last executing test programs: 9m9.081427886s ago: executing program 1 (id=13030): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) 9m9.016655651s ago: executing program 1 (id=13031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0x100, 0xfffffffa, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0xb}, {0x9, 0x5}, {0x6, 0x10}}}, 0x24}}, 0x8008880) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9m7.524555546s ago: executing program 1 (id=13053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000004240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) 9m7.407018136s ago: executing program 1 (id=13057): creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, 0x201880, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) 9m7.297091705s ago: executing program 1 (id=13060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) 9m6.933456618s ago: executing program 1 (id=13066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b25, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x92c9e49492020fca, 0x0, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m6.557109641s ago: executing program 32 (id=13066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b25, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x92c9e49492020fca, 0x0, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.981502716s ago: executing program 0 (id=20528): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.670521687s ago: executing program 0 (id=20535): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x6, 0x0) 2.559558479s ago: executing program 0 (id=20538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.330743255s ago: executing program 0 (id=20544): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020dd25d2f337d2542d0001090224000100000000090400000103000000092100000001220800090581034bd5dbba4e2d323a43ee5c2172"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x1, 0x200, 0x4}) 2.292206814s ago: executing program 3 (id=20545): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 2.209021493s ago: executing program 3 (id=20547): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x3, {0x1, 0xfffffffe, 0x0, {0x10000, 0x400, 0x8000001000000, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8001, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.640039243s ago: executing program 5 (id=20561): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}, 0x6ec0}], 0x1, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 1.50505952s ago: executing program 2 (id=20563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a410100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.444478394s ago: executing program 5 (id=20564): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.429282586s ago: executing program 2 (id=20565): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x5) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x100) write$dsp(r0, &(0x7f00000001c0)="1eba948070ccbecd06be269197eb00d28d202c33f9db79f847af0027d0b915600700874e4d9f42cde96e83c9ff", 0x2d) 1.341058025s ago: executing program 5 (id=20566): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x461f, @private=0xa010100}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x3, 'sed\x00', 0x1a, 0x3, 0x57}, 0x2c) 1.281171274s ago: executing program 3 (id=20567): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0xf4ef, 0xffc0, 0x9, 0xffff, 0x80000001}, 0x14) 1.187769091s ago: executing program 2 (id=20569): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x7e422000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.131696379s ago: executing program 5 (id=20570): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.062584033s ago: executing program 5 (id=20571): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) close(0x3) 1.05135816s ago: executing program 2 (id=20572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) 930.035855ms ago: executing program 5 (id=20573): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 630.077287ms ago: executing program 4 (id=20574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 628.815578ms ago: executing program 4 (id=20575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 551.555854ms ago: executing program 4 (id=20576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '[}]', 0x14, 0x6, 0x0, @mcast2, @mcast1, {[], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xe2, 0x3ff, 0x0, 0x7f}}}}}}, 0x4a) 531.093164ms ago: executing program 0 (id=20577): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 466.112725ms ago: executing program 4 (id=20578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 419.04064ms ago: executing program 0 (id=20579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, &(0x7f0000000600)={0x40, 0x23, 0x9, {0x9, 0x7, "7ce839fc7a5aff"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0xf0, {0xf0, 0xd, "9218b54a3d2784b535796a0dc1c253933a90cbbb819276f9d61665d51993ee80d78015c53d03c8899978e7df0d5f81449d949004debf8c7fa20b4c7446cbfa260d1bf0d46f327e9efb7309365a7e88ce7ef05132bea977a3988e5540ae8dff448b2df70360ce4bd8ca98dd7b8433c16cfdb85451aa3e224311ea2290938aaecbd738012d56ec3b6c870a27f791e520e5b788fd208f1c9e3fc66ebd4840c513667e35f22890cbb2e6354f6d4c9d0cc61e77d19d24718efe0369cc06de73586ccfd4ce3939fc7c6a318619f4403935587103ce28d6724fe32c81967fa54cec5935a0af16e638f3043670988d110ee8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 416.947882ms ago: executing program 4 (id=20580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 335.376331ms ago: executing program 3 (id=20581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 312.410015ms ago: executing program 4 (id=20582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 269.563728ms ago: executing program 3 (id=20583): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r0, 0x0}]) 97.431759ms ago: executing program 2 (id=20584): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc8040, 0x2c) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents(r0, &(0x7f00000002c0)=""/242, 0xf2) 96.579455ms ago: executing program 3 (id=20585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) 0s ago: executing program 2 (id=20586): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): device bond2 [ 1214.677810][T16088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1214.692589][T16088] xfrm1: left allmulticast mode [ 1214.711774][T16088] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1214.741492][T16088] batadv2: left allmulticast mode [ 1214.748678][T16088] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1214.756575][T16088] : left allmulticast mode [ 1214.761970][T16088] team0: left allmulticast mode [ 1214.770707][T16088] ip6gretap0: entered promiscuous mode [ 1214.778028][T16088] erspan0: entered promiscuous mode [ 1214.790129][T16088] gretap0: entered promiscuous mode [ 1214.803013][T16088] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1214.816189][T16088] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1214.828419][T16088] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1214.839560][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.848006][T16088] bond0: entered allmulticast mode [ 1214.853254][T16088] bridge0: entered allmulticast mode [ 1214.858748][T16088] geneve1: entered allmulticast mode [ 1214.865231][T16088] geneve1: entered promiscuous mode [ 1214.872137][T16088] macvlan3: left allmulticast mode [ 1214.877341][T16088] bond0: left allmulticast mode [ 1214.882585][T16088] bridge0: left allmulticast mode [ 1214.888100][T16088] bridge0: entered promiscuous mode [ 1214.893469][T16088] geneve1: left allmulticast mode [ 1214.902670][T16088] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1214.923247][T16088] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1214.939713][ T808] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1214.967624][ T47] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1214.974895][ T47] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 1215.051486][T16092] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.060579][T16092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.071597][T16092] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.080748][T16092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.096514][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.122578][T16092] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.143186][T16092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.153358][T16092] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.162858][T16092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.243497][ T3392] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1215.268361][T14354] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1215.442555][T14354] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.476160][T14354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.504913][T14354] usb 5-1: Product: syz [ 1215.514340][T14354] usb 5-1: Manufacturer: syz [ 1215.533789][T14354] usb 5-1: SerialNumber: syz [ 1215.585306][ T30] audit: type=1326 audit(1780812967.179:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.626552][ T879] gspca_sonixj: reg_w err -71 [ 1215.635154][ T879] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1215.651873][ T30] audit: type=1326 audit(1780812967.209:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.690552][ T879] usb 4-1: USB disconnect, device number 29 [ 1215.732342][ T30] audit: type=1326 audit(1780812967.209:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.759163][ T808] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1215.766939][ T30] audit: type=1326 audit(1780812967.209:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.857194][ T30] audit: type=1326 audit(1780812967.209:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.895542][ T30] audit: type=1326 audit(1780812967.209:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.923964][ T30] audit: type=1326 audit(1780812967.209:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1215.958108][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 1215.965741][ T808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1215.977240][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1215.987502][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1215.997707][ T808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.011756][ T808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1216.022828][ T30] audit: type=1326 audit(1780812967.209:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1216.024028][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.076883][ T30] audit: type=1326 audit(1780812967.209:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1216.157171][ T30] audit: type=1326 audit(1780812967.209:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.5.19552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1216.275573][ T808] usb 3-1: GET_CAPABILITIES returned 0 [ 1216.291974][ T808] usbtmc 3-1:16.0: can't read capabilities [ 1216.486712][T14371] usb 3-1: USB disconnect, device number 42 [ 1216.521022][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19561'. [ 1216.554046][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19561'. [ 1216.626070][T14354] cdc_ncm 5-1:1.0: bind() failure [ 1216.646065][T14354] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1216.666344][T14354] cdc_ncm 5-1:1.1: bind() failure [ 1216.703569][T14354] usb 5-1: USB disconnect, device number 45 [ 1216.969194][T16162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19568'. [ 1217.002694][T16162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19568'. [ 1217.697163][T16195] ksmbd: Unknown IPC event: 4, ignore. [ 1217.710181][T16196] tap0: tun_chr_ioctl cmd 1074025675 [ 1217.729639][T16196] tap0: persist disabled [ 1218.617957][T13910] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1218.801041][T13910] usb 3-1: Using ep0 maxpacket: 32 [ 1218.816236][T13910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.835760][T13910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.849015][T13910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1218.859191][T13910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.874111][T13910] usb 3-1: config 0 descriptor?? [ 1219.168557][ T808] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1219.329945][ T808] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1219.342995][ T808] usb 1-1: config 0 has no interface number 0 [ 1219.353899][T13910] savu 0003:1E7D:2D5A.00BB: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1219.358593][ T808] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1219.387127][ T808] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1219.417991][ T808] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1219.447594][ T808] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1219.471111][ T808] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1219.488016][ T808] usb 1-1: Product: syz [ 1219.497380][ T808] usb 1-1: SerialNumber: syz [ 1219.506390][ T808] usb 1-1: config 0 descriptor?? [ 1219.533568][ T808] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1219.546704][ T808] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input197 [ 1219.576457][ T808] usb 3-1: USB disconnect, device number 43 [ 1219.638413][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.772898][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1219.879844][ T36] net_ratelimit: 3 callbacks suppressed [ 1219.879863][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.903499][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.912448][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.095556][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1220.096824][T14371] usb 1-1: USB disconnect, device number 34 [ 1220.102590][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1220.201747][T14371] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1220.518089][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1220.677993][T13910] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1220.840306][T13910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1220.864453][T13910] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1220.878348][T13910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.891714][T13910] usb 5-1: config 0 descriptor?? [ 1220.904624][T16287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1220.935318][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19631'. [ 1221.048977][T16316] input: syz1 as /devices/virtual/input/input198 [ 1221.079429][T16317] macsec1: entered promiscuous mode [ 1221.087464][T16317] geneve1: entered promiscuous mode [ 1221.094399][T16317] macsec1: entered allmulticast mode [ 1221.109911][T16317] geneve1: entered allmulticast mode [ 1221.133040][T16317] geneve1: left allmulticast mode [ 1221.159619][T16317] geneve1: left promiscuous mode [ 1221.192737][T16321] sctp: [Deprecated]: syz.0.19635 (pid 16321) Use of int in max_burst socket option deprecated. [ 1221.192737][T16321] Use struct sctp_assoc_value instead [ 1221.433345][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.451718][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.473677][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.482589][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.490156][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19640'. [ 1221.500964][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.515510][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.529610][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.548768][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.575092][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.606967][T13910] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1221.634322][T13910] asus 0003:0B05:1ABE.00BC: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 1221.679131][T13910] usb 5-1: USB disconnect, device number 46 [ 1221.799034][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1221.807667][T16339] fido_id[16339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1221.831340][T16345] input: syz0 as /devices/virtual/input/input199 [ 1222.230554][ T808] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1222.388070][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1222.407731][ T808] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1222.426428][ T808] usb 4-1: config 1 has no interface number 0 [ 1222.444173][ T808] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1222.463844][ T808] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1222.485144][ T808] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1222.501760][ T808] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1222.520929][ T808] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1222.552397][ T808] usb 4-1: Product: syz [ 1222.570414][ T808] usb 4-1: Manufacturer: syz [ 1222.581445][ T808] usb 4-1: SerialNumber: syz [ 1222.609363][T16351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1222.626932][T16351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1222.812907][T16375] input: syz1 as /devices/virtual/input/input200 [ 1223.057272][T16351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.086653][T16351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.129249][T16384] kvm: user requested TSC rate below hardware speed [ 1223.307465][T16388] loop5: detected capacity change from 0 to 7 [ 1223.324085][T16388] Dev loop5: unable to read RDB block 7 [ 1223.333798][T16388] loop5: AHDI p1 p2 p3 [ 1223.338956][T16388] loop5: partition table partially beyond EOD, truncated [ 1223.346397][T16388] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1223.354467][T16388] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1223.385130][ T4999] Dev loop5: unable to read RDB block 7 [ 1223.399543][ T4999] loop5: AHDI p1 p2 p3 [ 1223.408811][ T4999] loop5: partition table partially beyond EOD, truncated [ 1223.416222][ T4999] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1223.423997][ T4999] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1223.710343][ T808] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1223.756007][ T808] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1223.803513][ T808] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 1223.833955][ T808] usb 4-1: USB disconnect, device number 30 [ 1223.855281][ T808] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1223.961325][ T808] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1223.989890][ T808] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1224.017808][ T808] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1224.485766][T16418] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.19676'. [ 1224.498602][T16420] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.19675'. [ 1224.513621][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1224.513637][ T30] audit: type=1326 audit(1780812976.109:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16419 comm="syz.2.19677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe63bb9ce59 code=0x0 [ 1225.020975][ T30] audit: type=1326 audit(1780812976.619:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.3.19683" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fc400d3e1d9 code=0x0 [ 1225.428226][T13910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1225.594912][T13910] usb 1-1: config 0 has no interfaces? [ 1225.605296][T13910] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1225.615458][T13910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.626895][T13910] usb 1-1: Product: syz [ 1225.634953][T13910] usb 1-1: Manufacturer: syz [ 1225.639916][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.651156][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.654748][T13910] usb 1-1: SerialNumber: syz [ 1225.666882][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.677283][T13910] usb 1-1: config 0 descriptor?? [ 1225.858766][T16474] loop4: detected capacity change from 0 to 7 [ 1225.866874][T16474] Dev loop4: unable to read RDB block 7 [ 1225.873489][T16474] loop4: unable to read partition table [ 1225.882364][T16474] loop4: partition table beyond EOD, truncated [ 1225.898521][T16474] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1225.982807][T13910] usb 1-1: USB disconnect, device number 35 [ 1225.998508][ T808] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1226.168644][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 1226.179299][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.198418][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.218600][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.248057][ T808] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.261311][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.290680][ T808] usb 6-1: config 0 descriptor?? [ 1226.390539][T16494] xt_hashlimit: size too large, truncated to 1048576 [ 1226.744336][ T808] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00BD/input/input201 [ 1226.862007][ T808] microsoft 0003:045E:07DA.00BD: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1226.935245][ T808] usb 6-1: USB disconnect, device number 83 [ 1227.045541][T16514] fido_id[16514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1227.489926][T16539] loop5: detected capacity change from 0 to 6 [ 1227.527818][T16539] Dev loop5: unable to read RDB block 6 [ 1227.544759][T16539] loop5: unable to read partition table [ 1227.555012][T16539] loop5: partition table beyond EOD, truncated [ 1227.562814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.575120][T13910] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1227.598418][T16539] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1227.652545][T16546] batadv_slave_1: entered promiscuous mode [ 1227.669510][T16544] batadv_slave_1: left promiscuous mode [ 1227.754357][T13910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1227.785051][T13910] usb 3-1: not running at top speed; connect to a high speed hub [ 1227.799869][T13910] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1227.809012][T13910] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1227.809733][T16551] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.19730'. [ 1227.817433][T13910] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.851933][T13910] usb 3-1: config 14 has no interface number 0 [ 1227.865198][T13910] usb 3-1: config 14 has no interface number 1 [ 1227.875268][T13910] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1227.920300][T13910] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1227.936821][T13910] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1227.954476][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19732'. [ 1227.956059][T13910] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.981172][T13910] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1227.991141][T13910] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1228.000579][T13910] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1228.010613][T13910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.019686][T13910] usb 3-1: Product: syz [ 1228.023989][T13910] usb 3-1: Manufacturer: syz [ 1228.030324][T13910] usb 3-1: SerialNumber: syz [ 1228.201862][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1228.368216][T14372] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1228.464353][T13910] legousbtower 3-1:14.57: interrupt endpoints not found [ 1228.551122][T14372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1228.569497][T14372] usb 4-1: config 0 has no interface number 0 [ 1228.591197][T14372] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1228.604349][T14372] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1228.618589][T14372] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1228.631327][T14372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1228.642168][T14372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1228.652452][T14372] usb 4-1: Product: syz [ 1228.667917][T14372] usb 4-1: SerialNumber: syz [ 1228.700782][T14372] usb 4-1: config 0 descriptor?? [ 1228.711846][T14372] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1228.722365][T14372] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input202 [ 1228.812235][T16586] netlink: 'syz.4.19744': attribute type 1 has an invalid length. [ 1228.881447][T13910] legousbtower 3-1:14.228: get version request failed: -121 [ 1228.903069][T13910] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121 [ 1228.914362][T16586] bond2: entered promiscuous mode [ 1228.941985][T16586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1228.965121][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1229.004706][T16590] bond2: (slave veth3): making interface the new active one [ 1229.013865][T16590] veth3: entered promiscuous mode [ 1229.020153][T16590] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1229.109395][T14372] usb 3-1: USB disconnect, device number 44 [ 1229.240810][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1229.248101][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1229.255280][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1229.262556][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1229.263096][T13910] usb 4-1: USB disconnect, device number 31 [ 1229.269542][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1229.354796][T13910] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1229.486648][ T30] audit: type=1800 audit(1780812981.079:1889): pid=16605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19752" name="file1" dev="tmpfs" ino=1923 res=0 errno=0 [ 1229.724824][ T30] audit: type=1326 audit(1780812981.319:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.5.19756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70af39ce59 code=0x0 [ 1229.764272][T16618] netlink: 'syz.0.19758': attribute type 11 has an invalid length. [ 1229.828282][ T5737] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1229.893331][T16626] xt_hashlimit: size too large, truncated to 1048576 [ 1229.988177][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 1229.997289][ T5737] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1230.007519][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.017301][ T5737] usb 5-1: Product: syz [ 1230.022729][ T5737] usb 5-1: Manufacturer: syz [ 1230.027535][ T5737] usb 5-1: SerialNumber: syz [ 1230.036891][ T5737] usb 5-1: config 0 descriptor?? [ 1230.047071][ T5737] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1230.078025][T14371] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1230.120691][T13910] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1230.239747][T14371] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1230.253851][T14371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.267579][T14371] usb 1-1: config 0 descriptor?? [ 1230.278071][T13910] usb 4-1: Using ep0 maxpacket: 32 [ 1230.283466][T14371] pwc: Samsung MPC-C10 USB webcam detected. [ 1230.291422][T13910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1230.304823][T13910] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1230.314590][T13910] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1230.323077][T13910] usb 4-1: Product: syz [ 1230.327439][T13910] usb 4-1: Manufacturer: syz [ 1230.332409][T13910] usb 4-1: SerialNumber: syz [ 1230.340236][T13910] usb 4-1: config 0 descriptor?? [ 1230.346527][T16627] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1230.356386][T13910] hub 4-1:0.0: bad descriptor, ignoring hub [ 1230.362558][T13910] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1230.498387][ T808] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1230.648104][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 1230.655055][ T808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1230.662875][ T808] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1230.676341][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1230.689982][T14371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.690134][ T808] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.700147][T14371] pwc: recv_control_msg error -32 req 02 val 2700 [ 1230.710678][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.726430][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.739466][ T808] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1230.753141][ T808] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1230.762138][ T808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1230.769943][ T808] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1230.781288][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1230.793089][ T808] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.805244][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.816655][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.828343][ T808] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1230.844519][ T808] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1230.863183][ T808] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1230.870788][ T808] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1230.883067][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1230.895475][ T808] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.909172][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.920789][ T808] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.933832][ T808] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1230.948538][T14371] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1230.955768][T14371] pwc: recv_control_msg error -71 req 04 val 1000 [ 1230.964869][T14371] pwc: recv_control_msg error -71 req 04 val 1300 [ 1230.972407][ T808] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1230.972424][T14371] pwc: recv_control_msg error -71 req 04 val 1400 [ 1230.987377][ T808] usb 3-1: string descriptor 0 read error: -22 [ 1230.994347][ T808] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1231.003922][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.009046][T14371] pwc: recv_control_msg error -71 req 02 val 2000 [ 1231.020039][T14371] pwc: recv_control_msg error -71 req 02 val 2100 [ 1231.026922][T14371] pwc: recv_control_msg error -71 req 02 val 2200 [ 1231.034675][T14371] pwc: recv_control_msg error -71 req 06 val 0600 [ 1231.050136][T14371] pwc: recv_control_msg error -71 req 04 val 1500 [ 1231.053426][ T808] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1231.059000][T14371] pwc: recv_control_msg error -71 req 02 val 2500 [ 1231.072064][T14371] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.081502][T14371] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.091003][T14371] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.091276][ T5737] gspca_ov534_9: reg_w failed -71 [ 1231.099749][T14371] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.109583][T16627] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 1231.132434][T14371] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.140693][T14371] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.149764][T14371] pwc: Registered as video103. [ 1231.165441][T14371] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input203 [ 1231.204342][T14371] usb 1-1: USB disconnect, device number 36 [ 1231.223598][ T6672] udevd[6672]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1231.283522][T16627] usb 4-1: device firmware changed [ 1231.297706][T14354] usb 4-1: USB disconnect, device number 32 [ 1231.321789][ T808] usb 3-1: USB disconnect, device number 45 [ 1231.398805][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.407607][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.415932][ T5737] gspca_ov534_9: Unknown sensor 0000 [ 1231.416012][ T5737] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1231.416992][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.443621][ T5737] usb 5-1: USB disconnect, device number 47 [ 1231.479092][T14354] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1231.530916][T16644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.19768'. [ 1231.599864][T16648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.611004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.641298][T14354] usb 4-1: Using ep0 maxpacket: 32 [ 1231.659696][T14354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1231.680830][T14354] usb 4-1: string descriptor 0 read error: -22 [ 1231.696427][T14354] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1231.726719][T14354] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1231.740021][T14354] usb 4-1: config 0 descriptor?? [ 1231.754576][T16641] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1231.773757][T14354] hub 4-1:0.0: bad descriptor, ignoring hub [ 1231.785767][T14354] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1232.089199][T14354] usb 4-1: USB disconnect, device number 33 [ 1232.187998][T14372] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1232.204385][T16669] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 1232.362218][T14372] usb 6-1: Using ep0 maxpacket: 16 [ 1232.370591][T14372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.381969][T14372] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1232.391334][T14372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.404524][T14372] usb 6-1: config 0 descriptor?? [ 1232.706697][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19786'. [ 1232.825466][T14372] mcp2221 0003:04D8:00DD.00BE: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1233.034330][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19792'. [ 1233.255160][T14372] usb 6-1: USB disconnect, device number 84 [ 1233.360958][ T30] audit: type=1800 audit(1780812984.959:1891): pid=16710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19797" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1233.727958][T14354] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1233.889474][T14354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1233.916451][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1233.950889][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1233.986625][T14354] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1234.029198][T14354] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1234.050475][T14354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.061699][T14354] usb 4-1: config 0 descriptor?? [ 1234.067594][T16714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1234.108134][ T5737] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1234.168905][T16733] netlink: 'syz.4.19808': attribute type 11 has an invalid length. [ 1234.268443][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 1234.280009][ T5737] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1234.299639][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.337811][ T5737] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1234.496241][T14354] hid_parser_main: 468 callbacks suppressed [ 1234.496261][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.528098][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.547124][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.557579][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.566571][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.575427][T14354] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x0 [ 1234.583919][T16750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.601723][T14354] plantronics 0003:047F:FFFF.00BF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1234.763422][T16755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.772521][T14354] usb 4-1: USB disconnect, device number 34 [ 1235.051294][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19822'. [ 1235.152383][ T30] audit: type=1326 audit(1780812986.749:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.0.19824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc7619ce59 code=0x0 [ 1235.316151][ T30] audit: type=1326 audit(1780812986.909:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.5.19827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x0 [ 1235.352624][ T5737] gspca_nw80x: reg_w err -71 [ 1235.365183][ T5737] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 1235.394826][ T5737] usb 3-1: USB disconnect, device number 46 [ 1235.595645][T16787] loop5: detected capacity change from 0 to 7 [ 1235.603011][T16787] Dev loop5: unable to read RDB block 7 [ 1235.610227][T16787] loop5: AHDI p1 p2 [ 1235.614455][T16787] loop5: partition table partially beyond EOD, truncated [ 1235.622124][T16787] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1235.700198][T14372] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1235.859767][T14372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.877927][T14372] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 1235.894780][T14372] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1235.907361][T14372] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1235.916762][T14372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.924894][T14372] usb 5-1: Product: syz [ 1235.931026][T14372] usb 5-1: Manufacturer: syz [ 1235.932608][ T5737] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1235.935664][T14372] usb 5-1: SerialNumber: syz [ 1236.112213][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1236.129712][ T5737] usb 4-1: not running at top speed; connect to a high speed hub [ 1236.152881][ T5737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.170990][ T5737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1236.192983][ T5737] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1236.206458][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.214867][ T5737] usb 4-1: Product: syz [ 1236.219131][ T5737] usb 4-1: Manufacturer: syz [ 1236.223746][ T5737] usb 4-1: SerialNumber: syz [ 1236.465360][ T5737] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 1236.473340][ T5737] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 1236.483954][ T5737] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1236.494192][ T5737] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1236.503638][ T5737] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1236.513878][ T5737] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1236.525450][ T5737] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1236.536096][ T5737] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1236.545944][ T5737] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1236.554835][ T5737] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1236.564034][ T5737] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 1236.620457][ T5737] usb 4-1: USB disconnect, device number 35 [ 1236.813575][T16819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19844'. [ 1236.998464][T14372] cdc_ncm 5-1:1.0: bind() failure [ 1237.023250][T14372] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1237.040952][T14372] usb 5-1: USB disconnect, device number 48 [ 1237.141044][T16827] netlink: 35 bytes leftover after parsing attributes in process `syz.3.19848'. [ 1237.179180][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19848'. [ 1237.198884][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19849'. [ 1237.233248][T16829] netlink: 'syz.0.19849': attribute type 30 has an invalid length. [ 1237.267576][T16829] netlink: 'syz.0.19849': attribute type 29 has an invalid length. [ 1237.303618][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19849'. [ 1237.364643][T16833] random: crng reseeded on system resumption [ 1237.588073][T14372] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1237.621771][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19856'. [ 1237.750149][T14372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.772964][T16852] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.19860'. [ 1237.782997][T14372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.796688][T14372] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1237.825275][T14372] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1237.835627][T14372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.849242][T14372] usb 6-1: config 0 descriptor?? [ 1237.942007][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19863'. [ 1237.998447][T13910] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1238.160564][T13910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.187715][T13910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1238.216952][T13910] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1238.259872][T13910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.294708][T14372] plantronics 0003:047F:FFFF.00C0: reserved main item tag 0xd [ 1238.333451][T13910] usb 4-1: config 0 descriptor?? [ 1238.356013][T13910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1238.383222][T14372] plantronics 0003:047F:FFFF.00C0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1238.396849][T13910] dvb-usb: bulk message failed: -22 (3/0) [ 1238.412807][T13910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1238.439619][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.448718][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.457837][T13910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1238.465401][T13910] usb 4-1: media controller created [ 1238.483030][T13910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1238.509667][T13910] dvb-usb: bulk message failed: -22 (6/0) [ 1238.535041][T13910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1238.562287][T14372] usb 6-1: USB disconnect, device number 85 [ 1238.572926][T13910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input205 [ 1238.632281][T13910] dvb-usb: schedule remote query interval to 150 msecs. [ 1238.648659][T13910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1238.663354][T16879] fido_id[16879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1238.672112][T13910] usb 4-1: USB disconnect, device number 36 [ 1238.744344][T13910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1238.928038][T14371] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1239.112009][T14371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1239.126099][T16863] geneve0: entered allmulticast mode [ 1239.144259][T14371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.183558][T14371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.225024][T14371] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1239.242366][T14371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.250753][T14371] usb 1-1: Product: syz [ 1239.265764][T14371] usb 1-1: Manufacturer: syz [ 1239.284384][T14371] usb 1-1: SerialNumber: syz [ 1239.330729][T14371] usb 1-1: selecting invalid altsetting 1 [ 1239.352760][T14371] usb 1-1: unit 6 not found! [ 1239.563675][T16896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.987962][ T5737] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1240.042569][T16931] input input206: cannot allocate more than FF_MAX_EFFECTS effects [ 1240.138031][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 1240.144411][T14371] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1240.153719][ T5737] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1240.169976][ T5737] usb 4-1: config 0 has no interface number 0 [ 1240.187958][ T5737] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1240.203003][ T5737] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1240.215241][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.228108][ T5737] usb 4-1: Product: syz [ 1240.235672][ T5737] usb 4-1: Manufacturer: syz [ 1240.243947][ T5737] usb 4-1: SerialNumber: syz [ 1240.250926][T14371] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1240.265184][ T5737] usb 4-1: config 0 descriptor?? [ 1240.272599][T14371] usb 1-1: USB disconnect, device number 37 [ 1240.276805][T16917] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1240.318196][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.497163][T16917] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1240.962959][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19889'. [ 1240.998268][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.115548][ T5737] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1241.334661][ T5737] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1241.375714][ T5737] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1241.388775][ T5737] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1241.417202][ T5737] usb 4-1: USB disconnect, device number 37 [ 1241.711571][T16979] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.19900'. [ 1242.078143][T14371] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1242.260750][T14371] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1242.272747][T14371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1242.288019][T14371] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1242.297282][T14371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.309507][T14371] usb 5-1: Product: syz [ 1242.314491][T14371] usb 5-1: Manufacturer: syz [ 1242.319862][T14371] usb 5-1: SerialNumber: syz [ 1242.327369][T14371] usb 5-1: config 0 descriptor?? [ 1242.778394][ T5737] usb 5-1: USB disconnect, device number 49 [ 1242.853043][T17025] veth0: entered promiscuous mode [ 1242.863945][T17024] veth0: left promiscuous mode [ 1242.989461][T17033] syzkaller1: entered promiscuous mode [ 1242.995104][T17033] syzkaller1: entered allmulticast mode [ 1243.360666][T14372] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1243.438431][T14371] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1243.533154][T14372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.544668][T14372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.570584][T14372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1243.584252][T14372] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1243.600573][T14372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.621689][T14372] usb 3-1: config 0 descriptor?? [ 1243.630073][T14371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.648534][T14371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1243.676871][T14371] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1243.686525][T14371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1243.696184][T14371] usb 1-1: SerialNumber: syz [ 1243.926785][ T30] audit: type=1326 audit(1780812995.519:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1243.947025][T14371] usb 1-1: 0:2 : does not exist [ 1244.008068][ T30] audit: type=1326 audit(1780812995.559:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.055559][T14371] usb 1-1: USB disconnect, device number 38 [ 1244.064256][T14372] plantronics 0003:047F:FFFF.00C1: reserved main item tag 0xd [ 1244.078092][ T30] audit: type=1326 audit(1780812995.559:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.118071][T14372] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1244.139704][ T30] audit: type=1326 audit(1780812995.559:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.181733][ T30] audit: type=1326 audit(1780812995.559:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.199459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.215313][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1244.218455][ T5737] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1244.340746][T14372] usb 3-1: USB disconnect, device number 47 [ 1244.376976][T17068] fido_id[17068]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.00C1/report_descriptor': No such device [ 1244.417992][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 1244.438439][ T5737] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1244.459713][ T5737] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1244.483309][ T5737] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1244.503749][ T5737] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1244.523782][ T5737] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1244.543638][ T5737] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.568056][ T5737] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1244.587334][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.753206][ T30] audit: type=1326 audit(1780812996.349:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.783173][ T30] audit: type=1326 audit(1780812996.379:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.5.19935" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70af39ce59 code=0x7ffc0000 [ 1244.818125][ T5737] usb 5-1: usb_control_msg returned -32 [ 1244.827334][ T5737] usbtmc 5-1:16.0: can't read capabilities [ 1244.854661][ T5737] usb 5-1: USB disconnect, device number 50 [ 1245.000022][T17079] tun0: tun_chr_ioctl cmd 1074025675 [ 1245.005438][T17079] tun0: persist enabled [ 1245.010704][T17079] tun0: tun_chr_ioctl cmd 1074025675 [ 1245.016061][T17079] tun0: persist disabled [ 1245.380671][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19947'. [ 1245.432303][T17095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.478279][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1245.649683][T17108] syzkaller1: entered promiscuous mode [ 1245.678005][T17108] syzkaller1: entered allmulticast mode [ 1245.745804][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19954'. [ 1246.053920][T17090] IPVS: You probably need to specify IP address on multicast interface. [ 1246.114580][T17090] IPVS: Error connecting to the multicast addr [ 1246.443208][T17136] loop5: detected capacity change from 0 to 7 [ 1246.468594][T17136] Dev loop5: unable to read RDB block 7 [ 1246.495775][T17136] loop5: unable to read partition table [ 1246.509519][T17136] loop5: partition table beyond EOD, truncated [ 1246.522800][T17136] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1246.576006][ T4999] Dev loop5: unable to read RDB block 7 [ 1246.583826][ T4999] loop5: unable to read partition table [ 1246.592013][ T4999] loop5: partition table beyond EOD, truncated [ 1247.048231][ T5737] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1247.221018][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 1247.237489][ T5737] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1247.252030][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.286559][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.305212][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1247.333146][ T5737] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1247.360324][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.381492][ T5737] usb 5-1: Product: syz [ 1247.385885][ T5737] usb 5-1: Manufacturer: syz [ 1247.390955][ T5737] usb 5-1: SerialNumber: syz [ 1247.401748][ T5737] usb 5-1: config 0 descriptor?? [ 1247.409656][T17151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1247.633081][ T5737] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1247.659525][ T5737] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input208 [ 1247.823476][T17201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1247.839700][T17201] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1247.859675][T17201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1247.868635][T17201] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1247.934575][ C1] powermate: config urb returned -71 [ 1247.940252][ C1] powermate: config urb returned -71 [ 1247.946248][ C1] powermate: config urb returned -71 [ 1247.951801][ C1] powermate: config urb returned -71 [ 1247.957289][ C1] powermate: config urb returned -71 [ 1247.964117][T14354] usb 5-1: USB disconnect, device number 51 [ 1247.970238][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1248.338300][ T5737] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1248.448006][T14354] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1248.507985][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 1248.522197][ T5737] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1248.548626][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1248.558777][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1248.568923][ T5737] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.582776][ T5737] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1248.592115][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.629799][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1248.650204][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.685134][T14354] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1248.719718][T14354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.760439][T14354] usb 4-1: config 0 descriptor?? [ 1248.821254][ T5737] usb 3-1: GET_CAPABILITIES returned 0 [ 1248.854479][ T5737] usbtmc 3-1:16.0: can't read capabilities [ 1248.961800][T17219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19997'. [ 1248.973894][T17219] netlink: 67 bytes leftover after parsing attributes in process `syz.5.19997'. [ 1249.038421][T14372] usb 3-1: USB disconnect, device number 48 [ 1249.201858][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.223796][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.242676][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.261408][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.280365][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.299348][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.321508][T14354] isku 0003:1E7D:319C.00C2: unknown main item tag 0x0 [ 1249.346529][T14354] isku 0003:1E7D:319C.00C2: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1249.427963][ T5737] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1249.589471][ T5737] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1249.602921][T14371] usb 4-1: USB disconnect, device number 38 [ 1249.604420][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.637426][ T5737] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1249.656086][ T5737] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1249.664779][ T5737] usb 5-1: Manufacturer: syz [ 1249.680011][ T5737] usb 5-1: config 0 descriptor?? [ 1249.758090][ T5737] rc_core: IR keymap rc-hauppauge not found [ 1249.765275][ T5737] Registered IR keymap rc-empty [ 1249.776548][ T5737] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1249.802179][ T5737] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input209 [ 1249.825796][T17246] overlayfs: missing 'lowerdir' [ 1249.877982][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1249.878663][ T5649] Bluetooth: hci2: command 0x0c1a tx timeout [ 1249.884467][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1250.107209][T17258] bridge1: entered promiscuous mode [ 1250.112716][T17258] bridge1: entered allmulticast mode [ 1250.121185][ C1] igorplugusb 5-1:0.0: receive overflow, at least 21 lost [ 1250.131481][T17258] team0: Port device bridge1 added [ 1250.147639][T17258] bridge0: port 1(team0) entered blocking state [ 1250.154365][T17258] bridge0: port 1(team0) entered disabled state [ 1250.161228][T17258] team0: entered allmulticast mode [ 1250.166545][T17258] team_slave_1: entered allmulticast mode [ 1250.182937][T17258] team0: entered promiscuous mode [ 1250.188173][T17258] team_slave_1: entered promiscuous mode [ 1250.532962][ C1] igorplugusb 5-1:0.0: receive overflow, at least 10 lost [ 1250.599678][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.609028][T14371] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1250.613943][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.635548][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.741728][ T5737] usb 5-1: USB disconnect, device number 52 [ 1250.800758][T14371] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1250.817911][T14371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.841199][T14371] usb 4-1: config 0 descriptor?? [ 1250.852548][T14371] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1250.968074][T14372] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1251.140065][T14372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.152666][T14372] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1251.162312][T14372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.171365][T14372] usb 3-1: Product: syz [ 1251.175618][T14372] usb 3-1: Manufacturer: syz [ 1251.181114][T14372] usb 3-1: SerialNumber: syz [ 1251.197631][T14372] usb 3-1: config 0 descriptor?? [ 1251.219202][T14372] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1251.664761][T14371] gspca_stv06xx: I2C: Read error writing address: -71 [ 1251.684862][T14371] usb 4-1: USB disconnect, device number 39 [ 1251.959506][T17250] Bluetooth: hci4: command 0x0406 tx timeout [ 1252.031704][T14372] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input210 [ 1252.236828][T14372] usb 3-1: USB disconnect, device number 49 [ 1252.313387][T17332] syzkaller1: entered promiscuous mode [ 1252.329410][T17332] syzkaller1: entered allmulticast mode [ 1252.920712][T17347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.188802][T14372] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1253.388457][T14372] usb 1-1: Using ep0 maxpacket: 8 [ 1253.410858][T14372] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1253.429097][T14372] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1253.447964][T14372] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1253.467378][T14372] usb 1-1: Product: syz [ 1253.475215][T14372] usb 1-1: Manufacturer: syz [ 1253.478353][T14354] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1253.484808][T14372] usb 1-1: SerialNumber: syz [ 1253.648354][T14354] usb 5-1: Using ep0 maxpacket: 16 [ 1253.660962][T14354] usb 5-1: config 0 has no interfaces? [ 1253.667558][T14354] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1253.678038][T14354] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1253.686086][T14354] usb 5-1: Manufacturer: syz [ 1253.693734][T14354] usb 5-1: config 0 descriptor?? [ 1253.711558][T14372] usb 1-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 1253.727965][T14372] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1253.748202][T14372] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1253.755565][T13910] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1253.848552][ T5737] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1253.912807][T14372] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1253.931609][T14372] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1253.941455][T14354] usb 5-1: USB disconnect, device number 53 [ 1253.947375][T13910] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1253.947410][T13910] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1253.947430][T13910] usb 4-1: Product: syz [ 1253.963743][T13910] usb 4-1: config 0 descriptor?? [ 1253.983111][T14372] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1253.994758][T17384] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.20066'. [ 1253.995514][T13910] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1254.011759][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 1254.020865][T14372] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1254.035612][ T5737] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.044149][T14372] usb 1-1: USB disconnect, device number 39 [ 1254.049379][ T5737] usb 3-1: config 0 has no interface number 0 [ 1254.056211][ T5737] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.063840][T13910] usb 4-1: Detected FT232H [ 1254.076990][T14372] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1254.095328][T14372] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1254.104759][ T5737] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.104801][ T5737] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1254.104823][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.128839][ T5737] usb 3-1: config 0 descriptor?? [ 1254.161280][T14372] visor 1-1:1.0: device disconnected [ 1254.212863][T13910] ftdi_sio ttyUSB2: Unable to read latency timer: -32 [ 1254.431491][T17391] macsec1: entered allmulticast mode [ 1254.431514][T17391] batadv0: entered allmulticast mode [ 1254.433558][T17391] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1254.434677][T17391] batadv0: left allmulticast mode [ 1254.630704][T14354] IPVS: starting estimator thread 0... [ 1254.636772][T13910] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB2 [ 1254.728062][T17400] IPVS: using max 31 ests per chain, 74400 per kthread [ 1254.771335][ T5737] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.00C3/input/input211 [ 1254.819523][T14372] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1254.852232][T13910] usb 4-1: USB disconnect, device number 40 [ 1254.895992][ T5737] uclogic 0003:28BD:0094.00C3: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 1254.932607][T13910] ftdi_sio ttyUSB2: FTDI USB Serial Device converter now disconnected from ttyUSB2 [ 1254.963837][T13910] ftdi_sio 4-1:0.0: device disconnected [ 1254.999092][T14372] usb 1-1: Using ep0 maxpacket: 32 [ 1255.002003][ T5737] usb 3-1: USB disconnect, device number 50 [ 1255.024650][T14372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.056574][T14372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.090134][T17408] fido_id[17408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1255.098625][T14372] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1255.124806][T14372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.143683][T14372] usb 1-1: config 0 descriptor?? [ 1255.369369][T17404] IPVS: You probably need to specify IP address on multicast interface. [ 1255.388006][T17404] IPVS: Error connecting to the multicast addr [ 1255.614233][T14372] savu 0003:1E7D:2D5A.00C4: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1255.697938][ T5737] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1255.862056][T14372] usb 1-1: USB disconnect, device number 40 [ 1255.869063][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 1255.893664][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1255.924809][ T5737] usb 4-1: config 3 has an invalid interface number: 57 but max is 0 [ 1255.943328][ T5737] usb 4-1: config 3 has no interface number 0 [ 1255.966295][ T5737] usb 4-1: config 3 interface 57 has no altsetting 0 [ 1255.993696][ T5737] usb 4-1: New USB device found, idVendor=1bbb, idProduct=0003, bcdDevice=77.23 [ 1256.027636][T17429] netlink: 104 bytes leftover after parsing attributes in process `syz.5.20084'. [ 1256.033972][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.074071][ T5737] usb 4-1: Product: syz [ 1256.086196][ T5737] usb 4-1: Manufacturer: syz [ 1256.094231][ T5737] usb 4-1: SerialNumber: syz [ 1256.360449][T16092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.369556][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.371689][ T5737] usb 4-1: USB disconnect, device number 41 [ 1256.385585][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.502502][T17442] gtp0: entered promiscuous mode [ 1256.517990][T17442] gtp0: entered allmulticast mode [ 1256.538476][T17442] team0: Device gtp0 is of different type [ 1257.784002][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20117'. [ 1257.816923][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20117'. [ 1257.839672][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20117'. [ 1257.869761][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20117'. [ 1258.122293][T17488] IPVS: You probably need to specify IP address on multicast interface. [ 1258.144105][T17488] IPVS: Error connecting to the multicast addr [ 1258.378654][T14372] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1258.444803][T17529] loop5: detected capacity change from 0 to 7 [ 1258.456691][T17529] Dev loop5: unable to read RDB block 7 [ 1258.466130][T17529] loop5: unable to read partition table [ 1258.472422][T17529] loop5: partition table beyond EOD, truncated [ 1258.481859][T17529] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1258.540728][T14372] usb 1-1: Using ep0 maxpacket: 8 [ 1258.565501][T14372] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1258.592206][T14372] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.613364][T14372] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1258.623877][T14372] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1258.650206][T14372] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1258.669526][ T3392] tipc: Subscription rejected, illegal request [ 1258.679571][T14372] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1258.708039][T14372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.751082][T14372] usbtmc 1-1:16.0: bulk endpoints not found [ 1259.107983][T14372] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1259.291784][T14372] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1259.325058][T14372] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1259.345274][T14372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1259.359337][T14372] usb 6-1: SerialNumber: syz [ 1259.598172][T14372] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1259.652339][T14372] usb 6-1: USB disconnect, device number 86 [ 1260.544676][T17588] syzkaller1: entered promiscuous mode [ 1260.552167][T17588] syzkaller1: entered allmulticast mode [ 1260.657727][T17592] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.20151'. [ 1260.818033][ T5737] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1260.977995][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 1260.990420][ T5737] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1261.005625][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.016463][ T5737] usb 5-1: config 0 has no interface number 0 [ 1261.022955][ T5737] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1261.034434][ T5737] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1261.044820][ T5737] usb 5-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1261.068663][ T5737] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1261.078177][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.086423][ T5737] usb 5-1: Product: syz [ 1261.091595][ T5737] usb 5-1: Manufacturer: syz [ 1261.096313][ T5737] usb 5-1: SerialNumber: syz [ 1261.120591][ T5737] usb 5-1: config 0 descriptor?? [ 1261.129942][T17590] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1261.184558][T14372] usb 1-1: USB disconnect, device number 41 [ 1261.358861][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20150'. [ 1261.385822][ T5737] usb 5-1: NFC: intf ffff88804bf43000 id ffffffff8f3e8900 [ 1261.409931][ T5737] usb 5-1: USB disconnect, device number 54 [ 1261.481318][T13910] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1261.565250][T17613] netlink: 'syz.3.20160': attribute type 11 has an invalid length. [ 1261.575560][T17613] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20160'. [ 1261.669228][T13910] usb 3-1: Using ep0 maxpacket: 32 [ 1261.676654][T13910] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1261.685322][T13910] usb 3-1: config 0 has no interface number 0 [ 1261.691699][T13910] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1261.704539][T13910] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1261.717911][T13910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.727406][T13910] usb 3-1: Product: syz [ 1261.732542][T13910] usb 3-1: Manufacturer: syz [ 1261.737201][T13910] usb 3-1: SerialNumber: syz [ 1261.745390][T13910] usb 3-1: config 0 descriptor?? [ 1261.752479][T17601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1261.802434][T17622] input: syz1 as /devices/virtual/input/input212 [ 1261.969918][T17601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1262.119360][T16092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.134599][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.143568][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.238208][T14371] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1262.400269][T14371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.415541][T14371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1262.430191][T14371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1262.449453][T17641] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.20173'. [ 1262.449702][T14371] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1262.476363][T14371] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1262.486864][T14371] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1262.495081][T14371] usb 5-1: Manufacturer: syz [ 1262.504130][T14371] usb 5-1: config 0 descriptor?? [ 1262.582472][T13910] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1262.593233][T13910] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1262.610039][ T5737] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1262.615662][T13910] usb 3-1: USB disconnect, device number 51 [ 1262.792311][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1262.810598][T14371] rc_core: IR keymap rc-hauppauge not found [ 1262.811920][ T5737] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1262.820934][T14371] Registered IR keymap rc-empty [ 1262.832165][ T5737] usb 4-1: can't read configurations, error -71 [ 1262.845949][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1262.880356][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1262.910940][T14371] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1262.927136][T14371] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input213 [ 1262.944448][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1262.979475][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.009345][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.048343][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.070927][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.098290][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.138478][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.182015][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.189780][T17670] input: syz1 as /devices/virtual/input/input214 [ 1263.218478][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.249163][T14371] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1263.285714][T14371] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1263.301286][T14371] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1263.326690][T14371] usb 5-1: USB disconnect, device number 55 [ 1264.188117][ T5737] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1264.311488][ T30] audit: type=1326 audit(1780813015.909:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.339039][ T30] audit: type=1326 audit(1780813015.909:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.340515][ T5737] usb 5-1: Using ep0 maxpacket: 16 [ 1264.364678][ T30] audit: type=1326 audit(1780813015.929:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.400389][T14371] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1264.405817][ T5737] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 1264.417282][ T5737] usb 5-1: config 251 has no interface number 0 [ 1264.423975][ T5737] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1264.434603][ T5737] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1264.447274][ T5737] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1264.459089][ T30] audit: type=1326 audit(1780813015.929:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.461633][ T5737] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1264.496601][ T5737] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1264.510681][ T5737] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.527434][ T30] audit: type=1326 audit(1780813015.969:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.542079][ T5737] usb 5-1: config 251 interface 202 has no altsetting 0 [ 1264.565811][ T5737] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1264.575764][ T30] audit: type=1326 audit(1780813015.989:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.605366][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1264.609455][ T30] audit: type=1326 audit(1780813015.989:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.641350][ T5737] usb 5-1: Product: syz [ 1264.652716][ T5737] usb 5-1: SerialNumber: syz [ 1264.656752][T14371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.672531][T14371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.685005][T14371] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1264.698359][T14371] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1264.707469][ T30] audit: type=1326 audit(1780813015.989:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.732944][T14371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.742291][ T30] audit: type=1326 audit(1780813016.009:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.778794][T14371] usb 6-1: config 0 descriptor?? [ 1264.827774][ T30] audit: type=1326 audit(1780813016.009:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.0.20200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fbc7619ce59 code=0x7ffc0000 [ 1264.908096][T12119] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1264.929818][ T5737] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1264.954433][ T5737] usb 5-1: USB disconnect, device number 56 [ 1265.070277][T12119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.083220][T12119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.102167][T12119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1265.126592][T12119] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1265.145564][T12119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.167626][T12119] usb 4-1: config 0 descriptor?? [ 1265.207479][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.222861][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.234220][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.242501][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.257129][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.268248][T13910] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1265.276486][T14371] steelseries 0003:1038:1410.00C5: unknown main item tag 0x0 [ 1265.286437][T14371] steelseries 0003:1038:1410.00C5: item fetching failed at offset 6/7 [ 1265.299320][T14371] steelseries 0003:1038:1410.00C5: parse failed [ 1265.337340][T14371] steelseries 0003:1038:1410.00C5: probe with driver steelseries failed with error -22 [ 1265.428081][T13910] usb 3-1: Using ep0 maxpacket: 32 [ 1265.435518][T13910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.450156][ T5737] usb 6-1: USB disconnect, device number 87 [ 1265.457398][T13910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.469697][T13910] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1265.479963][T13910] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1265.488963][T13910] usb 3-1: Product: syz [ 1265.493431][T13910] usb 3-1: Manufacturer: syz [ 1265.535786][T13910] usb 3-1: config 0 descriptor?? [ 1265.589799][T12119] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1265.601129][T12119] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1265.609269][T12119] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1265.616868][T12119] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1265.631732][T12119] plantronics 0003:047F:FFFF.00C6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1265.859593][T14371] usb 4-1: USB disconnect, device number 44 [ 1265.969002][T13910] hid-generic 0003:25DD:F3D2.00C7: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 1265.988043][T12119] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1266.168004][T12119] usb 1-1: Using ep0 maxpacket: 8 [ 1266.179791][T12119] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1266.191247][T12119] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1266.201430][T12119] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1266.211546][T12119] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1266.224651][T12119] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1266.234247][T12119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.249837][T13910] usb 3-1: USB disconnect, device number 52 [ 1266.338011][T14371] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1266.453229][T12119] usb 1-1: GET_CAPABILITIES returned 0 [ 1266.453362][T12119] usbtmc 1-1:16.0: can't read capabilities [ 1266.508073][T14371] usb 6-1: Using ep0 maxpacket: 16 [ 1266.660616][T12119] usb 1-1: USB disconnect, device number 42 [ 1266.714807][T17741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.727067][T17741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.749823][T14371] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1266.759239][T14371] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1266.766841][T14371] usb 6-1: can't read configurations, error -71 [ 1266.928446][T17761] all (unregistering): Released all slaves [ 1266.976598][T17766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.308074][T12119] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1267.481064][T12119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1267.495757][T12119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.506582][T12119] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1267.516082][T12119] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1267.529509][T12119] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1267.543572][T12119] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1267.556684][T12119] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1267.569859][T12119] usb 4-1: string descriptor 0 read error: -22 [ 1267.582365][T12119] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1267.606178][T12119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.878256][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.887143][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.896055][ T879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.918321][T17788] ALSA: mixer_oss: invalid OSS volume '*' [ 1268.043956][T17796] loop7: detected capacity change from 0 to 7 [ 1268.074214][T17796] Dev loop7: unable to read RDB block 7 [ 1268.092636][T17796] loop7: unable to read partition table [ 1268.099610][T17796] loop7: partition table beyond EOD, truncated [ 1268.108255][T17796] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1268.141044][ C0] blk_print_req_error: 10 callbacks suppressed [ 1268.141066][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1268.157097][ C0] buffer_io_error: 10 callbacks suppressed [ 1268.157111][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1268.171736][T14371] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1268.318733][ T879] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1268.351039][T14371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.363013][T14371] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1268.378831][T14371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.397126][T14371] usb 5-1: config 0 descriptor?? [ 1268.438173][T17804] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 1268.490330][ T879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.509584][ T879] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1268.521688][ T879] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1268.534213][ T879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.544752][ T879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.553509][ T879] usb 1-1: Product: syz [ 1268.557781][ T879] usb 1-1: Manufacturer: syz [ 1268.562524][ T879] usb 1-1: SerialNumber: syz [ 1268.613207][T14371] usbhid 5-1:0.0: can't add hid device: -71 [ 1268.620584][T14371] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1268.638294][T14371] usb 5-1: USB disconnect, device number 57 [ 1268.665169][T12119] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 1268.744310][T12119] usb 4-1: USB disconnect, device number 45 [ 1269.068036][ T5737] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1269.238754][ T5737] usb 5-1: Using ep0 maxpacket: 16 [ 1269.249899][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.281101][ T5737] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1269.303698][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.315490][ T5737] usb 5-1: config 0 descriptor?? [ 1269.530421][ T5737] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 1269.542653][ T5737] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input215 [ 1269.592106][ T879] cdc_ncm 1-1:1.0: bind() failure [ 1269.613751][ T879] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1269.630543][ T879] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1269.655353][ T879] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1269.695724][ T879] usb 1-1: USB disconnect, device number 43 [ 1269.704513][T14371] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1269.878156][T14371] usb 4-1: Using ep0 maxpacket: 8 [ 1269.886551][T14371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1269.898925][T14371] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1269.911284][T14371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.925630][T14371] usb 4-1: config 0 descriptor?? [ 1269.966155][ C1] powermate: config urb returned -71 [ 1269.967425][ T879] usb 5-1: USB disconnect, device number 58 [ 1269.971571][ C1] powermate: usb_submit_urb(config) failed [ 1269.971777][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1270.137720][T14371] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1270.138240][ T5737] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1270.232604][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.243434][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.253064][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.262903][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.272451][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.283059][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.292532][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20254'. [ 1270.308050][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 1270.315001][ T5737] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1270.333900][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1270.360121][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.370817][ T5737] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.380255][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1270.386256][ T5737] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1270.404443][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.412086][ T879] usb 4-1: USB disconnect, device number 46 [ 1270.494111][T17842] xt_hashlimit: size too large, truncated to 1048576 [ 1270.659340][ T5737] usb 3-1: GET_CAPABILITIES returned 0 [ 1270.673616][ T5737] usbtmc 3-1:16.0: can't read capabilities [ 1270.821472][T14371] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1270.885744][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1270.895312][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1270.904452][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1270.913540][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1270.947094][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1270.957175][ T879] usb 3-1: USB disconnect, device number 53 [ 1271.018232][T14371] usb 5-1: Using ep0 maxpacket: 32 [ 1271.037081][T14371] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1271.054930][T14371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1271.062549][T14371] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1271.072934][T14371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.085145][T14371] usb 5-1: config 0 descriptor?? [ 1271.217940][T13910] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1271.362402][T17878] netlink: 172 bytes leftover after parsing attributes in process `syz.3.20271'. [ 1271.389603][T13910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1271.401794][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1271.413820][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1271.423982][T13910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1271.437389][T13910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.446807][T13910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.458083][T13910] usb 1-1: config 0 descriptor?? [ 1271.587989][ T5737] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1271.739992][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.751135][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.761106][ T5737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1271.774306][ T5737] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.783456][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.794242][ T5737] usb 6-1: config 0 descriptor?? [ 1271.865637][T14371] corsair-cpro 0003:1B1C:0C10.00C8: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1271.894631][T13910] plantronics 0003:047F:FFFF.00C9: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1272.063533][T14371] corsair-cpro 0003:1B1C:0C10.00C8: probe with driver corsair-cpro failed with error -71 [ 1272.234958][ T5737] plantronics 0003:047F:FFFF.00CA: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1272.271526][T14371] usb 5-1: USB disconnect, device number 59 [ 1273.216180][ T5737] usb 6-1: USB disconnect, device number 90 [ 1273.342214][T17921] netlink: 'syz.3.20286': attribute type 12 has an invalid length. [ 1273.470952][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20287'. [ 1273.639713][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.648819][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.660240][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.042457][T14354] usb 1-1: USB disconnect, device number 44 [ 1274.176476][T17948] loop9: detected capacity change from 0 to 1 [ 1274.201791][T17948] Dev loop9: unable to read RDB block 1 [ 1274.214400][T17948] loop9: unable to read partition table [ 1274.224673][T17948] loop9: partition table beyond EOD, truncated [ 1274.241899][T17948] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1274.348835][ T4999] Dev loop9: unable to read RDB block 1 [ 1274.359420][ T4999] loop9: unable to read partition table [ 1274.379167][ T4999] loop9: partition table beyond EOD, truncated [ 1274.649217][T14371] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1274.731582][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20308'. [ 1274.776119][T16092] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.791646][T16092] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.808193][T16092] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.817290][T16092] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.827922][T14371] usb 6-1: Using ep0 maxpacket: 8 [ 1274.853640][T14371] usb 6-1: config 0 has no interfaces? [ 1274.863489][T14371] usb 6-1: config 0 has no interfaces? [ 1274.888756][T14371] usb 6-1: config 0 has no interfaces? [ 1274.901183][T14371] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1274.928033][T14371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.940322][T14371] usb 6-1: Product: syz [ 1274.948118][T14371] usb 6-1: Manufacturer: syz [ 1274.957230][T14371] usb 6-1: SerialNumber: syz [ 1274.967764][T17985] loop7: detected capacity change from 0 to 16384 [ 1274.974977][T14371] usb 6-1: config 0 descriptor?? [ 1275.029877][T17985] loop7: detected capacity change from 16384 to 16383 [ 1275.192726][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.230461][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.261680][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.290045][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.319287][T14354] usb 6-1: USB disconnect, device number 91 [ 1275.639599][T17999] vlan0: entered promiscuous mode [ 1275.768038][T14354] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1275.920980][T14354] usb 6-1: config 0 has an invalid interface number: 6 but max is 2 [ 1275.943294][T14354] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 1275.968109][T14354] usb 6-1: config 0 has no interface number 1 [ 1275.977706][T14354] usb 6-1: config 0 has no interface number 2 [ 1275.989748][T14354] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=29.ac [ 1276.008084][T14354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.021528][T14354] usb 6-1: config 0 descriptor?? [ 1276.042292][T14354] imon 6-1:0.6: inconsistent driver matching [ 1276.054286][T14354] imon 6-1:0.6: unable to register, err -22 [ 1276.061055][T14354] imon 6-1:0.6: probe with driver imon failed with error -22 [ 1276.075565][T14354] imon 6-1:0.176: inconsistent driver matching [ 1276.084491][T14354] imon 6-1:0.176: unable to register, err -22 [ 1276.092097][T14354] imon 6-1:0.176: probe with driver imon failed with error -22 [ 1276.107216][T14354] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1276.116088][T14354] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1276.124588][T14354] imon:imon_probe: failed to initialize context! [ 1276.131219][T14354] imon 6-1:0.0: unable to register, err -19 [ 1276.200861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.243349][T14354] usb 6-1: USB disconnect, device number 92 [ 1276.918010][T14371] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1276.968723][T13910] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1277.088275][T14371] usb 5-1: Using ep0 maxpacket: 8 [ 1277.104644][T14371] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1277.122045][T14371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.142000][T13910] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1277.153287][T14371] usb 5-1: Product: syz [ 1277.168253][T14371] usb 5-1: Manufacturer: syz [ 1277.174821][T13910] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1277.190454][T14371] usb 5-1: SerialNumber: syz [ 1277.204231][T13910] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1277.219830][T14371] usb 5-1: config 0 descriptor?? [ 1277.231225][T13910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.239917][T13910] usb 3-1: Product: syz [ 1277.244209][T13910] usb 3-1: Manufacturer: syz [ 1277.249275][T13910] usb 3-1: SerialNumber: syz [ 1277.261511][T13910] usb 3-1: config 0 descriptor?? [ 1277.460647][T14371] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1277.608581][T14354] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1277.758130][T14354] usb 1-1: Using ep0 maxpacket: 8 [ 1277.766710][T14354] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1277.775376][T14354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.787906][T14354] usb 1-1: config 0 has no interface number 0 [ 1277.794102][T14354] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1277.805501][T14354] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1277.815796][T14354] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1277.831612][T14354] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1277.856563][T14354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.870651][T14371] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1277.881086][T14354] usb 1-1: Product: syz [ 1277.885894][T13910] mos7840 3-1:0.0: required endpoints missing [ 1277.894138][T14354] usb 1-1: Manufacturer: syz [ 1277.901031][T14371] usb 5-1: USB disconnect, device number 60 [ 1277.917606][T14354] usb 1-1: SerialNumber: syz [ 1277.918246][T13910] usb 3-1: USB disconnect, device number 54 [ 1277.945435][T14354] usb 1-1: config 0 descriptor?? [ 1277.962620][T18030] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1277.998014][ T879] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1278.149523][ T879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1278.160654][ T879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.171824][ T879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.182218][ T879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1278.196414][ T879] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1278.205845][T14372] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1278.210840][T18030] __nla_validate_parse: 3 callbacks suppressed [ 1278.210948][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20330'. [ 1278.214373][ T879] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1278.237302][ T879] usb 4-1: Manufacturer: syz [ 1278.244414][T14354] usb 1-1: NFC: intf ffff8880581bb000 id ffffffff8f3e8900 [ 1278.251822][ T879] usb 4-1: config 0 descriptor?? [ 1278.270342][T14354] usb 1-1: USB disconnect, device number 45 [ 1278.388129][T14372] usb 6-1: Using ep0 maxpacket: 8 [ 1278.395637][T14372] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1278.408349][T14372] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1278.429327][T14372] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1278.450108][T14372] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.474432][T14372] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1278.483872][T14372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.544620][T18050] syzkaller1: entered promiscuous mode [ 1278.550987][T18050] syzkaller1: entered allmulticast mode [ 1278.664505][T18056] netlink: 'syz.4.20343': attribute type 9 has an invalid length. [ 1278.675482][T18056] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.20343'. [ 1278.686831][ T879] hid_parser_main: 5 callbacks suppressed [ 1278.686872][ T879] appleir 0003:05AC:8243.00CB: unknown main item tag 0x0 [ 1278.708117][T14372] usb 6-1: GET_CAPABILITIES returned 0 [ 1278.713841][T14372] usbtmc 6-1:16.0: can't read capabilities [ 1278.734341][ T879] appleir 0003:05AC:8243.00CB: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1278.969920][ T879] usb 4-1: USB disconnect, device number 47 [ 1279.041930][ T5737] usb 6-1: USB disconnect, device number 93 [ 1279.168085][T14354] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1279.337932][T14354] usb 5-1: Using ep0 maxpacket: 8 [ 1279.349587][T14354] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 1279.368195][T14354] usb 5-1: config 0 has no interface number 0 [ 1279.376198][T14354] usb 5-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 1279.399777][T14354] usb 5-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1279.428292][T14354] usb 5-1: config 0 interface 101 has no altsetting 0 [ 1279.439600][T14354] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1279.457901][T14354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.478057][T14354] usb 5-1: Product: syz [ 1279.482294][T14354] usb 5-1: Manufacturer: syz [ 1279.486907][T14354] usb 5-1: SerialNumber: syz [ 1279.500628][T14354] usb 5-1: config 0 descriptor?? [ 1279.731909][T14354] gspca_main: se401-2.14.0 probing 047d:5003 [ 1279.931054][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20357'. [ 1280.038218][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1280.432392][T14354] usb 5-1: reset high-speed USB device number 61 using dummy_hcd [ 1280.819264][ T5737] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1280.988150][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 1280.996910][ T5737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.017971][ T5737] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.043425][ T5737] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1281.068091][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1281.088253][ T5737] usb 4-1: Product: syz [ 1281.092521][ T5737] usb 4-1: Manufacturer: syz [ 1281.097160][ T5737] usb 4-1: SerialNumber: syz [ 1281.105568][T14354] gspca_se401: read req failed req 0x06 error -71 [ 1281.120247][T14354] se401 5-1:0.101: probe with driver se401 failed with error -71 [ 1281.147642][ T5737] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input217 [ 1281.170516][T14354] usb 5-1: USB disconnect, device number 61 [ 1281.448293][ T879] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1281.492059][T14372] usb 4-1: USB disconnect, device number 48 [ 1281.498306][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1281.566128][T14372] appletouch 4-1:1.0: input: appletouch disconnected [ 1281.658104][ T879] usb 6-1: Using ep0 maxpacket: 16 [ 1281.674695][ T879] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.702545][ T879] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.726556][ T879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1281.781269][ T879] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1281.800142][ T879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.816211][ T879] usb 6-1: config 0 descriptor?? [ 1282.260677][ T879] nzxt-smart2 0003:1E71:2009.00CC: unknown main item tag 0x0 [ 1282.275761][ T879] nzxt-smart2 0003:1E71:2009.00CC: unknown main item tag 0x0 [ 1282.297813][ T879] nzxt-smart2 0003:1E71:2009.00CC: unknown main item tag 0x0 [ 1282.305725][ T879] nzxt-smart2 0003:1E71:2009.00CC: unknown main item tag 0x0 [ 1282.315318][ T879] nzxt-smart2 0003:1E71:2009.00CC: unknown main item tag 0x0 [ 1282.338507][ T879] nzxt-smart2 0003:1E71:2009.00CC: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1282.358005][T14354] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1282.388650][T14372] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1282.466855][ T879] usb 6-1: USB disconnect, device number 94 [ 1282.537954][T14354] usb 5-1: Using ep0 maxpacket: 8 [ 1282.551119][T14372] usb 1-1: config 0 has no interfaces? [ 1282.564460][T14354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1282.568473][T14372] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1282.597098][T14372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.611666][T14372] usb 1-1: config 0 descriptor?? [ 1282.621824][T14354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1282.667112][T14354] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1282.686896][T14354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.727777][T14354] usb 5-1: config 0 descriptor?? [ 1282.832996][ T879] usb 1-1: USB disconnect, device number 46 [ 1283.248882][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.297237][T14354] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.00CD/input/input218 [ 1283.410628][T14354] sony 0003:054C:03D5.00CD: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 1283.481933][T14354] usb 5-1: USB disconnect, device number 62 [ 1283.610396][T18200] fido_id[18200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1284.318049][T14354] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1284.358900][ T5737] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1284.480627][T14354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.491388][T12119] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1284.517565][T14354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.528358][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1284.529905][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1284.544374][ T5737] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1284.556032][ T5737] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1284.566076][T14354] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1284.575821][T14354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1284.584822][T14354] usb 1-1: SerialNumber: syz [ 1284.591469][ T5737] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1284.601099][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.610306][ T5737] usb 6-1: Product: syz [ 1284.614952][ T5737] usb 6-1: Manufacturer: syz [ 1284.622214][ T5737] usb 6-1: SerialNumber: syz [ 1284.632314][ T5737] usb 6-1: config 0 descriptor?? [ 1284.642398][ T5737] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1284.660150][T12119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1284.671924][T12119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.682615][T12119] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1284.691841][T12119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.704198][T12119] usb 5-1: config 0 descriptor?? [ 1284.798010][ T808] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1284.831647][T14354] usb 1-1: 0:2 : does not exist [ 1284.876273][T14354] usb 1-1: USB disconnect, device number 47 [ 1284.947988][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 1284.955517][ T808] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1284.963982][ T808] usb 4-1: config 0 has no interface number 0 [ 1284.970240][ T808] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1284.981555][ T808] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1284.993709][ T808] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1285.004963][ T808] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1285.018397][ T808] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1285.027553][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.039375][ T808] usb 4-1: config 0 descriptor?? [ 1285.051222][ T808] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1285.131845][T12119] savu 0003:1E7D:2D5A.00CE: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1285.251635][T12119] usb 4-1: USB disconnect, device number 49 [ 1285.257763][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 1285.271204][T12119] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1285.339898][T14354] usb 5-1: USB disconnect, device number 63 [ 1285.666817][ T5737] usb 6-1: USB disconnect, device number 95 [ 1285.953421][T18263] netlink: 14 bytes leftover after parsing attributes in process `syz.4.20423'. [ 1286.185902][T18272] syzkaller1: entered promiscuous mode [ 1286.201652][T18272] syzkaller1: entered allmulticast mode [ 1286.328133][ T5737] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1286.502460][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.514770][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.527595][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1286.555867][ T5737] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1286.570393][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.588526][ T5737] usb 3-1: config 0 descriptor?? [ 1287.021500][ T5737] plantronics 0003:047F:FFFF.00CF: reserved main item tag 0xe [ 1287.034438][ T5737] plantronics 0003:047F:FFFF.00CF: unknown main item tag 0x0 [ 1287.072280][ T5737] plantronics 0003:047F:FFFF.00CF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1287.299949][ T879] usb 3-1: USB disconnect, device number 55 [ 1288.411922][ T5737] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1288.567996][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 1288.586319][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.609006][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.619358][ T5737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1288.633174][ T5737] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1288.642832][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.672700][ T5737] usb 6-1: config 0 descriptor?? [ 1288.772095][T18363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1288.805457][T18363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.097222][ T5737] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1289.135417][ T5737] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00D0/input/input219 [ 1289.262092][ T5737] microsoft 0003:045E:07DA.00D0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1289.323970][ T5737] usb 6-1: USB disconnect, device number 96 [ 1289.429190][T18393] fido_id[18393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1289.462445][T18397] geneve2: entered promiscuous mode [ 1289.469856][T32148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.490007][T32148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.509333][T32148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.520873][T32148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.707685][T18404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.817680][T18410] Invalid argument reading file caps for ./file0 [ 1290.117999][ T5737] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1290.278908][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 1290.291975][ T5737] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1290.307493][ T5737] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1290.316408][ T5737] usb 1-1: can't read configurations, error -71 [ 1290.328089][T14354] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1290.481981][T14354] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1290.496377][T14354] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1290.510242][T14354] usb 5-1: Product: syz [ 1290.518081][T14354] usb 5-1: Manufacturer: syz [ 1290.524941][T14354] usb 5-1: SerialNumber: syz [ 1290.538889][T14354] usb 5-1: config 0 descriptor?? [ 1290.719373][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20486'. [ 1290.736598][T18439] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.20486'. [ 1290.754075][T14354] usb 5-1: USB disconnect, device number 64 [ 1291.388701][T14372] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 1291.549535][T14372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1291.567247][T14372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1291.580927][T14372] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1291.590381][T14372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.602373][T14372] usb 4-1: config 0 descriptor?? [ 1291.613538][T18449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1291.687980][T13910] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1291.841015][T18449] netlink: 'syz.3.20491': attribute type 34 has an invalid length. [ 1291.860924][T13910] usb 6-1: Using ep0 maxpacket: 32 [ 1291.876493][T14372] usbhid 4-1:0.0: can't add hid device: -71 [ 1291.889833][T13910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.910696][T14372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1291.922881][T13910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.939387][T14372] usb 4-1: USB disconnect, device number 50 [ 1291.956979][T13910] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1291.988822][T13910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.013437][T13910] usb 6-1: config 0 descriptor?? [ 1292.033726][T13910] hub 6-1:0.0: USB hub found [ 1292.231117][T18483] overlay: Unknown parameter '-CV5dgqދhM38j#آ2QEoms'9(S][(33ӵ0^{2rNaς\lG+XJtnGjG*3]W5n헆OԜKT Eؽc}vgi+G *^A77)b' [ 1292.260694][T13910] hub 6-1:0.0: 1 port detected [ 1292.474634][T13910] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1292.517929][T13910] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1292.545948][T13910] usbhid 6-1:0.0: can't add hid device: -71 [ 1292.568105][T13910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1292.602587][T13910] usb 6-1: USB disconnect, device number 97 [ 1292.839642][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.005250][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20522'. [ 1293.051671][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20522'. [ 1293.354838][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1293.354855][ T30] audit: type=1800 audit(1780813044.949:1913): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20530" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1293.545276][T18544] netlink: 51 bytes leftover after parsing attributes in process `syz.4.20534'. [ 1293.674322][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20536'. [ 1293.948564][T18570] Invalid argument reading file caps for ./file0 [ 1294.120709][T13910] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1294.279991][T13910] usb 1-1: Using ep0 maxpacket: 32 [ 1294.293733][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 1294.318841][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 1294.345105][T13910] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1294.354896][T13910] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1294.363600][T13910] usb 1-1: Product: syz [ 1294.368304][T13910] usb 1-1: Manufacturer: syz [ 1294.375808][T13910] usb 1-1: config 0 descriptor?? [ 1294.382081][T18566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.591741][T18602] bond0: option ad_user_port_key: invalid value (61169) [ 1294.598991][T18602] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 1294.607599][T18602] bond0 (unregistering): Released all slaves [ 1294.816528][T13910] hid-generic 0003:25DD:F3D2.00D1: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 1295.079853][T13910] usb 1-1: USB disconnect, device number 50 [ 1295.967944][T13910] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1296.119740][T13910] usb 1-1: Using ep0 maxpacket: 32 [ 1296.133262][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.161004][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.182859][T13910] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1296.203866][T18660] [ 1296.206229][T18660] ===================================================== [ 1296.213285][T18660] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1296.220868][T18660] syzkaller #0 Tainted: G L [ 1296.226860][T18660] ----------------------------------------------------- [ 1296.233844][T18660] syz.2.20586/18660 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1296.241679][T18660] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1296.250435][T18660] [ 1296.250435][T18660] and this task is already holding: [ 1296.257811][T18660] ffff888020b6c520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1296.266540][T18660] which would create a new lock dependency: [ 1296.272432][T18660] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1296.280091][T18660] [ 1296.280091][T18660] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1296.289570][T18660] (&client->buffer_lock){..-.}-{3:3} [ 1296.289594][T18660] [ 1296.289594][T18660] ... which became SOFTIRQ-irq-safe at: [ 1296.302659][T18660] lock_acquire+0x106/0x350 [ 1296.307256][T18660] _raw_spin_lock+0x2e/0x40 [ 1296.311862][T18660] evdev_pass_values+0xb9/0xbd0 [ 1296.316899][T18660] evdev_events+0x1e6/0x340 [ 1296.321486][T18660] input_pass_values+0x288/0x890 [ 1296.326549][T18660] input_event_dispose+0x3e5/0x6b0 [ 1296.331760][T18660] input_event+0x84/0xc0 [ 1296.336099][T18660] hidinput_hid_event+0x143a/0x1ec0 [ 1296.341425][T18660] hid_process_event+0x4be/0x620 [ 1296.346455][T18660] hid_report_raw_event+0xed6/0x1850 [ 1296.351839][T18660] __hid_input_report+0x45c/0x590 [ 1296.356962][T18660] hid_irq_in+0x495/0x710 [ 1296.361474][T18660] __usb_hcd_giveback_urb+0x376/0x540 [ 1296.367004][T18660] dummy_timer+0xbc0/0x4650 [ 1296.371607][T18660] __hrtimer_run_queues+0x3c0/0xa20 [ 1296.376911][T18660] hrtimer_run_softirq+0x17a/0x240 [ 1296.382128][T18660] handle_softirqs+0x22a/0x840 [ 1296.386988][T18660] __irq_exit_rcu+0xca/0x220 [ 1296.391670][T18660] irq_exit_rcu+0x9/0x30 [ 1296.396001][T18660] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1296.401723][T18660] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1296.407798][T18660] finish_task_switch+0x427/0xbe0 [ 1296.412926][T18660] __schedule+0x1829/0x5740 [ 1296.417524][T18660] schedule+0x164/0x360 [ 1296.421773][T18660] schedule_timeout+0x158/0x2c0 [ 1296.426718][T18660] rcu_gp_fqs_loop+0x312/0x11d0 [ 1296.431656][T18660] rcu_gp_kthread+0x9e/0x2b0 [ 1296.436375][T18660] kthread+0x389/0x470 [ 1296.440565][T18660] ret_from_fork+0x514/0xb70 [ 1296.445246][T18660] ret_from_fork_asm+0x1a/0x30 [ 1296.450115][T18660] [ 1296.450115][T18660] to a SOFTIRQ-irq-unsafe lock: [ 1296.457187][T18660] (tasklist_lock){.+.+}-{3:3} [ 1296.457210][T18660] [ 1296.457210][T18660] ... which became SOFTIRQ-irq-unsafe at: [ 1296.469851][T18660] ... [ 1296.469893][T18660] lock_acquire+0x106/0x350 [ 1296.477066][T18660] _raw_read_lock+0x36/0x50 [ 1296.481704][T18660] __do_wait+0xde/0x740 [ 1296.485958][T18660] do_wait+0x1e7/0x510 [ 1296.490137][T18660] kernel_wait+0xd6/0x1c0 [ 1296.494572][T18660] call_usermodehelper_exec_work+0xbe/0x230 [ 1296.500557][T18660] process_scheduled_works+0xb5d/0x1860 [ 1296.506194][T18660] worker_thread+0xa53/0xfc0 [ 1296.510876][T18660] kthread+0x389/0x470 [ 1296.515037][T18660] ret_from_fork+0x514/0xb70 [ 1296.519718][T18660] ret_from_fork_asm+0x1a/0x30 [ 1296.524573][T18660] [ 1296.524573][T18660] other info that might help us debug this: [ 1296.524573][T18660] [ 1296.534818][T18660] Chain exists of: [ 1296.534818][T18660] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1296.534818][T18660] [ 1296.548029][T18660] Possible interrupt unsafe locking scenario: [ 1296.548029][T18660] [ 1296.556405][T18660] CPU0 CPU1 [ 1296.561774][T18660] ---- ---- [ 1296.567183][T18660] lock(tasklist_lock); [ 1296.571430][T18660] local_irq_disable(); [ 1296.578195][T18660] lock(&client->buffer_lock); [ 1296.585585][T18660] lock(&f_owner->lock); [ 1296.592445][T18660] [ 1296.595987][T18660] lock(&client->buffer_lock); [ 1296.601028][T18660] [ 1296.601028][T18660] *** DEADLOCK *** [ 1296.601028][T18660] [ 1296.609179][T18660] 2 locks held by syz.2.20586/18660: [ 1296.614469][T18660] #0: ffff888035ca5bd0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1296.623084][T18660] #1: ffff888020b6c520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1296.632249][T18660] [ 1296.632249][T18660] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1296.642657][T18660] -> (&client->buffer_lock){..-.}-{3:3} { [ 1296.648568][T18660] IN-SOFTIRQ-W at: [ 1296.652819][T18660] lock_acquire+0x106/0x350 [ 1296.659326][T18660] _raw_spin_lock+0x2e/0x40 [ 1296.665836][T18660] evdev_pass_values+0xb9/0xbd0 [ 1296.672690][T18660] evdev_events+0x1e6/0x340 [ 1296.679253][T18660] input_pass_values+0x288/0x890 [ 1296.686206][T18660] input_event_dispose+0x3e5/0x6b0 [ 1296.693322][T18660] input_event+0x84/0xc0 [ 1296.699570][T18660] hidinput_hid_event+0x143a/0x1ec0 [ 1296.706771][T18660] hid_process_event+0x4be/0x620 [ 1296.713722][T18660] hid_report_raw_event+0xed6/0x1850 [ 1296.721030][T18660] __hid_input_report+0x45c/0x590 [ 1296.728070][T18660] hid_irq_in+0x495/0x710 [ 1296.734445][T18660] __usb_hcd_giveback_urb+0x376/0x540 [ 1296.741819][T18660] dummy_timer+0xbc0/0x4650 [ 1296.748332][T18660] __hrtimer_run_queues+0x3c0/0xa20 [ 1296.755538][T18660] hrtimer_run_softirq+0x17a/0x240 [ 1296.762651][T18660] handle_softirqs+0x22a/0x840 [ 1296.769416][T18660] __irq_exit_rcu+0xca/0x220 [ 1296.776002][T18660] irq_exit_rcu+0x9/0x30 [ 1296.782238][T18660] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1296.789890][T18660] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1296.797881][T18660] finish_task_switch+0x427/0xbe0 [ 1296.804958][T18660] __schedule+0x1829/0x5740 [ 1296.811467][T18660] schedule+0x164/0x360 [ 1296.817632][T18660] schedule_timeout+0x158/0x2c0 [ 1296.824490][T18660] rcu_gp_fqs_loop+0x312/0x11d0 [ 1296.831359][T18660] rcu_gp_kthread+0x9e/0x2b0 [ 1296.837961][T18660] kthread+0x389/0x470 [ 1296.844031][T18660] ret_from_fork+0x514/0xb70 [ 1296.850623][T18660] ret_from_fork_asm+0x1a/0x30 [ 1296.857400][T18660] INITIAL USE at: [ 1296.861470][T18660] lock_acquire+0x106/0x350 [ 1296.867883][T18660] _raw_spin_lock_irqsave+0x40/0x60 [ 1296.875002][T18660] evdev_ioctl_handler+0x10fb/0x1fe0 [ 1296.882199][T18660] __se_sys_ioctl+0xfc/0x170 [ 1296.888712][T18660] do_syscall_64+0x174/0x580 [ 1296.895217][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.903020][T18660] } [ 1296.905697][T18660] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1296.914200][T18660] -> (&new->fa_lock){....}-{3:3} { [ 1296.919430][T18660] INITIAL USE at: [ 1296.923412][T18660] lock_acquire+0x106/0x350 [ 1296.929658][T18660] _raw_write_lock_irq+0x3d/0x50 [ 1296.936368][T18660] fasync_remove_entry+0xf1/0x1c0 [ 1296.943138][T18660] __fput+0x890/0xa60 [ 1296.948863][T18660] task_work_run+0x1d9/0x270 [ 1296.955208][T18660] exit_to_user_mode_loop+0x193/0x680 [ 1296.962321][T18660] do_syscall_64+0x353/0x580 [ 1296.968663][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.976292][T18660] INITIAL READ USE at: [ 1296.980711][T18660] lock_acquire+0x106/0x350 [ 1296.987394][T18660] _raw_read_lock_irqsave+0x48/0x60 [ 1296.994785][T18660] kill_fasync+0x199/0x4d0 [ 1297.001414][T18660] mousedev_write+0x8f9/0x950 [ 1297.008307][T18660] vfs_write+0x29a/0xb90 [ 1297.014731][T18660] ksys_write+0x150/0x270 [ 1297.021249][T18660] do_syscall_64+0x174/0x580 [ 1297.028029][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.036109][T18660] } [ 1297.038705][T18660] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1297.047589][T18660] ... acquired at: [ 1297.051529][T18660] _raw_read_lock_irqsave+0x48/0x60 [ 1297.056936][T18660] kill_fasync+0x199/0x4d0 [ 1297.061536][T18660] evdev_pass_values+0x627/0xbd0 [ 1297.066648][T18660] evdev_events+0x1e6/0x340 [ 1297.071372][T18660] input_pass_values+0x288/0x890 [ 1297.076500][T18660] input_event_dispose+0x330/0x6b0 [ 1297.081814][T18660] input_inject_event+0x1dc/0x330 [ 1297.087019][T18660] evdev_write+0x325/0x4c0 [ 1297.091623][T18660] vfs_write+0x29a/0xb90 [ 1297.096050][T18660] ksys_write+0x150/0x270 [ 1297.100601][T18660] do_syscall_64+0x174/0x580 [ 1297.105406][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.111500][T18660] [ 1297.113842][T18660] -> (&f_owner->lock){....}-{3:3} { [ 1297.119074][T18660] INITIAL USE at: [ 1297.123018][T18660] lock_acquire+0x106/0x350 [ 1297.129094][T18660] _raw_write_lock_irq+0x3d/0x50 [ 1297.135596][T18660] __f_setown+0x67/0x370 [ 1297.141417][T18660] do_fcntl+0x171c/0x1a20 [ 1297.147324][T18660] __se_sys_fcntl+0xc8/0x150 [ 1297.153483][T18660] do_syscall_64+0x174/0x580 [ 1297.159635][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.167092][T18660] INITIAL READ USE at: [ 1297.171481][T18660] lock_acquire+0x106/0x350 [ 1297.178015][T18660] _raw_read_lock_irqsave+0x48/0x60 [ 1297.185222][T18660] send_sigio+0x38/0x370 [ 1297.191483][T18660] dnotify_handle_event+0x169/0x440 [ 1297.198683][T18660] fsnotify+0x1831/0x1ae0 [ 1297.205043][T18660] vfs_readv+0x6dc/0x840 [ 1297.211298][T18660] do_readv+0x154/0x2e0 [ 1297.217461][T18660] do_syscall_64+0x174/0x580 [ 1297.224052][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.231948][T18660] } [ 1297.234448][T18660] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1297.243305][T18660] ... acquired at: [ 1297.247126][T18660] _raw_read_lock_irqsave+0x48/0x60 [ 1297.252534][T18660] send_sigio+0x38/0x370 [ 1297.256955][T18660] kill_fasync+0x24d/0x4d0 [ 1297.261552][T18660] lease_break_callback+0x26/0x30 [ 1297.266760][T18660] __break_lease+0x81f/0x1ea0 [ 1297.271617][T18660] vfs_mknod+0x52d/0x610 [ 1297.276047][T18660] unix_bind+0x548/0x1230 [ 1297.280558][T18660] __sys_bind+0x2e3/0x410 [ 1297.285131][T18660] __x64_sys_bind+0x7a/0x90 [ 1297.289813][T18660] do_syscall_64+0x174/0x580 [ 1297.294577][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.300643][T18660] [ 1297.302975][T18660] [ 1297.302975][T18660] the dependencies between the lock to be acquired [ 1297.302996][T18660] and SOFTIRQ-irq-unsafe lock: [ 1297.316509][T18660] -> (tasklist_lock){.+.+}-{3:3} { [ 1297.321640][T18660] HARDIRQ-ON-R at: [ 1297.325630][T18660] lock_acquire+0x106/0x350 [ 1297.331799][T18660] _raw_read_lock+0x36/0x50 [ 1297.337972][T18660] __do_wait+0xde/0x740 [ 1297.343783][T18660] do_wait+0x1e7/0x510 [ 1297.349504][T18660] kernel_wait+0xd6/0x1c0 [ 1297.355492][T18660] call_usermodehelper_exec_work+0xbe/0x230 [ 1297.363058][T18660] process_scheduled_works+0xb5d/0x1860 [ 1297.370258][T18660] worker_thread+0xa53/0xfc0 [ 1297.376500][T18660] kthread+0x389/0x470 [ 1297.382226][T18660] ret_from_fork+0x514/0xb70 [ 1297.388473][T18660] ret_from_fork_asm+0x1a/0x30 [ 1297.394890][T18660] SOFTIRQ-ON-R at: [ 1297.398905][T18660] lock_acquire+0x106/0x350 [ 1297.405058][T18660] _raw_read_lock+0x36/0x50 [ 1297.411229][T18660] __do_wait+0xde/0x740 [ 1297.417041][T18660] do_wait+0x1e7/0x510 [ 1297.422763][T18660] kernel_wait+0xd6/0x1c0 [ 1297.428766][T18660] call_usermodehelper_exec_work+0xbe/0x230 [ 1297.436325][T18660] process_scheduled_works+0xb5d/0x1860 [ 1297.443537][T18660] worker_thread+0xa53/0xfc0 [ 1297.449791][T18660] kthread+0x389/0x470 [ 1297.455531][T18660] ret_from_fork+0x514/0xb70 [ 1297.461776][T18660] ret_from_fork_asm+0x1a/0x30 [ 1297.468205][T18660] INITIAL USE at: [ 1297.472114][T18660] lock_acquire+0x106/0x350 [ 1297.478196][T18660] _raw_write_lock_irq+0x3d/0x50 [ 1297.484716][T18660] copy_process+0x2b4c/0x4440 [ 1297.490963][T18660] kernel_clone+0x2d7/0x940 [ 1297.497045][T18660] user_mode_thread+0x110/0x180 [ 1297.503466][T18660] rest_init+0x23/0x300 [ 1297.509203][T18660] start_kernel+0x38a/0x3e0 [ 1297.515397][T18660] x86_64_start_reservations+0x24/0x30 [ 1297.522466][T18660] x86_64_start_kernel+0x143/0x1c0 [ 1297.529154][T18660] common_startup_64+0x13e/0x147 [ 1297.535677][T18660] INITIAL READ USE at: [ 1297.540026][T18660] lock_acquire+0x106/0x350 [ 1297.546540][T18660] _raw_read_lock+0x36/0x50 [ 1297.553064][T18660] __do_wait+0xde/0x740 [ 1297.559236][T18660] do_wait+0x1e7/0x510 [ 1297.565327][T18660] kernel_wait+0xd6/0x1c0 [ 1297.571693][T18660] call_usermodehelper_exec_work+0xbe/0x230 [ 1297.579605][T18660] process_scheduled_works+0xb5d/0x1860 [ 1297.587154][T18660] worker_thread+0xa53/0xfc0 [ 1297.593760][T18660] kthread+0x389/0x470 [ 1297.599845][T18660] ret_from_fork+0x514/0xb70 [ 1297.606445][T18660] ret_from_fork_asm+0x1a/0x30 [ 1297.613223][T18660] } [ 1297.615720][T18660] ... key at: [] tasklist_lock+0x18/0x40 [ 1297.623544][T18660] ... acquired at: [ 1297.627351][T18660] _raw_read_lock+0x36/0x50 [ 1297.632037][T18660] send_sigurg+0x12b/0x420 [ 1297.636641][T18660] sk_send_sigurg+0x6c/0x2e0 [ 1297.641476][T18660] queue_oob+0x42c/0x4f0 [ 1297.645904][T18660] unix_stream_sendmsg+0xcb1/0xe80 [ 1297.651201][T18660] ____sys_sendmsg+0x972/0x9f0 [ 1297.656145][T18660] ___sys_sendmsg+0x2a5/0x360 [ 1297.661044][T18660] __sys_sendmmsg+0x27c/0x4e0 [ 1297.665910][T18660] __x64_sys_sendmmsg+0xa0/0xc0 [ 1297.670934][T18660] do_syscall_64+0x174/0x580 [ 1297.675702][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.681776][T18660] [ 1297.684124][T18660] [ 1297.684124][T18660] stack backtrace: [ 1297.690028][T18660] CPU: 0 UID: 0 PID: 18660 Comm: syz.2.20586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.690049][T18660] Tainted: [L]=SOFTLOCKUP [ 1297.690054][T18660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.690064][T18660] Call Trace: [ 1297.690072][T18660] [ 1297.690079][T18660] dump_stack_lvl+0xe8/0x150 [ 1297.690097][T18660] __lock_acquire+0x2a94/0x2cf0 [ 1297.690120][T18660] ? send_sigurg+0x12b/0x420 [ 1297.690157][T18660] lock_acquire+0x106/0x350 [ 1297.690178][T18660] ? send_sigurg+0x12b/0x420 [ 1297.690204][T18660] _raw_read_lock+0x36/0x50 [ 1297.690226][T18660] ? send_sigurg+0x12b/0x420 [ 1297.690246][T18660] send_sigurg+0x12b/0x420 [ 1297.690268][T18660] sk_send_sigurg+0x6c/0x2e0 [ 1297.690287][T18660] queue_oob+0x42c/0x4f0 [ 1297.690318][T18660] ? __pfx_queue_oob+0x10/0x10 [ 1297.690337][T18660] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1297.690359][T18660] unix_stream_sendmsg+0xcb1/0xe80 [ 1297.690377][T18660] ? finish_task_switch+0x41f/0xbe0 [ 1297.690399][T18660] ? rcu_is_watching+0x15/0xb0 [ 1297.690416][T18660] ? trace_sched_exit_tp+0x3a/0x130 [ 1297.690429][T18660] ? __lock_acquire+0x6b5/0x2cf0 [ 1297.690444][T18660] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1297.690463][T18660] ? plist_check_list+0x2f4/0x310 [ 1297.690536][T18660] ? aa_sock_msg_perm+0xda/0x1b0 [ 1297.690559][T18660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1297.690578][T18660] ____sys_sendmsg+0x972/0x9f0 [ 1297.690592][T18660] ? __might_fault+0xaf/0x130 [ 1297.690613][T18660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1297.690629][T18660] ? import_iovec+0x73/0xa0 [ 1297.690648][T18660] ___sys_sendmsg+0x2a5/0x360 [ 1297.690661][T18660] ? __lock_acquire+0x6b5/0x2cf0 [ 1297.690677][T18660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.690693][T18660] ? __pfx_futex_wake_mark+0x10/0x10 [ 1297.690720][T18660] ? __fget_files+0x2a/0x420 [ 1297.690737][T18660] ? __fget_files+0x3a0/0x420 [ 1297.690757][T18660] __sys_sendmmsg+0x27c/0x4e0 [ 1297.690772][T18660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1297.690785][T18660] ? do_futex+0x333/0x420 [ 1297.690803][T18660] ? __pfx_do_fcntl+0x10/0x10 [ 1297.690828][T18660] ? rcu_is_watching+0x15/0xb0 [ 1297.690846][T18660] __x64_sys_sendmmsg+0xa0/0xc0 [ 1297.690860][T18660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.690874][T18660] do_syscall_64+0x174/0x580 [ 1297.690888][T18660] ? trace_irq_disable+0x3b/0x140 [ 1297.690910][T18660] ? clear_bhb_loop+0x40/0x90 [ 1297.690925][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.690940][T18660] RIP: 0033:0x7fe63bb9ce59 [ 1297.690954][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.690967][T18660] RSP: 002b:00007fe63ca8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1297.690983][T18660] RAX: ffffffffffffffda RBX: 00007fe63be15fa0 RCX: 00007fe63bb9ce59 [ 1297.690994][T18660] RDX: 0000000000000001 RSI: 0000200000011500 RDI: 0000000000000003 [ 1297.691003][T18660] RBP: 00007fe63bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1297.691013][T18660] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1297.691022][T18660] R13: 00007fe63be16038 R14: 00007fe63be15fa0 R15: 00007fe63bf3fa48 [ 1297.691038][T18660] [ 1298.004444][T13910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.025885][T13910] usb 1-1: config 0 descriptor?? [ 1298.033540][T13910] hub 1-1:0.0: USB hub found [ 1298.236454][T13910] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1298.640451][T13910] hid-generic 0003:046D:C31C.00D2: item fetching failed at offset 0/1 [ 1298.649094][T13910] hid-generic 0003:046D:C31C.00D2: probe with driver hid-generic failed with error -22 [ 1298.948072][T13910] usb 1-1: USB disconnect, device number 51 [ 1299.878783][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.885199][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.438090][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog