 5-1: USB disconnect, device number 86 [ 406.433149][ T9275] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 406.489294][ T9] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 406.689359][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 406.707977][ T9] usb 4-1: config 0 has no interfaces? [ 406.725921][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 406.734741][ T9] usb 4-1: Product: syz [ 406.739230][ T9] usb 4-1: SerialNumber: syz [ 406.747955][ T9] usb 4-1: config 0 descriptor?? [ 407.218398][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 407.310105][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.319049][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.335235][ T5701] usb 4-1: USB disconnect, device number 80 [ 407.400458][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.409632][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 407.420497][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.430967][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.443499][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.452012][ T9] usb 2-1: Product: syz [ 407.456259][ T9] usb 2-1: Manufacturer: syz [ 407.461437][ T9] usb 2-1: SerialNumber: syz [ 407.481574][ T9] usb 2-1: selecting invalid altsetting 1 [ 407.490626][ T9] usb 2-1: unit 6 not found! [ 407.747230][ T5763] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 408.310100][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 408.369120][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 408.390584][ T9] usb 2-1: USB disconnect, device number 96 [ 408.421508][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 408.446474][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.478337][ T9275] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 408.642002][ T5763] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 408.648400][ T9275] usb 5-1: Using ep0 maxpacket: 32 [ 408.670335][ T9275] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.678076][ T9275] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 408.688552][ T9275] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 408.696798][ T9275] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 408.705413][ T9275] usb 5-1: config 14 has no interface number 0 [ 408.711982][ T9275] usb 5-1: config 14 has no interface number 1 [ 408.719313][ T9275] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 408.730241][ T9275] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 408.742497][ T9275] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 408.754321][ T9275] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 408.766442][ T9275] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 408.778187][ T9275] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.792024][ T9275] usb 5-1: config 14 interface 57 has no altsetting 0 [ 408.803614][ T9275] usb 5-1: config 14 interface 228 has no altsetting 0 [ 408.813784][ T9275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.825012][ T9275] usb 5-1: Product: syz [ 408.832231][ T9275] usb 5-1: Manufacturer: syz [ 408.836947][ T9275] usb 5-1: SerialNumber: syz [ 409.094134][ T5763] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 409.102459][ T5763] usb 3-1: config 0 has no interface number 0 [ 409.108686][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 409.120053][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 409.195730][ T5700] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 409.298859][ T9275] legousbtower 5-1:14.57: interrupt endpoints not found [ 409.388342][ T5685] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 409.539068][ T5685] usb 2-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 409.549895][ T5685] usb 2-1: config 4 has an invalid interface number: 201 but max is 0 [ 409.558960][ T5685] usb 2-1: config 4 has no interface number 0 [ 409.570518][ T5685] usb 2-1: config 4 interface 201 has no altsetting 0 [ 409.584490][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.593217][ T5685] usb 2-1: Product: syz [ 409.597619][ T5685] usb 2-1: Manufacturer: syz [ 409.602843][ T5685] usb 2-1: SerialNumber: syz [ 409.743865][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 409.752004][ T5763] usb 3-1: Product: syz [ 409.756264][ T5763] usb 3-1: SerialNumber: syz [ 409.764763][ T9275] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 409.766015][ T5763] usb 3-1: config 0 descriptor?? [ 409.788884][ T9275] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 409.831839][ T5685] usb-storage 2-1:4.201: USB Mass Storage device detected [ 409.856989][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 409.877678][ T5685] usb-storage 2-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 409.965489][ T5763] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 409.974989][ T5763] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 410.074305][ T5700] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 410.209594][ T5685] usb 2-1: USB disconnect, device number 97 [ 410.291894][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 410.504145][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.507126][ T5700] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 410.517126][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.521350][ T5700] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.538442][ T5700] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.538472][ T5700] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.538489][ T5700] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 410.538508][ T5700] usb 1-1: config 0 has no interface number 0 [ 410.538551][ T5700] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 410.538588][ T5700] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 410.538611][ T5700] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.538644][ T5700] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.538670][ T5700] usb 1-1: config 0 interface 125 has no altsetting 0 [ 410.538689][ T5700] usb 1-1: config 0 interface 125 has no altsetting 2 [ 410.618332][ T5763] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 410.681420][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.691879][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.699144][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.706410][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.713700][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.721464][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.728928][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.736345][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.744004][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.751452][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 410.771779][ T9275] usb 3-1: USB disconnect, device number 82 [ 410.771846][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 410.799447][ T9275] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 410.944688][ T5685] usb 5-1: USB disconnect, device number 87 [ 410.968744][ T5685] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 411.050003][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.063051][ T5763] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 411.077702][ T5700] usb 1-1: Product: syz [ 411.089558][ T5763] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 411.100838][ T5700] usb 1-1: Manufacturer: syz [ 411.106244][ T5763] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 411.116812][ T5700] usb 1-1: SerialNumber: syz [ 411.124719][ T5700] usb 1-1: config 0 descriptor?? [ 411.345703][ T5700] usb 1-1: selecting invalid altsetting 2 [ 411.678123][ C1] usb 1-1: async_complete: urb error -71 [ 411.683970][ C1] usb 1-1: async_complete: urb error -71 [ 411.689677][ C1] usb 1-1: async_complete: urb error -71 [ 411.695424][ C1] usb 1-1: async_complete: urb error -71 [ 411.705751][ T5700] get_1284_register: usb error -71 [ 411.717473][ T5700] usb 1-1: USB disconnect, device number 84 [ 412.003850][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.012006][ T5763] usb 4-1: Product: syz [ 412.016210][ T5763] usb 4-1: Manufacturer: syz [ 412.021642][ T5763] usb 4-1: SerialNumber: syz [ 412.030890][ T5763] usb 4-1: config 0 descriptor?? [ 412.414824][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 412.686286][T10114] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1280'. [ 413.486008][ T5763] mos7840 4-1:0.0: required endpoints missing [ 413.571271][ T5763] usb 4-1: USB disconnect, device number 81 [ 413.685461][ T5701] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 414.335760][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 414.345513][ T5701] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.360701][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.374095][ T5701] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.404507][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.436649][ T5701] usb 1-1: config 0 descriptor?? [ 414.655533][T10135] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 414.698435][ T5685] IPVS: starting estimator thread 0... [ 414.837286][T10143] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000 [ 414.908245][T10143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1290'. [ 415.016616][T10138] IPVS: using max 33 ests per chain, 79200 per kthread [ 415.129142][ T5701] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 415.139007][ T5701] hid_parser_main: 838 callbacks suppressed [ 415.139031][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.152200][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.159456][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.166704][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.208389][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.216310][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.258357][ T5685] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 415.296930][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.304289][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.312731][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.322526][ T5701] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 415.360572][ T5701] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001F/input/input32 [ 415.396251][ T5701] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 415.409169][ T5685] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 415.419064][ T5701] usb 1-1: USB disconnect, device number 85 [ 415.441922][ T5685] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 415.481171][ T5685] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 415.547819][ T5685] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25466, setting to 1024 [ 415.560739][T10155] fido_id[10155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 415.594800][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.630465][ T5685] usb 5-1: Product: syz [ 415.653905][ T5685] usb 5-1: Manufacturer: syz [ 415.674367][ T5685] usb 5-1: SerialNumber: syz [ 415.725697][ T5685] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 415.926537][ T5685] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 416.076109][ T5685] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 416.102943][ T5685] usb 5-1: USB disconnect, device number 88 [ 416.119776][ T6725] udevd[6725]: setting mode of /dev/bus/usb/005/088 to 020664 failed: No such file or directory [ 416.130516][ T6725] udevd[6725]: setting owner of /dev/bus/usb/005/088 to uid=0, gid=0 failed: No such file or directory [ 416.217287][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.507154][T10183] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 417.186706][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 417.539370][T10223] bond4: (slave team0): Device is not bonding slave [ 417.546042][T10223] bond4: option active_slave: invalid value (team0) [ 417.560036][T10223] bond4 (unregistering): Released all slaves [ 417.594819][T10225] ip_tables: iptables: counters copy to user failed while replacing table [ 418.044246][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 418.171548][ T5701] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 418.622019][T10261] netlink: 'syz.0.1341': attribute type 15 has an invalid length. [ 418.688655][T10266] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.696499][T10266] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.721362][T10266] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.728770][T10266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.736499][T10266] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.743842][T10266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.803794][T10266] team0: Port device bridge0 added [ 418.843086][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 418.893186][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.935981][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.068433][ T5701] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 419.420022][ T5685] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 419.517636][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.529563][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.539330][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.552159][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.563924][ T5701] usb 3-1: config 0 descriptor?? [ 419.579237][ T5685] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.600668][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.614018][ T5685] usb 2-1: config 0 descriptor?? [ 419.840311][ T5685] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 420.052695][ T5685] [drm:udl_init] *ERROR* Selecting channel failed [ 420.157438][ T5685] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 420.182308][ T5685] [drm] Initialized udl on minor 1 [ 420.193049][ T5685] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.209064][ T5685] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 420.225555][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.243933][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 420.251599][ T5685] usb 2-1: USB disconnect, device number 98 [ 420.306320][ T5701] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 420.315663][ T5701] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 420.326035][ T5701] microsoft 0003:045E:07DA.0020: implement() called with n (152) > 32! (kworker/1:6) [ 420.424194][T10299] bridge0: left promiscuous mode [ 420.439067][T10299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.453854][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.506332][T10299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.715519][T10299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.751161][ T5701] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 420.761791][ T5701] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 420.773243][ T5701] microsoft 0003:045E:07DA.0020: no inputs found [ 420.779789][ T5701] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 420.857318][T10299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.998418][ T5701] usb 3-1: USB disconnect, device number 83 [ 421.170363][T10299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.214799][T10299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.431078][T10299] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.456845][T10299] veth1_vlan: left promiscuous mode [ 421.465244][T10299] vlan0: left promiscuous mode [ 421.472734][T10299] veth1_vlan: entered promiscuous mode [ 421.542719][T10299] veth1_macvtap: left promiscuous mode [ 421.549710][T10299] veth0_macvtap: left promiscuous mode [ 421.556608][T10299] veth0_macvtap: entered promiscuous mode [ 421.563817][T10299] veth1_macvtap: entered promiscuous mode [ 421.578043][T10299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.586591][T10299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.734246][T10299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.821826][T10299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.884567][T10299] bridge0: port 3(vlan2) entered blocking state [ 421.891049][T10299] bridge0: port 3(vlan2) entered forwarding state [ 421.919411][T10299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.001247][T10299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.014387][T10299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.053582][T10299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.064637][T10299] gtp0: left promiscuous mode [ 422.086877][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.094196][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.147296][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.154641][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.318696][ T3364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.331955][ T3364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.341512][T10347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1375'. [ 422.358430][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.404470][ T3308] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 422.465704][ T3308] bond2: (slave veth3): making interface the new active one [ 422.492778][ T3308] bond2: active interface up! [ 422.813155][T10359] bridge0: port 3(wlan1) entered blocking state [ 422.820396][T10359] bridge0: port 3(wlan1) entered disabled state [ 422.844374][T10359] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 422.873251][T10359] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 422.933243][T10354] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 422.944284][T10354] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 422.959605][T10354] bridge0: port 3(wlan1) entered disabled state [ 423.218838][ T3277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.158537][T10409] xt_connbytes: Forcing CT accounting to be enabled [ 426.023965][T10467] xt_connbytes: Forcing CT accounting to be enabled [ 428.095784][T10538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.106533][T10538] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.497019][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 428.789975][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 428.840188][T10563] bond4: entered allmulticast mode [ 428.851345][T10563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.951319][T10572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.353475][T10595] batadv_slave_0: Caught tx_queue_len zero misconfig [ 429.417261][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'. [ 431.261374][T10671] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 431.332855][T10671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 431.345871][T10676] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 431.371245][T10671] bond5: entered promiscuous mode [ 431.376525][T10671] bond5: entered allmulticast mode [ 432.072594][ T5700] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 432.149155][T10701] fuse: root generation should be zero [ 432.285407][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 432.720999][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 432.943673][ T5700] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.390626][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.402030][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.411819][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.442305][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.461998][ T5700] usb 4-1: config 0 descriptor?? [ 433.902995][ T5700] usbhid 4-1:0.0: can't add hid device: -71 [ 433.915420][ T5700] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 433.943962][ T5700] usb 4-1: USB disconnect, device number 82 [ 434.394060][T10761] team_slave_1: Caught tx_queue_len zero misconfig [ 435.498393][ T9275] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 435.681474][ T9275] usb 4-1: Using ep0 maxpacket: 16 [ 435.711595][ T9275] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.754356][ T9275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.787916][ T9275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.820169][ T9275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 435.880126][ T9275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.922047][ T9275] usb 4-1: config 0 descriptor?? [ 436.365279][ T9275] usbhid 4-1:0.0: can't add hid device: -71 [ 436.386799][ T9275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 436.423413][ T9275] usb 4-1: USB disconnect, device number 83 [ 438.936952][ T29] audit: type=1326 audit(1786265669.058:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 438.998086][ T29] audit: type=1326 audit(1786265669.058:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.039204][ T29] audit: type=1326 audit(1786265669.068:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.064068][ T29] audit: type=1326 audit(1786265669.068:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.168381][ T29] audit: type=1326 audit(1786265669.068:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.192804][ T29] audit: type=1326 audit(1786265669.068:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.260399][ T29] audit: type=1326 audit(1786265669.068:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.284807][ T29] audit: type=1326 audit(1786265669.078:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.311094][ T29] audit: type=1326 audit(1786265669.078:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.411287][ T29] audit: type=1326 audit(1786265669.078:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 439.550628][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 439.564691][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 439.638394][T10926] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 439.668192][T10926] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 440.369548][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375925][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.539731][T10968] tap0: tun_chr_ioctl cmd 1074025677 [ 440.549355][T10968] tap0: linktype set to 513 [ 441.631890][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'. [ 441.670048][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'. [ 443.232796][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1677'. [ 443.945344][T11081] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 444.479042][T11090] ip_tables: iptables: counters copy to user failed while replacing table [ 445.072794][T11107] bridge1: entered promiscuous mode [ 445.078539][T11107] bridge1: entered allmulticast mode [ 445.773572][T11122] loop7: detected capacity change from 0 to 5 [ 446.003616][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 446.003636][ T29] audit: type=1326 audit(1786265676.128:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.054216][T11127] loop7: detected capacity change from 5 to 0 [ 446.068608][ T29] audit: type=1326 audit(1786265676.188:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.108377][ T29] audit: type=1326 audit(1786265676.188:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.170112][ T29] audit: type=1326 audit(1786265676.188:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.194790][ T29] audit: type=1326 audit(1786265676.188:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.219428][ T29] audit: type=1326 audit(1786265676.188:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.245710][ T29] audit: type=1326 audit(1786265676.188:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.287928][ T29] audit: type=1326 audit(1786265676.188:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.312459][ T29] audit: type=1326 audit(1786265676.188:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 446.336680][ T29] audit: type=1326 audit(1786265676.188:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.3.1702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48bdd9e0d9 code=0x7ffc0000 [ 447.266554][T11163] kvm: kvm [11162]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x800000000080 [ 447.368400][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 448.486024][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 449.614357][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'. [ 450.172004][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 450.424153][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1750'. [ 451.055462][T11281] syzkaller0: entered promiscuous mode [ 451.061113][T11281] syzkaller0: entered allmulticast mode [ 451.113332][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 452.328953][ T5700] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 452.377330][T11323] : renamed from vlan0 (while UP) [ 452.423429][T11327] syzkaller0: entered promiscuous mode [ 452.445101][T11327] syzkaller0: entered allmulticast mode [ 453.010978][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 453.142062][T11358] syzkaller0: entered promiscuous mode [ 453.147608][T11358] syzkaller0: entered allmulticast mode [ 453.232483][ T5700] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 453.447686][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 453.711972][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1802'. [ 453.849192][T11385] syzkaller0: entered promiscuous mode [ 453.868383][T11385] syzkaller0: entered allmulticast mode [ 454.357500][T11405] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 454.370599][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 454.370617][ T29] audit: type=1326 audit(1786265684.498:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.445259][ T29] audit: type=1326 audit(1786265684.528:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.489725][ T29] audit: type=1326 audit(1786265684.528:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.514993][ T29] audit: type=1326 audit(1786265684.528:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.557574][ T29] audit: type=1326 audit(1786265684.528:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.572452][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.598334][ T5700] usb 4-1: Product: syz [ 454.603054][ T5700] usb 4-1: Manufacturer: syz [ 454.608361][ T5700] usb 4-1: SerialNumber: syz [ 454.620852][ T29] audit: type=1326 audit(1786265684.528:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.625466][ T5700] usb 4-1: config 0 descriptor?? [ 454.674434][ T29] audit: type=1326 audit(1786265684.528:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.733944][ T29] audit: type=1326 audit(1786265684.528:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.813043][ T29] audit: type=1326 audit(1786265684.528:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 454.861217][T11419] program syz.1.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.876746][ T29] audit: type=1326 audit(1786265684.528:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x7ffc0000 [ 455.025775][ T5700] usb read operation failed. (-71) [ 455.135512][ T5700] usb write operation failed. (-71) [ 455.255164][ T5700] usb write operation failed. (-71) [ 455.363395][ T5700] usb write operation failed. (-71) [ 455.368693][ T5700] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 455.378817][ T5700] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 455.388542][ T5700] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 455.541491][T11450] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 455.611096][T11450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.642983][T11450] bond5: (slave gretap1): making interface the new active one [ 455.652009][T11450] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 455.813645][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 455.908822][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 455.984149][T11465] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 456.085690][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 456.108548][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 456.155942][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.168575][ T9] usb 5-1: Product: syz [ 456.175963][ T9] usb 5-1: Manufacturer: syz [ 456.192510][ T9] usb 5-1: SerialNumber: syz [ 456.221279][ T9] usb 5-1: config 0 descriptor?? [ 456.454139][ T9] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 456.845856][T11485] [ 456.848240][T11485] ====================================================== [ 456.855378][T11485] WARNING: possible circular locking dependency detected [ 456.862432][T11485] syzkaller #0 Tainted: G L [ 456.868418][T11485] ------------------------------------------------------ [ 456.875437][T11485] syz.0.1845/11485 is trying to acquire lock: [ 456.881503][T11485] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 456.891822][T11485] [ 456.891822][T11485] but task is already holding lock: [ 456.899193][T11485] ffff8880262d09b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a65/0x1fc0 [ 456.909169][T11485] [ 456.909169][T11485] which lock already depends on the new lock. [ 456.909169][T11485] [ 456.919587][T11485] [ 456.919587][T11485] the existing dependency chain (in reverse order) is: [ 456.928602][T11485] [ 456.928602][T11485] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 456.937227][T11485] blk_alloc_queue+0x544/0x690 [ 456.942685][T11485] __blk_mq_alloc_disk+0x194/0x390 [ 456.948594][T11485] loop_add+0x480/0xb40 [ 456.953276][T11485] loop_init+0xd7/0x160 [ 456.958010][T11485] do_one_initcall+0x250/0x870 [ 456.963307][T11485] do_initcall_level+0x10a/0x1a0 [ 456.968825][T11485] do_initcalls+0x59/0xa0 [ 456.973691][T11485] kernel_init_freeable+0x29d/0x3e0 [ 456.979414][T11485] kernel_init+0x1d/0x1d0 [ 456.984290][T11485] ret_from_fork+0x514/0xb70 [ 456.989416][T11485] ret_from_fork_asm+0x1a/0x30 [ 456.994885][T11485] [ 456.994885][T11485] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 457.002185][T11485] fs_reclaim_acquire+0x71/0x100 [ 457.007652][T11485] kmem_cache_alloc_noprof+0x64/0x5f0 [ 457.013543][T11485] __kernfs_iattrs+0xdd/0x380 [ 457.018759][T11485] kernfs_iop_setattr+0xe6/0x3f0 [ 457.024223][T11485] notify_change+0xbba/0xea0 [ 457.029346][T11485] do_truncate+0x1c2/0x250 [ 457.034291][T11485] path_openat+0x2fed/0x3830 [ 457.039419][T11485] do_file_open+0x23e/0x4a0 [ 457.044451][T11485] do_sys_openat2+0x115/0x200 [ 457.049736][T11485] __x64_sys_openat+0x138/0x170 [ 457.055121][T11485] do_syscall_64+0x174/0x580 [ 457.060237][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.066653][T11485] [ 457.066653][T11485] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 457.075354][T11485] __lock_acquire+0x1520/0x2cf0 [ 457.080761][T11485] lock_acquire+0x106/0x350 [ 457.085803][T11485] down_read+0x4a/0x330 [ 457.090511][T11485] kernfs_iop_getattr+0x9e/0x450 [ 457.095976][T11485] vfs_getattr_nosec+0x2e1/0x430 [ 457.101526][T11485] loop_assign_backing_file+0x27a/0x4b0 [ 457.107608][T11485] lo_ioctl+0x1ad6/0x1fc0 [ 457.112461][T11485] blkdev_ioctl+0x5e3/0x740 [ 457.117569][T11485] __se_sys_ioctl+0xfc/0x170 [ 457.122677][T11485] do_syscall_64+0x174/0x580 [ 457.127791][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.134233][T11485] [ 457.134233][T11485] other info that might help us debug this: [ 457.134233][T11485] [ 457.144475][T11485] Chain exists of: [ 457.144475][T11485] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 457.144475][T11485] [ 457.159011][T11485] Possible unsafe locking scenario: [ 457.159011][T11485] [ 457.166462][T11485] CPU0 CPU1 [ 457.171835][T11485] ---- ---- [ 457.177217][T11485] lock(&q->q_usage_counter(io)#22); [ 457.182598][T11485] lock(fs_reclaim); [ 457.189189][T11485] lock(&q->q_usage_counter(io)#22); [ 457.197264][T11485] rlock(&root->kernfs_iattr_rwsem); [ 457.202644][T11485] [ 457.202644][T11485] *** DEADLOCK *** [ 457.202644][T11485] [ 457.210785][T11485] 3 locks held by syz.0.1845/11485: [ 457.215993][T11485] #0: ffff8880263e2430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fc0 [ 457.225067][T11485] #1: ffff8880262d09b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a65/0x1fc0 [ 457.235432][T11485] #2: ffff8880262d09e8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: lo_ioctl+0x1a65/0x1fc0 [ 457.246062][T11485] [ 457.246062][T11485] stack backtrace: [ 457.252068][T11485] CPU: 1 UID: 0 PID: 11485 Comm: syz.0.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.252092][T11485] Tainted: [L]=SOFTLOCKUP [ 457.252098][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.252109][T11485] Call Trace: [ 457.252116][T11485] [ 457.252123][T11485] dump_stack_lvl+0xe8/0x150 [ 457.252146][T11485] print_circular_bug+0x2e1/0x300 [ 457.252171][T11485] check_noncircular+0x12e/0x150 [ 457.252195][T11485] __lock_acquire+0x1520/0x2cf0 [ 457.252222][T11485] ? kernfs_iop_getattr+0x9e/0x450 [ 457.252243][T11485] lock_acquire+0x106/0x350 [ 457.252261][T11485] ? kernfs_iop_getattr+0x9e/0x450 [ 457.252284][T11485] down_read+0x4a/0x330 [ 457.252305][T11485] ? kernfs_iop_getattr+0x9e/0x450 [ 457.252330][T11485] kernfs_iop_getattr+0x9e/0x450 [ 457.252350][T11485] vfs_getattr_nosec+0x2e1/0x430 [ 457.252368][T11485] loop_assign_backing_file+0x27a/0x4b0 [ 457.252389][T11485] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 457.252417][T11485] lo_ioctl+0x1ad6/0x1fc0 [ 457.252435][T11485] ? is_bpf_text_address+0x26/0x2b0 [ 457.252459][T11485] ? __pfx_lo_ioctl+0x10/0x10 [ 457.252477][T11485] ? kernel_text_address+0xa5/0xe0 [ 457.252499][T11485] ? __kernel_text_address+0xd/0x30 [ 457.252519][T11485] ? unwind_get_return_address+0x4d/0x90 [ 457.252535][T11485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.252552][T11485] ? arch_stack_walk+0xfb/0x150 [ 457.252569][T11485] ? __lock_acquire+0x683/0x2cf0 [ 457.252590][T11485] ? __lock_acquire+0x683/0x2cf0 [ 457.252612][T11485] ? __lock_acquire+0x683/0x2cf0 [ 457.252631][T11485] ? __lock_acquire+0x683/0x2cf0 [ 457.252654][T11485] ? unwind_next_frame+0x8f/0x2550 [ 457.252669][T11485] ? is_bpf_text_address+0x26/0x2b0 [ 457.252691][T11485] ? is_bpf_text_address+0x26/0x2b0 [ 457.252711][T11485] ? is_bpf_text_address+0x292/0x2b0 [ 457.252729][T11485] ? is_bpf_text_address+0x26/0x2b0 [ 457.252748][T11485] ? kernel_text_address+0xa5/0xe0 [ 457.252768][T11485] ? __kernel_text_address+0xd/0x30 [ 457.252791][T11485] ? unwind_get_return_address+0x4d/0x90 [ 457.252806][T11485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.252824][T11485] ? arch_stack_walk+0xfb/0x150 [ 457.252840][T11485] ? stack_trace_save+0xa9/0x100 [ 457.252856][T11485] ? __pfx_stack_trace_save+0x10/0x10 [ 457.252871][T11485] ? kasan_save_track+0x4f/0x80 [ 457.252890][T11485] ? stack_depot_save_flags+0x33/0x800 [ 457.252909][T11485] ? __lock_acquire+0x683/0x2cf0 [ 457.252930][T11485] ? kasan_save_track+0x4f/0x80 [ 457.252947][T11485] ? kasan_save_track+0x3e/0x80 [ 457.252964][T11485] ? kasan_save_free_info+0x40/0x50 [ 457.252979][T11485] ? __kasan_slab_free+0x5c/0x80 [ 457.252997][T11485] ? kfree+0x1c5/0x640 [ 457.253012][T11485] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 457.253082][T11485] ? security_file_ioctl+0xc3/0x2a0 [ 457.253118][T11485] ? __se_sys_ioctl+0x47/0x170 [ 457.253131][T11485] ? do_syscall_64+0x174/0x580 [ 457.253149][T11485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.253165][T11485] ? __asan_memset+0x22/0x50 [ 457.253180][T11485] ? blk_get_meta_cap+0x19d/0x780 [ 457.253222][T11485] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 457.253243][T11485] ? blkdev_common_ioctl+0x14b7/0x3250 [ 457.253266][T11485] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 457.253287][T11485] ? kasan_quarantine_put+0xbb/0x1f0 [ 457.253307][T11485] ? tomoyo_path_number_perm+0x219/0x5f0 [ 457.253333][T11485] ? tomoyo_path_number_perm+0x219/0x5f0 [ 457.253353][T11485] ? do_vfs_ioctl+0x116f/0x1530 [ 457.253367][T11485] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 457.253384][T11485] ? hook_file_ioctl+0x1f0/0x5f0 [ 457.253430][T11485] ? __pfx_lo_ioctl+0x10/0x10 [ 457.253448][T11485] blkdev_ioctl+0x5e3/0x740 [ 457.253469][T11485] ? __pfx_blkdev_ioctl+0x10/0x10 [ 457.253488][T11485] ? __fget_files+0x2a/0x420 [ 457.253507][T11485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 457.253524][T11485] ? __pfx_blkdev_ioctl+0x10/0x10 [ 457.253544][T11485] __se_sys_ioctl+0xfc/0x170 [ 457.253557][T11485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.253572][T11485] do_syscall_64+0x174/0x580 [ 457.253590][T11485] ? trace_irq_disable+0x3b/0x140 [ 457.253607][T11485] ? clear_bhb_loop+0x70/0xc0 [ 457.253623][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.253638][T11485] RIP: 0033:0x7f1e1239e0d9 [ 457.253654][T11485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.253667][T11485] RSP: 002b:00007f1e13314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.253685][T11485] RAX: ffffffffffffffda RBX: 00007f1e12625fa0 RCX: 00007f1e1239e0d9 [ 457.253697][T11485] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 457.253706][T11485] RBP: 00007f1e12435024 R08: 0000000000000000 R09: 0000000000000000 [ 457.253716][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.253725][T11485] R13: 00007f1e12626038 R14: 00007f1e12625fa0 R15: 00007f1e1274fa48 [ 457.253741][T11485] [ 459.029790][ T9] usb write operation failed. (-71) [ 459.037427][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 459.049347][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 459.056098][ T9] usb 5-1: media controller created [ 459.061748][ T9] usb read operation failed. (-71) [ 459.067349][ T9] usb write operation failed. (-71) [ 459.074757][ T9] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 459.085786][ T9] usb 5-1: USB disconnect, device number 89