last executing test programs: 3.562670014s ago: executing program 2 (id=19474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010140, 0x0, 0x1}]}) 3.42536688s ago: executing program 2 (id=19475): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x0, &(0x7f0000000040)={0xa, "810556c721393f4084c89ea7f77d040b00"}}) 2.100798709s ago: executing program 0 (id=19491): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000000480)="6d2a65ae02757852a6ed5daf913a72f357dc5ebe701db12878f722227dd5bf847c6af1b201b40923af62fbe4f3253117", 0x30}, {&(0x7f00000005c0)="6deba0d7b2d8c9f7cc474a6625a441813d45f7caa7a6d1b94b8ec5218ddb122e8a39ecc4042a311ea29cf38f40eb6d58482309a8cad2190b03716ee77e39f4ad1b3d79a8902bd89f3cda06f277ac4decb0e743b476bd4fb1d92132379d081147c055b4a466d6c643f10b8f660000", 0x6e}, {&(0x7f0000000640)="e0bfaaf172d16d278c61d67afe29712b5491df29cc6a82b050f06d29559f17a90354f0ede466ef3d1bfe", 0x2a}, {&(0x7f0000001700)="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", 0x632}], 0x4, &(0x7f0000000800)=ANY=[], 0x158}}], 0x1, 0x20000811) 2.099064691s ago: executing program 4 (id=19493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)) 2.021876237s ago: executing program 0 (id=19495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7}, {@in6=@loopback, 0x0, 0x32}, @in6=@private0, {0x0, 0x0, 0xffffffffffffffff, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x4}, {0x3bc7, 0x7, 0x9}, {0x2, 0x0, 0xffffffff}, 0x1070bd2d, 0x800000, 0x2, 0x4, 0xfe, 0x4e}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x64014}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f00000017c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.889665013s ago: executing program 2 (id=19498): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x8, 0xd0d6a}) 1.881506313s ago: executing program 4 (id=19499): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x80000001, 0x4) 1.751759293s ago: executing program 2 (id=19501): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="1800020002"]) 1.739633622s ago: executing program 1 (id=19502): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x248100, 0x2c) unshare(0xa000400) getdents(r0, 0x0, 0x0) 1.613611481s ago: executing program 2 (id=19503): r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 1.601344391s ago: executing program 1 (id=19504): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2, 0x0, 0x4, 0x7, 0xb}, 0x20) 1.459487956s ago: executing program 3 (id=19506): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180)={0x0, 0x2}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x40}, 0x2) 1.411130489s ago: executing program 1 (id=19507): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000000)=""/2, 0x7, 0x200004) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) 1.389463954s ago: executing program 0 (id=19508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003070000001408000c"], 0xb4}, 0x1, 0x0, 0x0, 0x20008801}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.300864547s ago: executing program 0 (id=19509): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xbe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, {0xa, 0x4e22, 0xfffffffd, @mcast2, 0x8000}, r1, 0x9}}, 0x48) 1.299986179s ago: executing program 1 (id=19510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 1.265865147s ago: executing program 0 (id=19511): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x840, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 1.222869724s ago: executing program 4 (id=19512): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x400}) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 1.15953766s ago: executing program 4 (id=19513): socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 1.109271187s ago: executing program 3 (id=19514): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 999.309152ms ago: executing program 3 (id=19515): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2}) 943.688011ms ago: executing program 3 (id=19516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5f) 836.983048ms ago: executing program 3 (id=19517): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x8}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43, 0x300}}}, 0x10) 818.762994ms ago: executing program 3 (id=19518): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) 640.518368ms ago: executing program 2 (id=19519): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) 550.198605ms ago: executing program 4 (id=19520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x66) 543.227948ms ago: executing program 1 (id=19521): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 358.311022ms ago: executing program 0 (id=19522): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 232.995562ms ago: executing program 4 (id=19523): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 1 (id=19524): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) fcntl$getflags(r0, 0x401) kernel console output (not intermixed with test programs): : SerialNumber: syz [ 982.852246][ T8887] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 982.885408][ T8887] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 982.901413][ T8887] usb 4-1: unit 159 not found! [ 982.998582][ T8887] usb 4-1: USB disconnect, device number 15 [ 983.483313][T11915] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.18105'. [ 983.518264][T11915] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.18105'. [ 983.601446][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18107'. [ 983.646841][T11920] netlink: 'syz.2.18107': attribute type 2 has an invalid length. [ 983.684162][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18107'. [ 983.881083][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18111'. [ 983.915628][T11929] batadv_slave_0: Device is already in use. [ 984.153760][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18115'. [ 984.215396][T11940] ip6gre2: entered promiscuous mode [ 984.236526][T11940] ip6gre2: entered allmulticast mode [ 984.250423][T11944] input: syz1 as /devices/virtual/input/input181 [ 984.446244][T11954] Context (ID=0x1) not attached to queue pair (handle=0x0:0xae) [ 984.491395][T11959] netlink: 'syz.2.18125': attribute type 14 has an invalid length. [ 985.513730][T12020] netlink: 'syz.1.18153': attribute type 32 has an invalid length. [ 985.547270][T12020] netlink: 588 bytes leftover after parsing attributes in process `syz.1.18153'. [ 985.835566][T12036] sctp: [Deprecated]: syz.2.18161 (pid 12036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.835566][T12036] Use struct sctp_sack_info instead [ 985.937492][ T8896] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 985.957184][ T8900] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 986.012081][T12049] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18168'. [ 986.109508][ T8896] usb 4-1: Using ep0 maxpacket: 32 [ 986.119016][ T8900] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 986.122254][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.142868][ T8900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.150495][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.172492][ T8900] usb 2-1: config 0 descriptor?? [ 986.183237][ T8896] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 986.213761][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.241470][ T8896] usb 4-1: config 0 descriptor?? [ 986.254509][ T8896] hub 4-1:0.0: USB hub found [ 986.395230][ T8900] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 986.466718][ T8896] hub 4-1:0.0: 1 port detected [ 986.639998][ T8900] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 986.660254][ T8900] [drm] Initialized udl on minor 2 [ 986.810096][ T8900] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 986.821416][ T8900] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 986.877395][ T8896] usb 4-1: USB disconnect, device number 16 [ 987.034877][ T8900] usb 2-1: USB disconnect, device number 20 [ 987.041337][ T8885] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 987.074574][ T8885] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 987.628531][ T8900] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 987.670408][T12104] IPv6: NLM_F_CREATE should be specified when creating new route [ 987.788867][ T8900] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 987.808535][ T8900] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 987.833465][ T8900] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 987.853211][ T8900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.883409][T12089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 987.912235][ T8900] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 988.155657][T12126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 988.199337][ T8900] usb 5-1: USB disconnect, device number 20 [ 989.017167][ T8885] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 989.187425][ T8885] usb 3-1: Using ep0 maxpacket: 8 [ 989.199041][ T8885] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 989.207878][ T8885] usb 3-1: config 179 has no interface number 0 [ 989.214269][ T8885] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 989.235439][ T8885] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 989.259571][ T8885] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 989.271521][ T8885] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 989.284247][ T8885] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 989.300265][ T8900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 989.308330][ T8885] usb 3-1: config 179 interface 65 has no altsetting 0 [ 989.316211][ T8885] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 989.329737][ T8885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.374827][ T8885] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input182 [ 989.428051][ T4986] input input182: unable to receive magic message: -110 [ 989.450534][ T4986] input input182: unable to receive magic message: -32 [ 989.474369][ T8900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 989.491750][ T4986] input input182: unable to receive magic message: -32 [ 989.500622][ T8900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 989.514907][ T6675] input input182: unable to receive magic message: -32 [ 989.519122][ T8900] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 989.531574][ T8900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.539800][ T4986] input input182: unable to receive magic message: -32 [ 989.555217][ T4986] input input182: unable to receive magic message: -32 [ 989.562141][ T8900] usb 4-1: Product: syz [ 989.562182][ T8900] usb 4-1: Manufacturer: syz [ 989.562196][ T8900] usb 4-1: SerialNumber: syz [ 989.568655][ T8900] usb 4-1: config 0 descriptor?? [ 989.590202][T12158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.607711][T12158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.616153][ T4986] input input182: unable to receive magic message: -32 [ 989.727395][ T8896] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 989.794906][ T9541] usb 3-1: USB disconnect, device number 13 [ 989.800991][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 989.835620][T12158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.859214][T12158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.881367][T12176] bridge_slave_0: default FDB implementation only supports local addresses [ 989.901356][ T8896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.917425][ T8896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.929401][ T8896] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 989.940796][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.952801][ T8896] usb 5-1: config 0 descriptor?? [ 990.278362][ T8900] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 990.374392][ T8896] hid_parser_main: 474 callbacks suppressed [ 990.374414][ T8896] hid-led 0003:1D34:000A.009A: unknown main item tag 0x3 [ 990.479977][ T8900] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 990.492964][ T8900] usb 4-1: USB disconnect, device number 17 [ 990.566743][ T8896] hid-led 0003:1D34:000A.009A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 990.603551][ T8896] hid-led 0003:1D34:000A.009A: Dream Cheeky Webmail Notifier initialized [ 990.637420][ T8885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 990.768045][ T9541] usb 5-1: USB disconnect, device number 21 [ 990.797098][ T8885] usb 3-1: Using ep0 maxpacket: 8 [ 990.804812][ T8885] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 990.813364][ T8885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.825413][ T8885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 990.835619][ T8885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 990.845981][ T8885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.859347][ T8885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 990.868949][ T8885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.085339][ T8885] usb 3-1: GET_CAPABILITIES returned 0 [ 991.092014][ T8885] usbtmc 3-1:16.0: can't read capabilities [ 991.298271][ T8885] usb 3-1: USB disconnect, device number 14 [ 991.897250][ T8900] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 992.048838][ T8900] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.060668][ T8900] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.072135][ T8885] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 992.079893][ T8900] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 992.091849][ T8900] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 992.101243][ T8900] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 992.109638][ T8900] usb 5-1: Manufacturer: syz [ 992.114257][ T8900] usb 5-1: SerialNumber: syz [ 992.187641][ T8896] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 992.238789][ T8885] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 992.246876][ T8885] usb 3-1: config 0 has no interface number 0 [ 992.253465][ T8885] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 992.265592][ T8885] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.276871][ T8885] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 992.289271][ T8885] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 992.298382][ T8885] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 992.306923][ T8885] usb 3-1: Product: syz [ 992.311776][ T8885] usb 3-1: SerialNumber: syz [ 992.319772][ T8885] usb 3-1: config 0 descriptor?? [ 992.331313][ T8885] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 992.341924][ T8900] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 992.347434][ T8896] usb 4-1: Using ep0 maxpacket: 8 [ 992.361581][ T8896] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 992.371629][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.382329][ T8900] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input187 [ 992.393001][ T8885] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input186 [ 992.398312][ T8896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 992.411727][ T8896] pvrusb2: ********** [ 992.416197][ T8896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 992.431144][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.437695][ T8896] pvrusb2: Important functionality might not be entirely working. [ 992.438183][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.446306][ T8896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 992.453946][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.466811][ T8896] pvrusb2: ********** [ 992.472161][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.483340][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.491249][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.499470][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.506698][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 992.513497][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 992.540501][ T8900] usb 5-1: USB disconnect, device number 22 [ 992.606954][ T2370] pvrusb2: Invalid write control endpoint [ 992.691110][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 992.691477][ T8896] usb 3-1: USB disconnect, device number 15 [ 992.698090][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 992.711459][ T2370] pvrusb2: Invalid write control endpoint [ 992.721153][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 992.731714][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 992.737902][ T8896] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 992.743495][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 992.758885][ T2370] pvrusb2: Device being rendered inoperable [ 992.769929][ T2370] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 992.778524][ T2370] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 992.786856][ T2370] pvrusb2: Attached sub-driver cx25840 [ 992.792426][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 992.809121][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 992.819718][ T8887] usb 4-1: USB disconnect, device number 18 [ 992.899913][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.906298][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.907189][ T8900] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 993.068637][ T8900] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.080624][ T8900] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 993.091745][ T8900] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 993.103579][ T8900] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 993.112744][ T8900] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 993.121214][ T8900] usb 5-1: Manufacturer: syz [ 993.125901][ T8900] usb 5-1: SerialNumber: syz [ 993.263280][T12225] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18249'. [ 993.343120][ T8900] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 993.353348][ T8900] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input188 [ 993.368828][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.375822][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.382848][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.390115][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.397336][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.404325][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.411344][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.418380][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 993.425269][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 993.447204][ T8900] usb 5-1: USB disconnect, device number 23 [ 993.567677][ T8896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 993.747455][ T8896] usb 3-1: Using ep0 maxpacket: 32 [ 993.759154][ T8896] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 993.772386][ T8896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.780094][ T8896] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 993.790204][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.801944][ T8896] usb 3-1: config 0 descriptor?? [ 994.330957][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18270'. [ 994.524883][T12279] program syz.4.18274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.594192][ T8896] corsair-cpro 0003:1B1C:0C10.009B: unknown main item tag 0x0 [ 994.606423][ T8896] corsair-cpro 0003:1B1C:0C10.009B: unknown main item tag 0x0 [ 994.614890][ T8896] corsair-cpro 0003:1B1C:0C10.009B: unknown main item tag 0x0 [ 994.622853][ T8896] corsair-cpro 0003:1B1C:0C10.009B: unknown main item tag 0x0 [ 994.633330][ T8896] corsair-cpro 0003:1B1C:0C10.009B: unknown main item tag 0x0 [ 994.644832][ T8896] corsair-cpro 0003:1B1C:0C10.009B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 994.797240][ T8900] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 994.957417][ T8900] usb 4-1: Using ep0 maxpacket: 8 [ 994.966389][ T8900] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 994.985780][ T8900] usb 4-1: config 179 has no interface number 0 [ 995.002796][ T8900] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 995.029248][ T8900] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 995.049094][ T8900] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 995.050341][ T8896] corsair-cpro 0003:1B1C:0C10.009B: probe with driver corsair-cpro failed with error -110 [ 995.071445][ T8900] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 995.107880][ T8900] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 995.109331][ T8896] usb 3-1: USB disconnect, device number 16 [ 995.135253][ T8900] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 995.159777][ T8900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.186126][T12281] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 995.446892][ T8900] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input189 [ 995.632421][ T8900] usb 4-1: USB disconnect, device number 19 [ 995.638704][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 995.638756][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 995.676195][T12314] IPv6: NLM_F_CREATE should be specified when creating new route [ 996.015329][T12327] tipc: Enabling of bearer rejected, already enabled [ 996.120599][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18298'. [ 996.178214][ T8896] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 996.246667][T12342] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.18301'. [ 996.256578][T12342] openvswitch: netlink: Message has 16 unknown bytes. [ 996.350436][ T8896] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.372574][ T8896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 996.389744][ T8896] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 996.409283][ T8896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.436495][ T8896] usb 2-1: config 0 descriptor?? [ 996.460688][T12352] trusted_key: encrypted_key: keyword 'updatP' not recognized [ 996.535889][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18308'. [ 996.861384][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.870427][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.889002][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.901980][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x4 [ 996.911698][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.919225][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.926489][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.948136][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x2 [ 996.956397][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.966658][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.975709][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 996.993067][ T8896] semitek 0003:1EA7:0907.009C: unknown main item tag 0x0 [ 997.011462][ T8896] semitek 0003:1EA7:0907.009C: item fetching failed at offset 40/41 [ 997.023241][T12378] veth1_to_bond: Caught tx_queue_len zero misconfig [ 997.023276][ T8896] semitek 0003:1EA7:0907.009C: probe with driver semitek failed with error -22 [ 997.085696][ T8885] usb 2-1: USB disconnect, device number 21 [ 997.293686][T12394] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18324'. [ 997.837517][ T8900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 998.008882][ T8900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.025488][ T8900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.036685][ T8900] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 998.048156][ T8900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.059489][ T8900] usb 4-1: config 0 descriptor?? [ 998.120598][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18341'. [ 998.130262][T12435] netem: unknown loss type 11 [ 998.136891][T12435] netem: change failed [ 998.177487][ T8885] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 998.339867][ T8885] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 998.351913][ T8885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 998.364893][ T8885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 998.376178][ T8885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.396865][ T8885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.412366][ T8885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.492629][ T8900] stadia 0003:18D1:9400.009D: unbalanced delimiter at end of report description [ 998.507967][ T8900] stadia 0003:18D1:9400.009D: parse failed [ 998.514722][ T8900] stadia 0003:18D1:9400.009D: probe with driver stadia failed with error -22 [ 998.631951][ T8885] usb 2-1: GET_CAPABILITIES returned 0 [ 998.638771][ T8885] usbtmc 2-1:16.0: can't read capabilities [ 998.689792][ T8896] usb 4-1: USB disconnect, device number 20 [ 998.855149][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 998.867798][T12429] usbtmc 2-1:16.0: Unable to send data, error -71 [ 998.877897][ T8885] usb 2-1: USB disconnect, device number 22 [ 999.314419][T12476] block device autoloading is deprecated and will be removed. [ 999.691480][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18370'. [ 999.817369][ T8900] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 999.969770][ T8900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 999.978418][ T8900] usb 4-1: config 0 has no interface number 0 [ 999.984557][ T8900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 999.995958][ T8900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1000.007884][ T8900] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1000.016941][ T8900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.027322][ T8900] usb 4-1: config 0 descriptor?? [ 1000.034477][T12495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1000.048584][ T8900] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1000.067387][ T8885] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1000.227918][ T8885] usb 2-1: Using ep0 maxpacket: 16 [ 1000.234646][ T8885] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.256413][ T8885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1000.264114][ T8885] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1000.273951][ T8885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.285935][ T8900] usb 4-1: USB disconnect, device number 21 [ 1000.299923][ T8885] usb 2-1: config 0 descriptor?? [ 1000.722394][ T8885] nzxt-smart2 0003:1E71:2009.009E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1000.820127][ T8896] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1000.987583][ T8896] usb 3-1: Using ep0 maxpacket: 32 [ 1000.994995][ T8896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.005365][ T8896] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1001.014709][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.025784][ T8896] usb 3-1: config 0 descriptor?? [ 1001.077918][ T8887] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1001.127586][ T8885] usb 2-1: USB disconnect, device number 23 [ 1001.242467][ T8887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.255125][ T8896] usb 3-1: string descriptor 0 read error: -71 [ 1001.270885][ T8896] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1001.278800][ T8887] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1001.295699][ T8887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.308849][ T8896] usb 3-1: USB disconnect, device number 17 [ 1001.334447][ T8887] usb 4-1: config 0 descriptor?? [ 1001.751583][T12528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.778272][T12528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.831335][ T8887] sunplus 0003:04FC:05D8.009F: item fetching failed at offset 40/41 [ 1001.844072][ T8887] sunplus 0003:04FC:05D8.009F: probe with driver sunplus failed with error -22 [ 1002.056666][ T8885] usb 4-1: USB disconnect, device number 22 [ 1002.348104][T12563] netlink: 'syz.4.18399': attribute type 12 has an invalid length. [ 1002.356416][T12563] netlink: 'syz.4.18399': attribute type 44 has an invalid length. [ 1002.395224][T12565] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 1002.653095][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18406'. [ 1002.670170][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18406'. [ 1002.777213][ T8885] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1002.809713][T12588] Invalid logical block size (255) [ 1002.882964][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1002.882980][ T29] audit: type=1326 audit(1781270569.426:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1002.932882][ T8885] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1002.937942][ T29] audit: type=1326 audit(1781270569.426:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1002.947379][ T8885] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1002.967063][ T29] audit: type=1326 audit(1781270569.426:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1003.016014][ T29] audit: type=1326 audit(1781270569.426:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1003.024633][ T8885] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.054216][ T8885] usb 5-1: config 220 has no interface number 2 [ 1003.063517][ T8885] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1003.077872][ T29] audit: type=1326 audit(1781270569.466:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1003.103305][ T8885] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1003.111170][ T8885] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1003.113118][ T29] audit: type=1326 audit(1781270569.516:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96f59ce59 code=0x7ffc0000 [ 1003.119232][ T8885] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1003.146140][ T29] audit: type=1326 audit(1781270569.516:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa96f59cbc2 code=0x7ffc0000 [ 1003.199512][ T8885] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1003.209022][ T29] audit: type=1326 audit(1781270569.516:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa96f59cc57 code=0x7ffc0000 [ 1003.234630][ T29] audit: type=1326 audit(1781270569.516:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa96f559b51 code=0x7ffc0000 [ 1003.237483][ T8885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.262023][ T29] audit: type=1326 audit(1781270569.516:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.2.18414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa96f59dc49 code=0x7ffc0000 [ 1003.307222][ T8885] usb 5-1: Product: syz [ 1003.312946][ T8885] usb 5-1: Manufacturer: syz [ 1003.328314][ T8885] usb 5-1: SerialNumber: syz [ 1003.558981][ T8885] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1003.577417][ T8885] uvcvideo 5-1:220.0: No valid video chain found. [ 1003.590490][ T8885] usb 5-1: selecting invalid altsetting 0 [ 1003.634861][ T8885] usb 5-1: selecting invalid altsetting 0 [ 1003.651083][ T8885] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1003.692404][ T8885] usb 5-1: USB disconnect, device number 24 [ 1003.874506][T12618] veth0: entered promiscuous mode [ 1003.892283][T12618] veth0: left promiscuous mode [ 1004.075884][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18429'. [ 1004.441481][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18438'. [ 1004.457700][ T8887] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1004.499497][T12653] netlink: 'syz.3.18439': attribute type 1 has an invalid length. [ 1004.509283][T12653] netlink: 'syz.3.18439': attribute type 2 has an invalid length. [ 1004.519402][T12653] netlink: 'syz.3.18439': attribute type 1 has an invalid length. [ 1004.536247][T12653] netlink: 'syz.3.18439': attribute type 2 has an invalid length. [ 1004.627594][ T8887] usb 2-1: Using ep0 maxpacket: 8 [ 1004.638819][ T8887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1004.660073][ T8887] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1004.678598][ T8887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.695260][ T8887] usb 2-1: config 0 descriptor?? [ 1004.720050][T12661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1004.911115][ T8887] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1006.174283][T12720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18470'. [ 1006.190896][ T8887] usb 2-1: USB disconnect, device number 24 [ 1006.536819][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18478'. [ 1007.331832][T12777] erspan0: entered promiscuous mode [ 1007.356325][T12777] bridge0: port 3(syz_tun) entered blocking state [ 1007.363315][T12777] bridge0: port 3(syz_tun) entered listening state [ 1007.374920][T12777] bridge0: left promiscuous mode [ 1007.379534][T12780] netlink: 67 bytes leftover after parsing attributes in process `syz.2.18496'. [ 1007.381640][ T8900] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1007.400023][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.425855][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.452835][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.521815][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.538853][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.550358][T12777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1007.552754][T12785] ALSA: mixer_oss: invalid OSS volume '' [ 1007.561393][ T8900] usb 2-1: Using ep0 maxpacket: 16 [ 1007.572505][T12777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1007.582345][T12785] ALSA: mixer_oss: invalid OSS volume '' [ 1007.584755][ T8900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.599846][ T8900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.623137][T12777] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1007.645298][ T8900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1007.670288][ T8900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1007.692414][ T8900] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.718810][ T8900] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1007.728209][ T8900] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1007.736300][ T8900] usb 2-1: Manufacturer: syz [ 1007.749932][ T8900] usb 2-1: config 0 descriptor?? [ 1007.771326][T12780] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1007.799881][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.807346][ T1113] bridge0: port 1(bridge_slave_0) entered listening state [ 1007.838104][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.845349][ T1113] bridge0: port 2(bridge_slave_1) entered listening state [ 1007.948787][ T8901] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1008.047442][ T8900] rc_core: IR keymap rc-hauppauge not found [ 1008.053651][ T8900] Registered IR keymap rc-empty [ 1008.059249][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.077417][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.098417][ T8900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1008.115316][ T8901] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1008.125817][ T8900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input191 [ 1008.139249][ T8901] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1008.150671][ T8901] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.162508][ T8901] usb 5-1: config 220 has no interface number 2 [ 1008.170483][ T8901] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1008.183979][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.193117][ C1] mceusb 2-1:0.0: long-range (0x81) receiver active [ 1008.217346][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.227668][ T8901] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1008.234654][ T8901] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1008.242839][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.252212][ T8901] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1008.263304][ T8901] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1008.272876][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.280602][ T8901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.289132][ T8901] usb 5-1: Product: syz [ 1008.293521][ T8901] usb 5-1: Manufacturer: syz [ 1008.298691][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.306122][ T8901] usb 5-1: SerialNumber: syz [ 1008.317521][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.337350][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.357216][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.377540][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.397198][ T8900] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.420972][ T8900] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1008.430601][ T8900] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x81 active) [ 1008.447779][T25339] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1008.537799][ T8896] usb 2-1: USB disconnect, device number 25 [ 1008.539423][ T8901] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1008.559654][ T8901] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1008.571750][ T8901] uvcvideo 5-1:220.0: No valid video chain found. [ 1008.580822][ T8901] usb 5-1: selecting invalid altsetting 0 [ 1008.617922][T25339] usb 4-1: Using ep0 maxpacket: 16 [ 1008.624640][T25339] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1008.638124][ T8901] usb 5-1: selecting invalid altsetting 0 [ 1008.651371][T25339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1008.663751][ T8901] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1008.679406][ T8901] usb 5-1: USB disconnect, device number 25 [ 1008.696198][T25339] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1008.717086][T25339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.741358][T25339] usb 4-1: Product: syz [ 1008.748603][T25339] usb 4-1: Manufacturer: syz [ 1008.757100][T25339] usb 4-1: SerialNumber: syz [ 1008.769090][T25339] usb 4-1: config 0 descriptor?? [ 1008.780805][T25339] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1008.796647][T25339] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1008.965000][T12814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18511'. [ 1009.018079][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1009.386718][T25339] em28xx 4-1:0.0: chip ID is em2860 [ 1009.592519][T25339] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1009.616049][T25339] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1009.623997][T25339] em28xx 4-1:0.0: No AC97 audio processor [ 1009.640527][T25339] usb 4-1: USB disconnect, device number 23 [ 1009.649146][T25339] em28xx 4-1:0.0: Disconnecting em28xx [ 1009.665988][T25339] em28xx 4-1:0.0: Freeing device [ 1010.564436][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.713174][T12896] netlink: 889 bytes leftover after parsing attributes in process `syz.4.18550'. [ 1011.054514][T12920] loop9: detected capacity change from 0 to 7 [ 1011.065470][T12920] Dev loop9: unable to read RDB block 7 [ 1011.072122][T12920] loop9: unable to read partition table [ 1011.078720][T12920] loop9: partition table beyond EOD, truncated [ 1011.094189][T12920] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 1011.107908][T25339] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1011.154122][T12921] Dev loop9: unable to read RDB block 7 [ 1011.166264][T12921] loop9: unable to read partition table [ 1011.180495][T12921] loop9: partition table beyond EOD, truncated [ 1011.186837][T12921] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 1011.300491][T25339] usb 2-1: Using ep0 maxpacket: 8 [ 1011.309081][T25339] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.324490][T25339] usb 2-1: config 0 has no interface number 0 [ 1011.345154][T25339] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1011.358052][T25339] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1011.367388][T25339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.368418][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18566'. [ 1011.378316][T25339] usb 2-1: config 0 descriptor?? [ 1011.426676][T25339] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1011.641117][T25339] usb 2-1: USB disconnect, device number 26 [ 1011.996571][T12969] sctp: [Deprecated]: syz.2.18584 (pid 12969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1011.996571][T12969] Use struct sctp_sack_info instead [ 1012.242190][T12987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.402707][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18594'. [ 1012.962621][T13019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.964921][T13023] loop9: detected capacity change from 0 to 8 [ 1013.119837][T13023] loop9: detected capacity change from 8 to 7 [ 1013.166638][ C0] blk_print_req_error: 10 callbacks suppressed [ 1013.166655][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.182105][ C0] buffer_io_error: 10 callbacks suppressed [ 1013.182120][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.201213][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.210449][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.219456][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.228644][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.237786][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.246949][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.259726][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.269012][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.277833][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.287036][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.295638][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.304870][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.321802][T13023] ldm_validate_partition_table(): Disk read failed. [ 1013.342758][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.352022][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.390403][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.399627][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.409821][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.419025][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1013.428904][T13023] Dev loop9: unable to read RDB block 0 [ 1013.453098][T13023] loop9: unable to read partition table [ 1013.491200][T13023] loop9: partition table beyond EOD, truncated [ 1013.530387][T13023] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 1013.676602][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.903118][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.106428][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 1014.106444][ T29] audit: type=1326 audit(1781270580.646:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.147783][T25339] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1014.175966][ T29] audit: type=1326 audit(1781270580.646:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.210557][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.255646][ T29] audit: type=1326 audit(1781270580.656:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.298792][ T29] audit: type=1326 audit(1781270580.656:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.336593][T25339] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1014.364771][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1014.410756][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1014.422118][T25339] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.432510][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1014.439865][T25339] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.462904][ T29] audit: type=1326 audit(1781270580.656:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.488170][T25339] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1014.488370][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1014.494846][T25339] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1014.503508][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.523103][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1014.523478][ T29] audit: type=1326 audit(1781270580.656:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a7395d68e code=0x7ffc0000 [ 1014.558085][T25339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.570431][T25339] usb 3-1: config 0 descriptor?? [ 1014.575788][ T29] audit: type=1326 audit(1781270580.656:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.601688][ T29] audit: type=1326 audit(1781270580.656:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.689850][ T29] audit: type=1326 audit(1781270580.656:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1014.730643][ T29] audit: type=1326 audit(1781270580.656:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.18628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1015.042339][T25339] holtek 0003:1241:5015.00A0: ignoring exceeding usage max [ 1015.065080][T25339] holtek 0003:1241:5015.00A0: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 1015.082202][T25339] holtek 0003:1241:5015.00A0: no inputs found [ 1015.143854][ T1126] team0: left allmulticast mode [ 1015.167830][ T1126] team_slave_0: left allmulticast mode [ 1015.188869][ T1126] team_slave_1: left allmulticast mode [ 1015.209983][ T1126] team0: left promiscuous mode [ 1015.221286][ T1126] team_slave_0: left promiscuous mode [ 1015.236380][ T1126] team_slave_1: left promiscuous mode [ 1015.254920][ T8901] usb 3-1: USB disconnect, device number 18 [ 1015.263610][ T1126] bridge0: port 3(team0) entered disabled state [ 1015.290384][ T1126] bridge_slave_1: left allmulticast mode [ 1015.303536][ T1126] bridge_slave_1: left promiscuous mode [ 1015.315200][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.338437][ T1126] bridge_slave_0: left allmulticast mode [ 1015.357477][ T1126] bridge_slave_0: left promiscuous mode [ 1015.370647][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.084252][ T1126] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1016.109575][T13120] sctp: [Deprecated]: syz.2.18645 (pid 13120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1016.109575][T13120] Use struct sctp_sack_info instead [ 1016.345815][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.362246][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.379756][ T1126] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1016.396611][ T1126] bond0 (unregistering): Released all slaves [ 1016.410420][ T1126] bond1 (unregistering): Released all slaves [ 1016.428855][ T1126] bond2 (unregistering): Released all slaves [ 1016.467502][T25339] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1016.480604][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1016.657499][ T5643] Bluetooth: hci3: command tx timeout [ 1016.662578][T25339] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1016.727780][T25339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.781112][ T1126] : left promiscuous mode [ 1016.881038][T25339] usb 3-1: config 0 descriptor?? [ 1017.123241][T25339] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1017.327476][T25339] [drm:udl_init] *ERROR* Selecting channel failed [ 1017.366595][T25339] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1017.404137][T25339] [drm] Initialized udl on minor 2 [ 1017.424094][ T1126] tipc: Disabling bearer [ 1017.463388][T25339] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1017.471318][ T1126] tipc: Left network mode [ 1017.472263][T13076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.485856][T25339] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1017.512593][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.542972][ T8897] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1017.545937][T13076] bridge_slave_0: entered allmulticast mode [ 1017.551521][T25339] usb 3-1: USB disconnect, device number 19 [ 1017.571413][ T8897] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1017.612967][T13076] bridge_slave_0: entered promiscuous mode [ 1017.652555][T13076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.684646][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.703438][T13076] bridge_slave_1: entered allmulticast mode [ 1017.730406][T13076] bridge_slave_1: entered promiscuous mode [ 1017.837157][ T9541] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1017.894550][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.919660][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1017.942903][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.033023][ T9541] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1018.065384][ T9541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.078880][T13076] team0: Port device team_slave_0 added [ 1018.099167][ T9541] usb 2-1: Product: syz [ 1018.106640][T13076] team0: Port device team_slave_1 added [ 1018.115459][ T9541] usb 2-1: Manufacturer: syz [ 1018.130673][ T9541] usb 2-1: SerialNumber: syz [ 1018.314802][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.340650][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.408468][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.469508][ T9541] rtl8150 2-1:1.0: couldn't reset the device [ 1018.488133][ T9541] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1018.518866][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.523552][ T9541] usb 2-1: USB disconnect, device number 27 [ 1018.541341][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.620306][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.737318][ T5643] Bluetooth: hci3: command tx timeout [ 1018.922380][T13076] hsr_slave_0: entered promiscuous mode [ 1018.960353][T13076] hsr_slave_1: entered promiscuous mode [ 1018.972629][T13076] debugfs: 'hsr0' already exists in 'hsr' [ 1019.003866][T13076] Cannot create hsr debugfs directory [ 1019.464613][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1019.464631][ T29] audit: type=1326 audit(1781270586.006:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.528286][ T29] audit: type=1326 audit(1781270586.006:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.558843][ T29] audit: type=1326 audit(1781270586.046:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.585786][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1019.596312][ T29] audit: type=1326 audit(1781270586.056:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.626645][ T29] audit: type=1326 audit(1781270586.056:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.652856][ T29] audit: type=1326 audit(1781270586.066:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.726429][ T29] audit: type=1326 audit(1781270586.066:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.861749][ T29] audit: type=1326 audit(1781270586.066:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1019.933902][ T29] audit: type=1326 audit(1781270586.236:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1020.035596][ T29] audit: type=1326 audit(1781270586.236:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.1.18676" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7399ce59 code=0x7ffc0000 [ 1020.819096][ T5643] Bluetooth: hci3: command tx timeout [ 1020.848131][ T1126] hsr_slave_0: left promiscuous mode [ 1020.867684][ T1126] hsr_slave_1: left promiscuous mode [ 1020.880891][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.898160][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.914773][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.932435][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.266648][T13283] netlink: 'syz.1.18695': attribute type 11 has an invalid length. [ 1021.275066][T13283] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.18695'. [ 1021.341529][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 1021.368764][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 1021.941383][ T9541] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1022.098220][ T9541] usb 3-1: Using ep0 maxpacket: 32 [ 1022.113278][ T9541] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1022.132900][ T9541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.205416][ T9541] usb 3-1: config 0 descriptor?? [ 1022.425207][ T9541] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1022.456116][ T9541] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1022.504743][ T9541] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1022.540283][ T9541] usb 3-1: media controller created [ 1022.600138][ T9541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.681524][ T9541] az6027: usb out operation failed. (-71) [ 1022.732359][ T9541] az6027: usb out operation failed. (-71) [ 1022.745034][ T9541] stb0899_attach: Driver disabled by Kconfig [ 1022.770740][ T9541] az6027: no front-end attached [ 1022.770740][ T9541] [ 1022.813109][ T9541] az6027: usb out operation failed. (-71) [ 1022.827820][ T8885] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1022.840157][ T9541] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1022.848386][T13076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.869232][ T9541] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input192 [ 1022.898548][ T5643] Bluetooth: hci3: command tx timeout [ 1022.906643][ T9541] dvb-usb: schedule remote query interval to 400 msecs. [ 1022.914105][ T9541] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1022.945928][T13076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.954537][T13076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1022.964305][ T9541] usb 3-1: USB disconnect, device number 20 [ 1022.977448][ C1] bridge0: port 3(syz_tun) entered learning state [ 1022.984048][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1022.991313][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1023.030196][ T8885] usb 2-1: Using ep0 maxpacket: 16 [ 1023.040236][T13076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.060129][ T8885] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1023.086118][T13076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.095886][ T8885] usb 2-1: config 0 has no interface number 0 [ 1023.114415][ T8885] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.132119][T13076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.139791][ T9541] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1023.154191][T13076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.162468][ T8885] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.203155][ T8885] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1023.222531][T13076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.242067][ T8885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.280202][ T8885] usb 2-1: config 0 descriptor?? [ 1023.314706][ T1126] IPVS: stop unused estimator thread 0... [ 1023.336482][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18710'. [ 1023.561921][T13076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.627640][T13076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.653877][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.661126][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.741066][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.744631][ T8885] mcp2221 0003:04D8:00DD.00A1: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 1023.748295][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.776802][T25339] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1023.871863][T13076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.959557][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18715'. [ 1023.969284][ T8885] usb 2-1: USB disconnect, device number 28 [ 1023.969310][T25339] usb 3-1: Using ep0 maxpacket: 8 [ 1023.997856][T25339] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1024.011313][T25339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.022327][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.031224][T13360] netlink: 'syz.0.18715': attribute type 21 has an invalid length. [ 1024.055465][T25339] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1024.076447][T25339] pvrusb2: ********** [ 1024.082740][T25339] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1024.093753][T25339] pvrusb2: Important functionality might not be entirely working. [ 1024.103559][T25339] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1024.120240][T25339] pvrusb2: ********** [ 1024.204732][T13076] veth0_vlan: entered promiscuous mode [ 1024.221483][T13076] veth1_vlan: entered promiscuous mode [ 1024.276837][ T2370] pvrusb2: Invalid write control endpoint [ 1024.324087][T13076] veth0_macvtap: entered promiscuous mode [ 1024.365746][T13076] veth1_macvtap: entered promiscuous mode [ 1024.414256][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.416944][ T2370] pvrusb2: Invalid write control endpoint [ 1024.449968][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.461632][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1024.481885][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1024.496533][ T1126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.504144][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1024.530572][ T2370] pvrusb2: Device being rendered inoperable [ 1024.536664][ T2370] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1024.545860][ T1126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.548361][ T8885] usb 3-1: USB disconnect, device number 21 [ 1024.573170][ T2370] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1024.577621][ T1126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.603699][ T2370] pvrusb2: Attached sub-driver cx25840 [ 1024.612941][ T1126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.616715][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1024.633379][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1024.678338][T25339] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1024.857507][T25339] usb 4-1: Using ep0 maxpacket: 16 [ 1024.875851][ T9558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.895116][ T9558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.911168][T25339] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1024.926020][T25339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.948363][T25339] usb 4-1: Product: syz [ 1024.970473][T25339] usb 4-1: Manufacturer: syz [ 1024.982496][T25339] usb 4-1: SerialNumber: syz [ 1024.996577][T25339] usb 4-1: config 0 descriptor?? [ 1025.011897][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.022501][T25339] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1025.030665][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.225193][T25339] usb 4-1: USB disconnect, device number 24 [ 1025.767178][ T9541] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1025.787137][T25339] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1025.927438][ T9541] usb 5-1: Using ep0 maxpacket: 8 [ 1025.941421][ T9541] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 1025.962766][ T9541] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1025.963619][T25339] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x5C, changing to 0xC [ 1025.976142][ T9541] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1025.996356][ T9541] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1026.005521][ T9541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.020944][T13423] sctp: [Deprecated]: syz.3.18726 (pid 13423) Use of int in max_burst socket option. [ 1026.020944][T13423] Use struct sctp_assoc_value instead [ 1026.036926][ T9541] usb 5-1: config 0 descriptor?? [ 1026.056562][T25339] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xC has invalid wMaxPacketSize 0 [ 1026.093283][T25339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1026.122621][T25339] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1026.142979][T25339] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1026.170111][T25339] usb 2-1: Product: syz [ 1026.180243][T25339] usb 2-1: Manufacturer: syz [ 1026.191836][T25339] usb 2-1: SerialNumber: syz [ 1026.211084][T25339] usb 2-1: config 0 descriptor?? [ 1026.232473][T25339] usb 2-1: selecting invalid altsetting 0 [ 1026.250049][ T9541] usbhid 5-1:0.0: can't add hid device: -71 [ 1026.273756][ T9541] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1026.309139][ T9541] usb 5-1: USB disconnect, device number 26 [ 1026.590553][T25339] usb 2-1: USB disconnect, device number 29 [ 1026.795019][ T8901] hid_parser_main: 14 callbacks suppressed [ 1026.795040][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.845895][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.857359][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.864830][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.880351][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.889872][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.894906][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18734'. [ 1026.899269][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.923479][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.931681][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.939237][ T8901] hid-generic 0000:0000:0004.00A2: unknown main item tag 0x0 [ 1026.971167][ T8901] hid-generic 0000:0000:0004.00A2: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1027.047357][ T8896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1027.055780][T13453] fido_id[13453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1027.197399][ T8896] usb 4-1: Using ep0 maxpacket: 16 [ 1027.204638][ T8896] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.219319][ T8896] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.230775][ T8896] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.241572][ T8896] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1027.257886][ T8896] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1027.264581][ T8896] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1027.274319][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.437289][ T8901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1027.590755][ T8901] usb 5-1: Using ep0 maxpacket: 32 [ 1027.605171][ T8901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.616741][ T9541] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1027.626294][ T8901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.636479][ T8901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1027.646052][ T8901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.659138][ T8901] usb 5-1: config 0 descriptor?? [ 1027.695081][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.717983][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.746854][ T8896] hid (null): unknown global tag 0xd [ 1027.767682][ T9541] usb 2-1: Using ep0 maxpacket: 16 [ 1027.776956][ T9541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.800399][ T9541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.809503][ T8896] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.00A3/input/input193 [ 1027.822298][ T9541] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1027.822348][ T9541] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1027.822369][ T9541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.896765][ T9541] usb 2-1: config 0 descriptor?? [ 1028.025749][ T8896] kye 0003:0458:5010.00A3: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 1028.064386][ T8896] usb 4-1: USB disconnect, device number 25 [ 1028.077371][ T8901] koneplus 0003:1E7D:2D51.00A4: item fetching failed at offset 2/5 [ 1028.096960][ T8901] koneplus 0003:1E7D:2D51.00A4: parse failed [ 1028.104113][ T8901] koneplus 0003:1E7D:2D51.00A4: probe with driver koneplus failed with error -22 [ 1028.184894][T13486] fido_id[13486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1028.274470][ T8901] usb 5-1: USB disconnect, device number 27 [ 1028.318496][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.331648][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.379319][ T9541] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00A5/input/input194 [ 1028.423135][ T9541] microsoft 0003:045E:07DA.00A5: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1028.571367][ T8896] usb 2-1: USB disconnect, device number 30 [ 1028.625812][T13493] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1028.633991][T13493] syzkaller1: group set to 0 [ 1028.727186][ T9541] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1028.887568][ T9541] usb 3-1: Using ep0 maxpacket: 16 [ 1028.903051][ T9541] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1028.918616][ T9541] usb 3-1: config 0 has no interface number 0 [ 1028.931569][ T9541] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.943210][ T9541] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.963684][ T9541] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1028.981855][T13495] dvmrp0: entered allmulticast mode [ 1028.988624][ T9541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.001301][ T9541] usb 3-1: config 0 descriptor?? [ 1029.030295][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1029.030312][ T29] audit: type=1326 audit(1781270595.576:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.4.18757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639579ce59 code=0x0 [ 1029.514439][ T57] dvmrp0: left allmulticast mode [ 1029.644227][ T9541] uclogic 0003:28BD:0071.00A6: pen parameters not found [ 1029.680783][ T9541] uclogic 0003:28BD:0071.00A6: interface is invalid, ignoring [ 1029.689113][T13514] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1029.733549][ T9541] usb 3-1: USB disconnect, device number 22 [ 1029.932289][T13517] sctp: [Deprecated]: syz.4.18762 (pid 13517) Use of int in max_burst socket option. [ 1029.932289][T13517] Use struct sctp_assoc_value instead [ 1030.016702][T13522] netlink: 758 bytes leftover after parsing attributes in process `syz.4.18764'. [ 1030.847143][ T8896] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1031.007290][ T8896] usb 5-1: Using ep0 maxpacket: 16 [ 1031.014503][ T8896] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.031840][ T8896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1031.045716][ T8896] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1031.067118][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.099418][ T8896] usb 5-1: config 0 descriptor?? [ 1031.102250][ T29] audit: type=1326 audit(1781270597.646:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.3.18775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb69bd9ce59 code=0x0 [ 1031.535940][ T8896] mcp2221 0003:04D8:00DD.00A7: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1031.901516][ T29] audit: type=1326 audit(1781270598.446:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1031.950025][ T29] audit: type=1326 audit(1781270598.446:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1031.996365][ T9541] usb 5-1: USB disconnect, device number 28 [ 1032.015006][ T29] audit: type=1326 audit(1781270598.446:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1032.063569][ T29] audit: type=1326 audit(1781270598.446:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1032.100208][ T29] audit: type=1326 audit(1781270598.446:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1032.126824][ T29] audit: type=1326 audit(1781270598.446:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1032.155013][ T29] audit: type=1326 audit(1781270598.446:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1032.235523][ T29] audit: type=1326 audit(1781270598.446:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.2.18771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa96f53e1d9 code=0x7ffc0000 [ 1033.026649][T13584] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 1033.077330][ T8896] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1033.238763][ T8896] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 1033.261704][ T8896] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1033.272215][ T8896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.281240][ T8896] usb 2-1: Product: syz [ 1033.285597][ T8896] usb 2-1: Manufacturer: syz [ 1033.293108][ T8896] usb 2-1: SerialNumber: syz [ 1033.562071][ T8896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1033.579952][ T8896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1033.591706][ T8896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1033.603391][ T8896] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1033.622971][ T8896] usb 2-1: USB disconnect, device number 31 [ 1034.255086][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18807'. [ 1034.426729][T13627] netlink: 'syz.4.18809': attribute type 1 has an invalid length. [ 1034.448774][T13627] netlink: 'syz.4.18809': attribute type 2 has an invalid length. [ 1034.576459][T13632] kvm: kvm [13631]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1034.870633][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 1034.870648][ T29] audit: type=1800 audit(1781270601.416:2466): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18820" name=14 dev="tmpfs" ino=19486 res=0 errno=0 [ 1035.117121][ T9541] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1035.257147][ T8896] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1035.269596][ T9541] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1035.293637][ T9541] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1035.305856][ T9541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.310839][T13668] netlink: 'syz.0.18827': attribute type 1 has an invalid length. [ 1035.321852][ T9541] usb 3-1: Product: syz [ 1035.321873][ T9541] usb 3-1: Manufacturer: syz [ 1035.321886][ T9541] usb 3-1: SerialNumber: syz [ 1035.336047][T13668] netlink: 'syz.0.18827': attribute type 2 has an invalid length. [ 1035.344234][T13668] netlink: 'syz.0.18827': attribute type 1 has an invalid length. [ 1035.347458][ T8885] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1035.439927][ T8896] usb 5-1: Using ep0 maxpacket: 32 [ 1035.449227][ T8896] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1035.459099][ T8896] usb 5-1: config 0 has no interface number 0 [ 1035.465497][ T8896] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1035.476328][ T8896] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1035.487640][ T8896] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1035.497944][ T8896] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1035.507208][ T8896] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1035.517435][ T8885] usb 4-1: Using ep0 maxpacket: 16 [ 1035.524932][ T8885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.527465][ T8896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.547059][ T8896] usb 5-1: Product: syz [ 1035.554096][ T8896] usb 5-1: Manufacturer: syz [ 1035.562679][ T8885] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1035.569856][ T8896] usb 5-1: SerialNumber: syz [ 1035.578370][ T8885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.605519][ T8885] usb 4-1: config 0 descriptor?? [ 1035.616214][ T8896] usb 5-1: config 0 descriptor?? [ 1035.636591][ T9541] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1035.649349][T13656] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1035.660987][ T9541] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1035.671959][ T9541] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1035.685759][ T9541] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1035.710473][ T9541] usb 3-1: USB disconnect, device number 23 [ 1036.024998][ T8885] mcp2221 0003:04D8:00DD.00A8: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1036.269919][ T8896] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1036.323170][ T8896] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 1036.463839][ T8885] usb 4-1: USB disconnect, device number 26 [ 1036.563727][ T8896] usb 5-1: USB disconnect, device number 29 [ 1036.659939][ T8896] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1036.670377][T13710] xt_connbytes: Forcing CT accounting to be enabled [ 1036.700889][T13710] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1037.450955][T13746] netlink: 'syz.3.18857': attribute type 6 has an invalid length. [ 1037.659537][T13757] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1037.677330][T13757] dvmrp1: ignored: set checksum disabled [ 1038.337664][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 1038.344341][ C1] bridge0: topology change detected, propagating [ 1038.350941][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.358219][ C0] bridge0: topology change detected, propagating [ 1038.368667][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.375996][ C0] bridge0: topology change detected, propagating [ 1038.874426][T13808] netlink: 'syz.4.18879': attribute type 1 has an invalid length. [ 1038.969811][T13808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.223294][T13866] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1041.297445][ T8897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1041.459058][ T8897] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1041.468859][ T8897] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1041.494544][ T8897] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.515598][ T8897] usb 3-1: config 220 has no interface number 2 [ 1041.534322][ T8897] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1041.573218][ T8897] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1041.588083][ T8897] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1041.593932][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18933'. [ 1041.598063][ T8897] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1041.614198][ T8897] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1041.631745][ T8897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.647109][ T8897] usb 3-1: Product: syz [ 1041.657316][ T8897] usb 3-1: Manufacturer: syz [ 1041.670587][ T8897] usb 3-1: SerialNumber: syz [ 1041.797143][ T9541] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1041.910890][ T8897] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1041.921391][ T8897] uvcvideo 3-1:220.0: No valid video chain found. [ 1041.936367][ T8897] usb 3-1: selecting invalid altsetting 0 [ 1041.952640][ T8897] usb 3-1: selecting invalid altsetting 0 [ 1041.958662][ T8897] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1041.961328][ T9541] usb 4-1: Using ep0 maxpacket: 8 [ 1041.971638][ T8897] usb 3-1: USB disconnect, device number 24 [ 1042.000120][ T9541] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.017391][ T9541] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.044573][ T9541] usb 4-1: config 0 has no interface number 0 [ 1042.060413][ T9541] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.098497][ T9541] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.120421][ T9541] usb 4-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1042.154691][ T9541] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1042.167343][ T9541] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1042.187132][ T9541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.219921][ T9541] usb 4-1: config 0 descriptor?? [ 1042.363622][T13962] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.18947'. [ 1042.634817][ T9541] hid (null): unknown global tag 0xa3 [ 1042.839517][ T9541] uclogic 0003:28BD:0078.00A9: pen parameters not found [ 1042.851562][ T9541] uclogic 0003:28BD:0078.00A9: interface is invalid, ignoring [ 1042.874695][ T9541] usb 4-1: USB disconnect, device number 27 [ 1043.520039][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18973'. [ 1044.517232][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18995'. [ 1044.553660][T14070] ip6gre1: entered promiscuous mode [ 1044.553684][T14070] ip6gre1: entered allmulticast mode [ 1044.563082][ T1126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.563324][ T1126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.591109][ T8897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.692086][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18998'. [ 1044.886146][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19003'. [ 1044.908557][ T8897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.113201][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19006'. [ 1045.180049][T14095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19007'. [ 1045.538564][ T8897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.554306][T14112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1045.560844][T14112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1045.584115][T14112] vhci_hcd vhci_hcd.0: Device attached [ 1045.618453][T14117] loop3: detected capacity change from 0 to 2640 [ 1045.628545][T14113] vhci_hcd: connection closed [ 1045.632114][ T1126] vhci_hcd vhci_hcd.4: stop threads [ 1045.646256][T14117] buffer_io_error: 10 callbacks suppressed [ 1045.646271][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.652535][ T1126] vhci_hcd vhci_hcd.4: release socket [ 1045.668168][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.676132][ T1126] vhci_hcd vhci_hcd.4: disconnect device [ 1045.682596][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.720327][T14119] loop3: detected capacity change from 2640 to 524287992 [ 1045.720373][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.736359][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.744773][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.753488][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.761882][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.770217][T14117] ldm_validate_partition_table(): Disk read failed. [ 1045.776981][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.787512][T14117] Buffer I/O error on dev loop3, logical block 0, async page read [ 1045.795698][T14117] Dev loop3: unable to read RDB block 0 [ 1045.802225][T14117] loop3: unable to read partition table [ 1045.809441][T14117] loop_reread_partitions: partition scan of loop3 (irc VUX) failed (rc=-5) [ 1045.856488][T14122] kvm: user requested TSC rate below hardware speed [ 1046.777372][T14166] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1047.149276][ C1] blk_print_req_error: 10 callbacks suppressed [ 1047.149294][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.164765][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.167525][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.173980][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.183123][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.201395][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.210659][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.224604][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.233852][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.243099][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.277469][ T5001] ldm_validate_partition_table(): Disk read failed. [ 1047.304145][ T5001] Dev loop9: unable to read RDB block 0 [ 1047.344461][ T5001] loop9: unable to read partition table [ 1047.365448][ T5001] loop9: partition table beyond EOD, truncated [ 1048.267605][ T8897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1048.427070][ T8897] usb 5-1: Using ep0 maxpacket: 32 [ 1048.434522][ T8897] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1048.460244][ T8897] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1048.479623][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19066'. [ 1048.492532][ T8897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1048.506028][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19066'. [ 1048.521566][ T8897] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1048.535781][ T8897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.550555][ T8897] usb 5-1: Product: syz [ 1048.564504][ T8897] usb 5-1: Manufacturer: syz [ 1048.569326][ T8897] usb 5-1: SerialNumber: syz [ 1048.579797][ T8897] usb 5-1: config 0 descriptor?? [ 1048.667369][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1048.712111][T14242] bridge0: port 1(bridge_slave_0) entered listening state [ 1048.762708][T14244] netlink: 'syz.0.19073': attribute type 5 has an invalid length. [ 1048.807803][ T1000] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1048.994897][ T1000] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1049.010328][ T8897] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 1049.025675][ T1000] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1049.041219][ T1000] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1049.051438][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.068961][ T1000] usb 3-1: Product: syz [ 1049.076079][ T1000] usb 3-1: Manufacturer: syz [ 1049.082793][ T1000] usb 3-1: SerialNumber: syz [ 1049.191160][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19085'. [ 1049.207721][T14269] syz_tun: Device is already in use. [ 1049.213794][ T8897] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1049.237490][ T8897] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1049.258813][ T8897] usb 5-1: USB disconnect, device number 30 [ 1049.315918][ T1000] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1049.405972][T14278] kvm: kvm [14277]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 1049.600482][T14287] kvm: kvm [14286]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1049.913626][ T1000] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1050.009978][ T1000] usb 3-1: USB disconnect, device number 25 [ 1050.082245][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.187361][ T8901] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1050.260897][ T5001] ldm_validate_partition_table(): Disk read failed. [ 1050.279791][ T5001] Dev loop9: unable to read RDB block 0 [ 1050.292967][ T5001] loop9: unable to read partition table [ 1050.300589][ T5001] loop9: partition table beyond EOD, truncated [ 1050.357183][ T8901] usb 2-1: Using ep0 maxpacket: 8 [ 1050.383414][ T8901] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1050.396679][ T8901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.407638][ T8901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1050.438690][ T8901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1050.466095][ T8901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.499590][ T8901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1050.512310][ T8901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.743587][ T8901] usb 2-1: GET_CAPABILITIES returned 0 [ 1050.754628][ T8901] usbtmc 2-1:16.0: can't read capabilities [ 1050.956952][ T1000] usb 2-1: USB disconnect, device number 32 [ 1051.177571][ T8896] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1051.272138][T14333] netlink: 116 bytes leftover after parsing attributes in process `syz.2.19113'. [ 1051.352390][T14335] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1051.369481][T14335] bond5: option arp_ip_target: invalid value (0) [ 1051.370880][ T8896] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1051.389328][T14335] bond5 (unregistering): Released all slaves [ 1051.396345][ T8896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.404892][ T8896] usb 5-1: Product: syz [ 1051.409257][ T8896] usb 5-1: Manufacturer: syz [ 1051.413947][ T8896] usb 5-1: SerialNumber: syz [ 1051.529525][T14345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.629995][ T8896] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1051.664287][ T8896] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1051.687081][ T8896] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1051.719197][ T8896] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1051.746826][ T8896] usb 5-1: USB disconnect, device number 31 [ 1053.581699][T14430] batman_adv: batadv0: Adding interface: vlan0 [ 1053.603567][T14430] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.641009][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.668632][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.679982][T14430] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1053.927811][ T1000] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1054.099127][ T1000] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.110340][ T1000] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1054.117545][ T8901] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1054.120572][ T1000] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1054.137853][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.152524][T14438] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1054.171752][ T1000] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.210990][ T9541] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1054.294262][ T8901] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1054.304376][ T8901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.314369][ T8901] usb 2-1: config 0 descriptor?? [ 1054.322268][ T8901] cp210x 2-1:0.0: cp210x converter detected [ 1054.339637][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.346029][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.367251][ T9541] usb 5-1: Using ep0 maxpacket: 8 [ 1054.374475][ T9541] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1054.383101][ T9541] usb 5-1: config 0 has no interface number 0 [ 1054.389814][ T9541] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1054.400844][ T9541] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1054.412630][ T9541] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.424172][ T9541] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1054.437701][ T9541] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1054.446806][ T9541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.457813][ T9541] usb 5-1: config 0 descriptor?? [ 1054.471070][ T9541] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1054.535613][ T8897] usb 4-1: USB disconnect, device number 28 [ 1054.681197][ T1000] usb 5-1: USB disconnect, device number 32 [ 1054.695427][ T1000] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1054.731479][ T8901] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1054.748299][ T8901] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1054.950234][ T8901] usb 2-1: USB disconnect, device number 33 [ 1054.960346][ T8901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1054.972595][ T8901] cp210x 2-1:0.0: device disconnected [ 1055.179863][T14471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19171'. [ 1055.750740][T14492] bridge0: port 3(syz_tun) entered disabled state [ 1055.800293][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.807645][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.366821][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.407424][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.641622][T14496] erspan0: left promiscuous mode [ 1056.669892][T14496] bridge0: port 3(syz_tun) entered blocking state [ 1056.676550][T14496] bridge0: port 3(syz_tun) entered listening state [ 1056.691941][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.700998][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.717196][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.741723][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.748963][T14496] bridge0: port 1(bridge_slave_0) entered listening state [ 1056.760945][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.768179][T14496] bridge0: port 2(bridge_slave_1) entered listening state [ 1056.791191][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.805111][T14496] batman_adv: batadv0: Interface activated: vlan0 [ 1056.815078][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.835874][T14496] veth1_vlan: left promiscuous mode [ 1056.842747][T14496] : left promiscuous mode [ 1056.849438][T14496] : entered promiscuous mode [ 1056.856440][T14496] veth1_vlan: entered promiscuous mode [ 1056.867422][T14496] veth1_macvtap: left promiscuous mode [ 1056.874252][T14496] veth0_macvtap: left promiscuous mode [ 1056.884002][T14496] veth0_macvtap: entered promiscuous mode [ 1056.893416][T14496] veth1_macvtap: entered promiscuous mode [ 1056.909520][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.921849][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.936182][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.945396][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.969733][T14496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1057.033521][T14496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1057.041811][T14496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1057.083043][T14496] batadv_slave_0: entered promiscuous mode [ 1057.096061][T14496] batadv1: left promiscuous mode [ 1057.104672][T14496] batadv1: left allmulticast mode [ 1057.112137][T14496] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1057.119857][T14496] erspan0: entered promiscuous mode [ 1057.133525][T14502] tipc: New replicast peer: 255.255.255.255 [ 1057.145306][T14502] tipc: Enabled bearer , priority 0 [ 1057.192364][ T9541] bridge0: entered promiscuous mode [ 1057.215518][ T9558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.242953][ T9558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.273550][ T9558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.294895][ T9558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.331127][T14535] bond0: Caught tx_queue_len zero misconfig [ 1057.537580][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1057.831403][T14556] netlink: 277 bytes leftover after parsing attributes in process `syz.4.19209'. [ 1058.076266][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19212'. [ 1058.102389][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19212'. [ 1059.406927][T14614] input: syz0 as /devices/virtual/input/input197 [ 1060.073701][T14647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.389431][T14670] binder: 14668:14670 ioctl c018620c 200000000000 returned -22 [ 1060.607657][ T8892] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1060.785074][ T8892] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1060.831534][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1060.875651][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1060.941382][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1060.957756][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1060.978331][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.018440][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.028835][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.076216][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.104321][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.120153][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.136878][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.148710][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.160224][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.172748][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.184199][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.192054][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.210592][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.224922][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.259632][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.281494][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.321406][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.346274][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1061.365478][ T8892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1061.365980][ T29] audit: type=1326 audit(1781270627.906:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14704 comm="syz.3.19278" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb69bd9ce59 code=0x0 [ 1061.405743][ T8892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.416777][ T8892] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1061.430880][ T8892] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1061.449670][ T8892] usb 2-1: Product: syz [ 1061.460246][ T8892] usb 2-1: Manufacturer: syz [ 1061.474033][ T8892] usb 2-1: SerialNumber: syz [ 1061.493787][ T8892] usb 2-1: config 0 descriptor?? [ 1061.525674][ T8892] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1061.788237][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 1061.790289][ T8896] usb 2-1: USB disconnect, device number 34 [ 1061.815805][ T8896] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1062.548385][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19296'. [ 1062.594240][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19296'. [ 1063.647114][ T8892] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1063.664176][T14813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.817357][ T8892] usb 2-1: Using ep0 maxpacket: 16 [ 1063.831034][ T8892] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1063.854059][ T8892] usb 2-1: config 0 has no interface number 0 [ 1063.867377][ T8892] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.893903][ T8892] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1063.903676][ T8892] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1063.913339][ T8892] usb 2-1: Product: syz [ 1063.917843][ T8892] usb 2-1: SerialNumber: syz [ 1063.925222][ T8892] usb 2-1: config 0 descriptor?? [ 1063.940151][ T8892] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1064.528817][ T8892] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1064.666263][ T8896] usb 2-1: USB disconnect, device number 35 [ 1064.691951][ T8892] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1064.702813][ T8892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.717402][ T8892] usb 5-1: Product: syz [ 1064.727713][ T8892] usb 5-1: Manufacturer: syz [ 1064.737807][ T8892] usb 5-1: SerialNumber: syz [ 1064.756686][ T8892] usb 5-1: config 0 descriptor?? [ 1065.189664][ T8892] usb 5-1: Firmware: major: 232, minor: 169, hardware type: HULUSB (4) [ 1065.390804][ T8892] usb 5-1: failed to fetch extended address, random address set [ 1065.472732][ T8892] usb 5-1: USB disconnect, device number 33 [ 1065.573619][T14882] C: renamed from veth1_to_team [ 1065.591119][T14882] netlink: 'syz.0.19347': attribute type 4 has an invalid length. [ 1065.605101][T14882] netlink: 116 bytes leftover after parsing attributes in process `syz.0.19347'. [ 1065.639434][T14882] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1065.777309][ T9541] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1065.929736][ T9541] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1065.943202][ T9541] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1065.954578][ T9541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.967877][ T9541] usb 3-1: config 0 descriptor?? [ 1066.068146][T14908] netlink: 167080 bytes leftover after parsing attributes in process `syz.4.19358'. [ 1066.186206][ T9541] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1066.387544][ T9541] [drm:udl_init] *ERROR* Selecting channel failed [ 1066.409830][ T9541] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1066.416629][ T9541] [drm] Initialized udl on minor 2 [ 1066.417322][T25339] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1066.423693][ T9541] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1066.443462][ T9541] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1066.451118][ T8892] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1066.463171][ T9541] usb 3-1: USB disconnect, device number 26 [ 1066.469549][ T8892] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1066.610471][T25339] usb 5-1: Using ep0 maxpacket: 8 [ 1066.625070][T25339] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.644444][T25339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.658218][T25339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.677186][T25339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.682536][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19363'. [ 1066.697244][T25339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.743645][T25339] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1066.747384][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19363'. [ 1066.762153][T25339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.019771][T14933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.066868][T14939] CUSE: unknown device info "H" [ 1067.073143][T14939] CUSE: unknown device info "$" [ 1067.080862][T14939] CUSE: unknown device info "Ae-p" [ 1067.086234][T14939] CUSE: unknown device info "%" [ 1067.098024][T14939] CUSE: unknown device info "" [ 1067.105338][T14939] CUSE: unknown device info "" [ 1067.113940][T14939] CUSE: unknown device info "$" [ 1067.125488][T14939] CUSE: unknown device info "" [ 1067.137334][T14939] CUSE: unknown device info "" [ 1067.150848][T14939] CUSE: unknown device info "р" [ 1067.164035][T14939] CUSE: unknown device info "" [ 1067.169202][T14939] CUSE: unknown device info "" [ 1067.174112][T14939] CUSE: zero length info key specified [ 1067.212474][ T8892] usb 5-1: USB disconnect, device number 34 [ 1067.287884][T14946] vivid-004: ================= START STATUS ================= [ 1067.299195][T14946] vivid-004: Radio HW Seek Mode: Bounded [ 1067.308688][T14946] vivid-004: Radio Programmable HW Seek: false [ 1067.315207][T14946] vivid-004: RDS Rx I/O Mode: Block I/O [ 1067.324093][T14946] vivid-004: Generate RBDS Instead of RDS: false [ 1067.332705][T14946] vivid-004: RDS Reception: true [ 1067.343134][T14946] vivid-004: RDS Program Type: 0 inactive [ 1067.349452][T14946] vivid-004: RDS PS Name: inactive [ 1067.354821][T14946] vivid-004: RDS Radio Text: inactive [ 1067.360556][T14946] vivid-004: RDS Traffic Announcement: false inactive [ 1067.367564][T14946] vivid-004: RDS Traffic Program: false inactive [ 1067.375952][T14946] vivid-004: RDS Music: false inactive [ 1067.386026][T14946] vivid-004: ================== END STATUS ================== [ 1067.461993][T14952] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1067.470292][T14952] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1067.853869][T14968] netlink: 'syz.1.19386': attribute type 1 has an invalid length. [ 1068.194060][T14985] kvm: kvm [14984]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 1068.267658][T25339] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1068.447898][T25339] usb 5-1: Using ep0 maxpacket: 32 [ 1068.459506][T25339] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1068.469806][T25339] usb 5-1: config 0 has no interface number 0 [ 1068.476477][T25339] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.488763][T25339] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1068.508760][T25339] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1068.532478][T25339] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.550280][T25339] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1068.563271][T25339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.572531][T25339] usb 5-1: Product: syz [ 1068.593901][T25339] usb 5-1: Manufacturer: syz [ 1068.605772][T25339] usb 5-1: SerialNumber: syz [ 1068.623050][T25339] usb 5-1: config 0 descriptor?? [ 1068.639798][T14978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1068.663976][T25339] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input198 [ 1068.941617][ T8892] usb 5-1: USB disconnect, device number 35 [ 1069.272062][T15020] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1069.353596][T15022] : renamed from vlan0 [ 1069.706077][T15037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19417'. [ 1069.921564][T15047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.929367][T15047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.036603][T15047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.055094][T15047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.376946][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.410865][T15052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.425693][T15052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.484800][T15052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.492075][T15052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.510979][T15052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.518229][T15052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.534562][T15069] netlink: 'syz.2.19430': attribute type 2 has an invalid length. [ 1070.543057][T15052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.555491][T15052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.582994][T15052] veth1_vlan: left promiscuous mode [ 1070.590260][T15052] veth0_vlan: left promiscuous mode [ 1070.602131][T15052] veth0_vlan: entered promiscuous mode [ 1070.618673][T15052] veth1_vlan: entered promiscuous mode [ 1070.632205][T15052] veth1_macvtap: left promiscuous mode [ 1070.641113][T15052] veth0_macvtap: left promiscuous mode [ 1070.654645][T15052] veth0_macvtap: entered promiscuous mode [ 1070.664296][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19431'. [ 1070.668942][T15052] veth1_macvtap: entered promiscuous mode [ 1070.728444][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.738431][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.746963][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.758787][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.781098][T15052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1070.789970][T15052] ip6gre1: left promiscuous mode [ 1070.794997][T15052] ip6gre1: left allmulticast mode [ 1070.837301][T25339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.257918][ T1113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.277848][ T1113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.438998][ T8887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.985379][ T8887] hid_parser_main: 94 callbacks suppressed [ 1071.985399][ T8887] hid-generic 0000:0000:0000.00AA: unknown main item tag 0x0 [ 1072.045182][ T8887] hid-generic 0000:0000:0000.00AA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1072.259926][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1072.262426][ T8887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1072.267276][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1072.281750][ C1] bridge0: port 3(syz_tun) entered learning state [ 1073.016947][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19466'. [ 1073.027402][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19466'. [ 1073.157825][ T8887] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1073.350818][ T8887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 1073.370905][ T8887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1073.394440][ T8887] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1073.404538][ T8887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.422239][ T8887] usb 2-1: config 0 descriptor?? [ 1073.428668][T15153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.863556][ T8887] hid-multitouch 0003:0457:07DA.00AB: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 1073.908920][T25339] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1074.070677][T25339] usb 3-1: Using ep0 maxpacket: 32 [ 1074.084040][T25339] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1074.097504][T25339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.117631][T25339] usb 3-1: config 0 descriptor?? [ 1074.140575][ T8887] usb 2-1: USB disconnect, device number 36 [ 1074.332538][T25339] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1074.345681][T25339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1074.359435][T25339] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1074.366837][T25339] usb 3-1: media controller created [ 1074.383995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d43c00: rx timeout, send abort [ 1074.411366][T25339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.481253][T15192] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.19482'. [ 1074.492105][T15192] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1074.536288][T25339] az6027: usb out operation failed. (-71) [ 1074.552591][T25339] az6027: usb out operation failed. (-71) [ 1074.570085][T25339] stb0899_attach: Driver disabled by Kconfig [ 1074.576287][T25339] az6027: no front-end attached [ 1074.576287][T25339] [ 1074.585180][T25339] az6027: usb out operation failed. (-71) [ 1074.591989][T25339] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1074.605054][T25339] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input199 [ 1074.619818][T25339] dvb-usb: schedule remote query interval to 400 msecs. [ 1074.637635][T25339] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1074.676577][T25339] usb 3-1: USB disconnect, device number 27 [ 1074.781217][T25339] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1074.892942][T15208] tmpfs: Unknown parameter '0xffffffffffffffff' [ 1074.896233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d43c00: abort rx timeout. Force session deactivation [ 1075.188973][T15226] sctp: [Deprecated]: syz.1.19497 (pid 15226) Use of int in max_burst socket option. [ 1075.188973][T15226] Use struct sctp_assoc_value instead [ 1075.617243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.650188][T15252] misc userio: Begin command sent, but we're already running [ 1075.810538][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.843747][T15260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.858349][T15260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.928539][T15260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.939823][T15260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.952955][T15260] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1075.972143][T15260] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.984839][T15260] 0: left allmulticast mode [ 1075.989574][T15260] hsr_slave_0: left allmulticast mode [ 1075.995028][T15260] hsr_slave_1: left allmulticast mode [ 1076.004614][T15260] veth1_macvtap: left promiscuous mode [ 1076.011079][T15260] veth0_macvtap: left promiscuous mode [ 1076.017707][T15260] veth0_macvtap: entered promiscuous mode [ 1076.024837][T15260] veth1_macvtap: entered promiscuous mode [ 1076.048786][T15260] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1076.065877][T15260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.075398][T15260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.084725][T15260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1076.093920][T15260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1076.122826][T15260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1076.132159][T15260] ip6tnl1: left allmulticast mode [ 1076.143082][T15260] xfrm1: left allmulticast mode [ 1076.158495][T15260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1076.191538][T15260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1076.204041][T15260] bridge3: left promiscuous mode [ 1076.209690][T15260] bridge3: left allmulticast mode [ 1076.215613][T15260] bond4: left promiscuous mode [ 1076.221009][T15260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1076.246690][T15260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1076.261154][T15260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1076.269400][T15260] ip6tnl3: left allmulticast mode [ 1076.278235][T15260] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1076.295847][T15260] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1076.308494][T15260] bridge0: port 1(syz_tun) entered blocking state [ 1076.315089][T15260] bridge0: port 1(syz_tun) entered forwarding state [ 1076.324097][T15260] geneve2: left allmulticast mode [ 1076.332369][T15260] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1076.418529][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.442568][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.474535][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.503130][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.127055][T15295] [ 1077.129418][T15295] ===================================================== [ 1077.136352][T15295] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1077.143826][T15295] syzkaller #0 Tainted: G L [ 1077.149822][T15295] ----------------------------------------------------- [ 1077.156751][T15295] syz.1.19524/15295 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1077.164559][T15295] ffff88807beb7ca0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1077.173195][T15295] [ 1077.173195][T15295] and this task is already holding: [ 1077.180547][T15295] ffff88803486ebe8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1077.189265][T15295] which would create a new lock dependency: [ 1077.195162][T15295] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1077.202757][T15295] [ 1077.202757][T15295] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1077.212209][T15295] (&dev->event_lock#2){..-.}-{3:3} [ 1077.212247][T15295] [ 1077.212247][T15295] ... which became SOFTIRQ-irq-safe at: [ 1077.225200][T15295] lock_acquire+0x106/0x350 [ 1077.229809][T15295] _raw_spin_lock_irqsave+0x40/0x60 [ 1077.235123][T15295] input_inject_event+0xa4/0x330 [ 1077.240272][T15295] led_trigger_event+0x138/0x210 [ 1077.245404][T15295] kbd_bh+0x1c6/0x2e0 [ 1077.249481][T15295] tasklet_action_common+0x2da/0x4b0 [ 1077.254866][T15295] handle_softirqs+0x22a/0x840 [ 1077.259723][T15295] __irq_exit_rcu+0xca/0x220 [ 1077.264408][T15295] irq_exit_rcu+0x9/0x30 [ 1077.268748][T15295] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1077.274482][T15295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.280564][T15295] _raw_spin_unlock_irq+0x29/0x50 [ 1077.285698][T15295] n_tty_ioctl_helper+0x38a/0x4d0 [ 1077.290977][T15295] tty_ioctl+0x9c5/0xde0 [ 1077.295394][T15295] __se_sys_ioctl+0xfc/0x170 [ 1077.300087][T15295] do_syscall_64+0x174/0x580 [ 1077.304835][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.310835][T15295] [ 1077.310835][T15295] to a SOFTIRQ-irq-unsafe lock: [ 1077.317947][T15295] (tasklist_lock){.+.+}-{3:3} [ 1077.317981][T15295] [ 1077.317981][T15295] ... which became SOFTIRQ-irq-unsafe at: [ 1077.330637][T15295] ... [ 1077.330698][T15295] lock_acquire+0x106/0x350 [ 1077.337884][T15295] _raw_read_lock+0x36/0x50 [ 1077.342495][T15295] __do_wait+0xde/0x740 [ 1077.346755][T15295] do_wait+0x1e7/0x510 [ 1077.350925][T15295] kernel_wait+0xd6/0x1c0 [ 1077.355353][T15295] call_usermodehelper_exec_work+0xbe/0x230 [ 1077.361360][T15295] process_scheduled_works+0xb5d/0x1860 [ 1077.367010][T15295] worker_thread+0xa53/0xfc0 [ 1077.371712][T15295] kthread+0x389/0x470 [ 1077.375879][T15295] ret_from_fork+0x514/0xb70 [ 1077.380553][T15295] ret_from_fork_asm+0x1a/0x30 [ 1077.385396][T15295] [ 1077.385396][T15295] other info that might help us debug this: [ 1077.385396][T15295] [ 1077.395608][T15295] Chain exists of: [ 1077.395608][T15295] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1077.395608][T15295] [ 1077.408559][T15295] Possible interrupt unsafe locking scenario: [ 1077.408559][T15295] [ 1077.416864][T15295] CPU0 CPU1 [ 1077.422212][T15295] ---- ---- [ 1077.427557][T15295] lock(tasklist_lock); [ 1077.431784][T15295] local_irq_disable(); [ 1077.438520][T15295] lock(&dev->event_lock#2); [ 1077.445702][T15295] lock(&new->fa_lock); [ 1077.452453][T15295] [ 1077.455891][T15295] lock(&dev->event_lock#2); [ 1077.460731][T15295] [ 1077.460731][T15295] *** DEADLOCK *** [ 1077.460731][T15295] [ 1077.468859][T15295] 4 locks held by syz.1.19524/15295: [ 1077.474126][T15295] #0: ffffffff8eb03f30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 1077.483259][T15295] #1: ffff888033aab178 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 1077.492739][T15295] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1077.501785][T15295] #3: ffff88803486ebe8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1077.510905][T15295] [ 1077.510905][T15295] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1077.521293][T15295] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1077.527023][T15295] IN-SOFTIRQ-W at: [ 1077.531165][T15295] lock_acquire+0x106/0x350 [ 1077.537657][T15295] _raw_spin_lock_irqsave+0x40/0x60 [ 1077.544845][T15295] input_inject_event+0xa4/0x330 [ 1077.551766][T15295] led_trigger_event+0x138/0x210 [ 1077.558690][T15295] kbd_bh+0x1c6/0x2e0 [ 1077.564648][T15295] tasklet_action_common+0x2da/0x4b0 [ 1077.571912][T15295] handle_softirqs+0x22a/0x840 [ 1077.578654][T15295] __irq_exit_rcu+0xca/0x220 [ 1077.585225][T15295] irq_exit_rcu+0x9/0x30 [ 1077.591444][T15295] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1077.599055][T15295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.607025][T15295] _raw_spin_unlock_irq+0x29/0x50 [ 1077.614033][T15295] n_tty_ioctl_helper+0x38a/0x4d0 [ 1077.621050][T15295] tty_ioctl+0x9c5/0xde0 [ 1077.627279][T15295] __se_sys_ioctl+0xfc/0x170 [ 1077.633857][T15295] do_syscall_64+0x174/0x580 [ 1077.640429][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.648300][T15295] INITIAL USE at: [ 1077.652395][T15295] lock_acquire+0x106/0x350 [ 1077.658794][T15295] _raw_spin_lock_irqsave+0x40/0x60 [ 1077.665889][T15295] input_inject_event+0xa4/0x330 [ 1077.672725][T15295] kbd_led_trigger_activate+0xbc/0x100 [ 1077.680080][T15295] led_trigger_set+0x535/0x960 [ 1077.686745][T15295] led_trigger_set_default+0x260/0x2a0 [ 1077.694102][T15295] led_classdev_register_ext+0x787/0x9c0 [ 1077.701635][T15295] input_leds_connect+0x517/0x790 [ 1077.708629][T15295] input_register_device+0xce0/0x1140 [ 1077.715900][T15295] atkbd_connect+0x71e/0xa10 [ 1077.722381][T15295] serio_driver_probe+0x82/0xb0 [ 1077.729143][T15295] really_probe+0x267/0xaf0 [ 1077.735780][T15295] __driver_probe_device+0x1ef/0x380 [ 1077.742959][T15295] driver_probe_device+0x4f/0x240 [ 1077.749883][T15295] __driver_attach+0x34c/0x640 [ 1077.756539][T15295] bus_for_each_dev+0x23b/0x2c0 [ 1077.763331][T15295] serio_handle_event+0x1af/0xf80 [ 1077.770248][T15295] process_scheduled_works+0xb5d/0x1860 [ 1077.777684][T15295] worker_thread+0xa53/0xfc0 [ 1077.784182][T15295] kthread+0x389/0x470 [ 1077.790170][T15295] ret_from_fork+0x514/0xb70 [ 1077.796676][T15295] ret_from_fork_asm+0x1a/0x30 [ 1077.803344][T15295] } [ 1077.806005][T15295] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1077.815315][T15295] -> (&client->buffer_lock){....}-{3:3} { [ 1077.821131][T15295] INITIAL USE at: [ 1077.825145][T15295] lock_acquire+0x106/0x350 [ 1077.831377][T15295] _raw_spin_lock+0x2e/0x40 [ 1077.837613][T15295] evdev_handle_get_val+0x70/0x9f0 [ 1077.844448][T15295] evdev_ioctl_handler+0x127b/0x1fe0 [ 1077.851455][T15295] __se_sys_ioctl+0xfc/0x170 [ 1077.857783][T15295] do_syscall_64+0x174/0x580 [ 1077.864101][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.871718][T15295] } [ 1077.874291][T15295] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1077.882591][T15295] ... acquired at: [ 1077.886465][T15295] _raw_spin_lock+0x2e/0x40 [ 1077.891143][T15295] evdev_handle_get_val+0x70/0x9f0 [ 1077.896418][T15295] evdev_ioctl_handler+0x127b/0x1fe0 [ 1077.901863][T15295] __se_sys_ioctl+0xfc/0x170 [ 1077.906625][T15295] do_syscall_64+0x174/0x580 [ 1077.911374][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.917434][T15295] [ 1077.919757][T15295] -> (&new->fa_lock){....}-{3:3} { [ 1077.924870][T15295] INITIAL USE at: [ 1077.928849][T15295] lock_acquire+0x106/0x350 [ 1077.934908][T15295] _raw_write_lock_irq+0x3d/0x50 [ 1077.941394][T15295] fasync_remove_entry+0xf1/0x1c0 [ 1077.947975][T15295] __fput+0x890/0xa60 [ 1077.953505][T15295] task_work_run+0x1d9/0x270 [ 1077.959647][T15295] exit_to_user_mode_loop+0x193/0x680 [ 1077.966570][T15295] do_syscall_64+0x353/0x580 [ 1077.972714][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.980166][T15295] INITIAL READ USE at: [ 1077.984490][T15295] lock_acquire+0x106/0x350 [ 1077.990985][T15295] _raw_read_lock_irqsave+0x48/0x60 [ 1077.998185][T15295] kill_fasync+0x199/0x4d0 [ 1078.004682][T15295] vcs_notifier+0x14b/0x1f0 [ 1078.011236][T15295] notifier_call_chain+0x1ad/0x3d0 [ 1078.018337][T15295] atomic_notifier_call_chain+0xda/0x180 [ 1078.025959][T15295] vcs_scr_updated+0x94/0xe0 [ 1078.032533][T15295] vcs_write+0xfc9/0x11c0 [ 1078.038845][T15295] vfs_write+0x29a/0xb90 [ 1078.045070][T15295] ksys_write+0x150/0x270 [ 1078.051379][T15295] do_syscall_64+0x174/0x580 [ 1078.057948][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.065822][T15295] } [ 1078.068309][T15295] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1078.077012][T15295] ... acquired at: [ 1078.080848][T15295] _raw_read_lock_irqsave+0x48/0x60 [ 1078.086214][T15295] kill_fasync+0x199/0x4d0 [ 1078.090791][T15295] evdev_pass_values+0x627/0xbd0 [ 1078.095883][T15295] evdev_events+0x1e6/0x340 [ 1078.100545][T15295] input_pass_values+0x288/0x890 [ 1078.105636][T15295] input_event_dispose+0x330/0x6b0 [ 1078.110907][T15295] input_inject_event+0x1dc/0x330 [ 1078.116108][T15295] evdev_write+0x325/0x4c0 [ 1078.120685][T15295] vfs_write+0x29a/0xb90 [ 1078.125087][T15295] ksys_write+0x150/0x270 [ 1078.129583][T15295] do_syscall_64+0x174/0x580 [ 1078.134329][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.140379][T15295] [ 1078.142688][T15295] [ 1078.142688][T15295] the dependencies between the lock to be acquired [ 1078.142696][T15295] and SOFTIRQ-irq-unsafe lock: [ 1078.156182][T15295] -> (tasklist_lock){.+.+}-{3:3} { [ 1078.161381][T15295] HARDIRQ-ON-R at: [ 1078.165435][T15295] lock_acquire+0x106/0x350 [ 1078.171847][T15295] _raw_read_lock+0x36/0x50 [ 1078.178183][T15295] __do_wait+0xde/0x740 [ 1078.184183][T15295] do_wait+0x1e7/0x510 [ 1078.190086][T15295] kernel_wait+0xd6/0x1c0 [ 1078.196244][T15295] call_usermodehelper_exec_work+0xbe/0x230 [ 1078.203968][T15295] process_scheduled_works+0xb5d/0x1860 [ 1078.211323][T15295] worker_thread+0xa53/0xfc0 [ 1078.217729][T15295] kthread+0x389/0x470 [ 1078.223607][T15295] ret_from_fork+0x514/0xb70 [ 1078.230021][T15295] ret_from_fork_asm+0x1a/0x30 [ 1078.236594][T15295] SOFTIRQ-ON-R at: [ 1078.240655][T15295] lock_acquire+0x106/0x350 [ 1078.246984][T15295] _raw_read_lock+0x36/0x50 [ 1078.253304][T15295] __do_wait+0xde/0x740 [ 1078.259273][T15295] do_wait+0x1e7/0x510 [ 1078.265151][T15295] kernel_wait+0xd6/0x1c0 [ 1078.271288][T15295] call_usermodehelper_exec_work+0xbe/0x230 [ 1078.278996][T15295] process_scheduled_works+0xb5d/0x1860 [ 1078.286344][T15295] worker_thread+0xa53/0xfc0 [ 1078.292738][T15295] kthread+0x389/0x470 [ 1078.298617][T15295] ret_from_fork+0x514/0xb70 [ 1078.305019][T15295] ret_from_fork_asm+0x1a/0x30 [ 1078.311592][T15295] INITIAL USE at: [ 1078.315561][T15295] lock_acquire+0x106/0x350 [ 1078.321785][T15295] _raw_write_lock_irq+0x3d/0x50 [ 1078.328451][T15295] copy_process+0x2b4c/0x4440 [ 1078.334849][T15295] kernel_clone+0x2d7/0x940 [ 1078.341074][T15295] user_mode_thread+0x110/0x180 [ 1078.347642][T15295] rest_init+0x23/0x300 [ 1078.353540][T15295] start_kernel+0x38a/0x3e0 [ 1078.359879][T15295] x86_64_start_reservations+0x24/0x30 [ 1078.367096][T15295] x86_64_start_kernel+0x143/0x1c0 [ 1078.373940][T15295] common_startup_64+0x13e/0x147 [ 1078.380688][T15295] INITIAL READ USE at: [ 1078.385087][T15295] lock_acquire+0x106/0x350 [ 1078.391744][T15295] _raw_read_lock+0x36/0x50 [ 1078.398406][T15295] __do_wait+0xde/0x740 [ 1078.404717][T15295] do_wait+0x1e7/0x510 [ 1078.410943][T15295] kernel_wait+0xd6/0x1c0 [ 1078.417437][T15295] call_usermodehelper_exec_work+0xbe/0x230 [ 1078.425503][T15295] process_scheduled_works+0xb5d/0x1860 [ 1078.433549][T15295] worker_thread+0xa53/0xfc0 [ 1078.440296][T15295] kthread+0x389/0x470 [ 1078.446619][T15295] ret_from_fork+0x514/0xb70 [ 1078.453358][T15295] ret_from_fork_asm+0x1a/0x30 [ 1078.460281][T15295] } [ 1078.462850][T15295] ... key at: [] tasklist_lock+0x18/0x40 [ 1078.470722][T15295] ... acquired at: [ 1078.474631][T15295] _raw_read_lock+0x36/0x50 [ 1078.479297][T15295] send_sigurg+0x12b/0x420 [ 1078.483873][T15295] sk_send_sigurg+0x6c/0x2e0 [ 1078.488664][T15295] queue_oob+0x42c/0x4f0 [ 1078.493105][T15295] unix_stream_sendmsg+0xcb1/0xe80 [ 1078.498372][T15295] ____sys_sendmsg+0x972/0x9f0 [ 1078.503290][T15295] ___sys_sendmsg+0x2a5/0x360 [ 1078.508120][T15295] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1078.513209][T15295] do_syscall_64+0x174/0x580 [ 1078.517952][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.524000][T15295] [ 1078.526304][T15295] -> (&f_owner->lock){....}-{3:3} { [ 1078.531498][T15295] INITIAL USE at: [ 1078.535415][T15295] lock_acquire+0x106/0x350 [ 1078.541496][T15295] _raw_write_lock_irq+0x3d/0x50 [ 1078.547977][T15295] __f_setown+0x67/0x370 [ 1078.553768][T15295] tun_chr_fasync+0x127/0x1a0 [ 1078.560061][T15295] do_fcntl+0x1201/0x1a20 [ 1078.565943][T15295] __se_sys_fcntl+0xc8/0x150 [ 1078.572083][T15295] do_syscall_64+0x174/0x580 [ 1078.578224][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.585667][T15295] INITIAL READ USE at: [ 1078.589980][T15295] lock_acquire+0x106/0x350 [ 1078.596494][T15295] _raw_read_lock_irqsave+0x48/0x60 [ 1078.603682][T15295] send_sigio+0x38/0x370 [ 1078.609909][T15295] dnotify_handle_event+0x169/0x440 [ 1078.617092][T15295] fsnotify+0x1831/0x1ae0 [ 1078.623412][T15295] fsnotify_create+0x121/0x180 [ 1078.630165][T15295] vfs_create+0x300/0x460 [ 1078.636476][T15295] filename_mknodat+0x3e8/0x660 [ 1078.643312][T15295] __se_sys_mknod+0x3a/0x150 [ 1078.649887][T15295] do_syscall_64+0x174/0x580 [ 1078.656460][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.664332][T15295] } [ 1078.666817][T15295] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1078.675671][T15295] ... acquired at: [ 1078.679461][T15295] _raw_read_lock_irqsave+0x48/0x60 [ 1078.684828][T15295] send_sigio+0x38/0x370 [ 1078.689234][T15295] kill_fasync+0x24d/0x4d0 [ 1078.693825][T15295] lease_break_callback+0x26/0x30 [ 1078.699013][T15295] __break_lease+0x81f/0x1ea0 [ 1078.703854][T15295] do_dentry_open+0xf23/0x13a0 [ 1078.708776][T15295] vfs_open+0x3b/0x340 [ 1078.713002][T15295] path_openat+0x2e08/0x3860 [ 1078.717758][T15295] do_file_open+0x23e/0x4a0 [ 1078.722424][T15295] do_sys_openat2+0x113/0x200 [ 1078.727355][T15295] __x64_sys_openat+0x138/0x170 [ 1078.732365][T15295] do_syscall_64+0x174/0x580 [ 1078.737137][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.743291][T15295] [ 1078.745607][T15295] [ 1078.745607][T15295] stack backtrace: [ 1078.751489][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.1.19524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.751512][T15295] Tainted: [L]=SOFTLOCKUP [ 1078.751516][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1078.751526][T15295] Call Trace: [ 1078.751532][T15295] [ 1078.751538][T15295] dump_stack_lvl+0xe8/0x150 [ 1078.751558][T15295] __lock_acquire+0x2a94/0x2cf0 [ 1078.751579][T15295] ? send_sigio+0x38/0x370 [ 1078.751596][T15295] lock_acquire+0x106/0x350 [ 1078.751608][T15295] ? send_sigio+0x38/0x370 [ 1078.751624][T15295] ? kill_fasync+0x199/0x4d0 [ 1078.751640][T15295] ? lock_acquire+0x106/0x350 [ 1078.751652][T15295] ? kill_fasync+0x199/0x4d0 [ 1078.751669][T15295] _raw_read_lock_irqsave+0x48/0x60 [ 1078.751688][T15295] ? send_sigio+0x38/0x370 [ 1078.751704][T15295] send_sigio+0x38/0x370 [ 1078.751721][T15295] kill_fasync+0x24d/0x4d0 [ 1078.751737][T15295] ? kill_fasync+0x53/0x4d0 [ 1078.751754][T15295] lease_break_callback+0x26/0x30 [ 1078.751772][T15295] __break_lease+0x81f/0x1ea0 [ 1078.751792][T15295] ? __pfx___break_lease+0x10/0x10 [ 1078.751807][T15295] ? __pfx_apparmor_file_open+0x10/0x10 [ 1078.751825][T15295] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1078.751845][T15295] do_dentry_open+0xf23/0x13a0 [ 1078.751862][T15295] vfs_open+0x3b/0x340 [ 1078.751875][T15295] ? path_openat+0x2df0/0x3860 [ 1078.751899][T15295] path_openat+0x2e08/0x3860 [ 1078.751920][T15295] ? __pfx_stack_trace_save+0x10/0x10 [ 1078.751938][T15295] ? stack_depot_save_flags+0x33/0x810 [ 1078.752014][T15295] ? __pfx_path_openat+0x10/0x10 [ 1078.752029][T15295] ? __x64_sys_openat+0x138/0x170 [ 1078.752044][T15295] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.752060][T15295] do_file_open+0x23e/0x4a0 [ 1078.752078][T15295] ? __pfx_do_file_open+0x10/0x10 [ 1078.752100][T15295] ? _raw_spin_unlock+0x28/0x50 [ 1078.752116][T15295] ? alloc_fd+0x64b/0x6c0 [ 1078.752132][T15295] do_sys_openat2+0x113/0x200 [ 1078.752146][T15295] ? __se_sys_futex+0x3a8/0x450 [ 1078.752161][T15295] ? __pfx_do_sys_openat2+0x10/0x10 [ 1078.752176][T15295] ? rcu_is_watching+0x15/0xb0 [ 1078.752191][T15295] __x64_sys_openat+0x138/0x170 [ 1078.752206][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.752219][T15295] do_syscall_64+0x174/0x580 [ 1078.752232][T15295] ? trace_irq_disable+0x3b/0x140 [ 1078.752249][T15295] ? clear_bhb_loop+0x40/0x90 [ 1078.752263][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.752276][T15295] RIP: 0033:0x7f8a7399ce59 [ 1078.752289][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.752300][T15295] RSP: 002b:00007f8a74819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1078.752314][T15295] RAX: ffffffffffffffda RBX: 00007f8a73c15fa0 RCX: 00007f8a7399ce59 [ 1078.752324][T15295] RDX: 0000000000001842 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1078.752333][T15295] RBP: 00007f8a73a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1078.752341][T15295] R10: 0000000000000267 R11: 0000000000000246 R12: 0000000000000000 [ 1078.752349][T15295] R13: 00007f8a73c16038 R14: 00007f8a73c15fa0 R15: 00007f8a73d3fa48 [ 1078.752363][T15295] [ 1079.937219][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1084.427724][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!