last executing test programs: 5.800119619s ago: executing program 0 (id=25262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd2a, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 5.526195294s ago: executing program 0 (id=25265): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffffffffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x1a51a4a1, 0x0, 0x7, 0x6, 0x56, 0x0, 0x0, 0x2, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000006880)='./file0\x00', 0x1000, 0x800, 0x0) 4.58172608s ago: executing program 0 (id=25273): syz_clone(0x84000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_batadv\x00', 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cf01400080"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f4696706000000a95e"}]}, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.576581674s ago: executing program 0 (id=25284): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 3.141503179s ago: executing program 0 (id=25291): unshare(0xc040400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r1}) 3.032301433s ago: executing program 4 (id=25294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702005145f927"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.719968403s ago: executing program 0 (id=25297): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x90, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1fe0, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.679087072s ago: executing program 4 (id=25298): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x25000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.466842777s ago: executing program 4 (id=25300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2c4ffb6c85dea984, 0xbc}}}]}, 0x3c}}, 0x4040010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.367062384s ago: executing program 1 (id=25301): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.239467204s ago: executing program 4 (id=25302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.155516414s ago: executing program 1 (id=25304): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, 0x0) 1.696250601s ago: executing program 2 (id=25308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.352905487s ago: executing program 2 (id=25311): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x4030, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xa4c0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 1.123501083s ago: executing program 2 (id=25313): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x10d, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0xd, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x6, 0x0, 0xffff8000, 0x9}}]}}]}, 0x170}}, 0x24040004) 916.449387ms ago: executing program 2 (id=25314): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d8677311eca4e0987bcc0d50a97797cea392a11f3575fcac30d0906ea149807e4b880f55c202bb3f0d84e6b1451854179caeecde89680e47c48a7fd9a84c8b352d62", 0x42}, {&(0x7f0000000180)="3116d3bd3bb8672c166027dfb209ae93752664deddfe1902b880b7ea575d17b2ce6870cf2b4ae1ce535fc8cfbdf66c207f9e7c7bd7fe7b2ad7fb9328bf42c9c4a16e856d98b70c83693613e739bd1ced6368c8630ae8f82c9a7fe44b790db6f2d82dc6c5a4ab95348319625d87e499b3707b2467904e290682fc71ba427de2fd1633508a9c239223aa7cc5b820d3a88a91f1619604225ee0663db25a3ca909cd3d6171f2393043e8e21cf20b5062465fdaa8b7ffc2a70eb214980ce13f503e7b245ff7ccc4305f5aa70888fe2be62b5e93e9e3d5521fbf4a484ede38c1c698ad3c32b3479b03a5c48e44dfcd115042251fb6f5e00a61ba71abb9837cd8d347428753747a246ffa7982719f6de1452679fafe6b9c54e318ff52d2d5612d6d89d0abd401419921b23aa3a7cdafae2a4ab570415fd70bac8079b5971156e783a921509a19f9674dd8e351decc8001df0d6caedf7b725ee0be3a31b6268ef0cb106d40fc7ae3b8974d59876411b6ff2800dbe41baccade216bf2e38f8009ceda155054307129870e1cd6947fa89b00d7dd576f37e0076217f6f68d3c2031a1d46972bfadb889c09ee8a382652a53ca87a919fb0662600d4760bdfc563180c5a62ea9c14a3e392564707283473cbbda6c15dd19a64fd914b0450875547577558787bcfa5bf4606d1893655d31619d4dee1a4412cb8859108339a7e29a973f9a14c0ff986e289841454e8edeb2ccf832c8b91ebf746a0097c7c15953c54a07e0f332ca59937938aaa58d8f97207568034da3fecd5704d2d107c3fbbb22f355be03ed4d70b04ee3bebdf198cdcd33bf42c60c112f975fa47841f6256e860b2f528c743f83829cb72ac60dd49a5996d8989f5e8693a5da57e1d29905d93e4e681416dace4455ebd715bff0bf52ab5e3dff3bfa94efd1ac49280238f4d127a767deca9b7fc5f5a478be6f9a602ca02359eebdc1cdda8710c371b9cb832366b0a361817a8146c1cc060ba27be4d65fb4b8655e599e24e5b1cf874f6af36ef5027e39bd692b106a30ebfda7d4ef853b0d954bfe1118ad5bf2f882cbf8f9a3108c9d4656bb57a584bec28a546c1bc4d4a5e8a1e0749aa84f6dea404ff76227ea930c497144de7db7412e31f6226962dcc375ee0c51c6b33d68cc5769f0d5de7559372e9bfadf30809ea0d677cc51409bef04a600290d0466905845782e9c5151490c9389099365a311831373bb79970ef4ed7579056f3def1ef19a43c65fa770bac4462170095a95e67379940d3daca7edfd935fcb4b0fa32df6849539a656630246c1a85c4a2e08ca139600e68ad29ea7a846ec374a5e416703597da9cc16522f1425ff2b02c9546ac95abf1252e8341dafcb625c5f9cf28baa2877955f73576882927aafaecf960f38dda425fe73179102551615d863f0719303f49d622ca56cae6ab470d1c666e5b2976b6f7a5ecd645725ef6fb65e07e4cb09ea116872f6556b8fcf8935e4e789924fb1c27ba963a56e785e4e5d84cc9055df76ff98bdd75319fd75c94b22a89dd5e4ebcf4d073f13a62549e00dabb9daaf23101eaeecd7da8a186600c17b2cfed19e93070c4f1e4a7cd54ca8c908cfa4a84bd5cc0e3ee116d5e1a7435f02b627c99727d35d801dd8bd11e9203e605e68b87b3c90c95f9ffdac0081ac3cfc5e87ebb4752d07738923450ccdba8be28eac43558d265411decdfa35bb2bbaccfbf891c966524325ad2bc7b48385bea7a3ac4c9cf4c4ec91369d31c6a630a1b487caa06a1836e70bd19568bd8d0f9e7f7bdf373b1698f7261a7e70cdf196dbcd086930029d54c9034fff5a6c2c814b58d72a576c62ee92e10f70c5d89f71b6782a0ef06e85cfe8c826aebacae86eae1b96b610e1b9a43171abe1de2ce18a5ec7b5b88efcb36584d3cb6d9e170f8e76a714a01fa1dde4735e94dd59fce1a18591697b64038f2be38391c07b6a8d01a911e8173f2196f62ef7e32a94ed192a258049fdd69f6e3f2eea025704e1326df69c6a837f3387fdb1d3d95507590cc951befffe3f2f478ed0644fa4a3ad298eb0a28cb7cd64e2127f59bd96b6cf16611f2ff411c0b71006bd6305cb42733a2a68a9ebed92d48fc6fab4e07171e9258ddf548e1626e1aa3170947f33319091f24044e17e4e36a3bf8c4b0e1856111ad83ea74a8f763722a16a95cec3c55c043bf51c350bc2adac6a6b1c32642459972e4aa0c3a184167eb5d7c6febf3c2735ff0da804d5366703e5423f30a941347a973e452acf94b407b8174803ae37f542baed4f3948bb82991691293f79d75288e054dd8cc7378a10584340c3eb02496c98ff8d7635844f14f89dd9d8fd4f4bf4c2e6919a7b66f0e411a0919d52a2f23c76aff2119fdd4c9e06fd063e1c5479ab7e909f3a40676a03d505f1e6807b503919740a98ae224f4ef67ba83ed9bc0aaeeb09dda15e55616bef629da4396b0377df6aeed49c5c96841f459e79dbaceab79a2d1fd1b484baa7ed47178c9d825a0a63ed3ebd46926371749110912b34b23dceee9fcbcd32c464ab32166e532423cba6bacc538ee4035e76b24962c8f88188be07f014c6d52900ef901847fa19a8df56d6ee4c103d79da6b460d643085e358d6b49573a43f4f9eebf114d49867cf441916b924610bab4dfedf32c6737b288b1d88f5b8694a59d66319e1299ae503d4d3392c07e3339a79a23952b188c4a2ba2210299b66a30a1efcc0c48893c738baa2dd7d48ab5d209415834c737c7e847c9b3e64aa9f9c90b222d9c873dd3364082225a43f59e1454f763499ce407d5df1bfaadd85fdb1b17b317a0c68ba43490c57fdf2f4e080eb579ae645c83827842e9d5fb4ecaa3ccad5b30a48f67dbddf58ae3797a251e70cb759c0206d93f68f235c22ed3cfc76daf241d8e0b435d85e41ee707b56983115d7e304f0ac24223a85ead5aedd1445f4091bd9b814a53c33acf168f3dda79b65effaa37089b9e43e35beaa650573f1e8ab4bffc54195c117d5991a9514c2dbe30e2b36ff2c2aaa81a782c061499a992d4cb793adf58cd07f648039bd017b17f7c442804c464ef37d321e73fccd8cf9b24f50693811edb0f9a1c7cb14fed2cea7ef613cf06dcac841cff8e7084ddd6064d9ac5d86faab72c13e6aeb78ad662136a7444c18424a30bc445dffb26b77e4f19d93b6f785d089e9f5f14d21120a4cc5aa180b5209b805380cf2e9976e5ad164fdf82c83986b2b64fbdd8f7153c9f6dbd0d2b948644bf7685ee84d71d70abbeae2bc4aa7a1e8e42fa89866bb9b5f4bc4d06de917ba714086494acc12d9acf99d043981a82a17279a1aefd9aa4b3aaac9134fba5293c18ff3ced91139a7626143523612300d0c14efa223fd67ab97d6625c3c5b91f07548ffe5c439e66346863f8e4141a452514e7527614e14ef2d9df7a4fe00f676ee0d583d6c714e84d6a418e6545ac74760f6d3d3090cc00d0b06d41d955ece6896d109cf555d3fb93e216c92e0751089d4990c5ae6b20c695888ad62b8de24f976d4fedec760a3e1f7c0f899c02676b2284e048f7e8907959f115e94d7e567804973430c061be887b6156ac26adc93e6d1f1bfdaea703143cb7b65798044a00017efa8ff3a423a10f05aa9fea99a2c2598afff8a838d8ccab94f0b60165619e71e45d6ef5375ecb84c11c6f64a7a52d1febb4cde473dc0f359985137ea7f49e1529c563779a3c65487047f7d1e97b1d050a1e8a10570b48a8f6e199d13577fc4049b374bc4113a642271c8a4351d10c6c9d489ed563f907f945c5d229231eec9758cd360fd0f2b283422a7137eb6159cb221ba4aa65f4ff5203b93138ac5e4812b9f2c927d6e1133fef3b11f1c5a9f632aada7a3eaeb710194212f97c9e0a23b3356408e1b47fba70386d465f665d4b0c9f5387e1784611ef9ee843a190c6cc4a6a58022037a56948f5160aefe0ff7553143140bd81b1abb555d04ccfe5b4a5dae13c1b7c2f2bd0ea32f5412d7063f4b72d82e12eab2efa0322601ed4bc2dc775554f45c8a36f903afabed9e170edbe970083bc83c7488f60412bbdf019d840bd636c73fc7deab1bc4be954a636e17b50cb69733c6ebf78f4b63d5523666fbfcc7b8ffd0ee7648be467a50d5e7bbf867a93443cfb17fac99b0e642368d4dd781064f1ed4b968183c79326097a43b5c05f10fa6c339a75b66d3fe36f7ced149d72ca6ef935bdf07b156638eca25bbd2f0951a41508fe51aa90a614fed7aad4b15ac29936bdcd14eb887d4af71d96d32f48aa97da1dc2f362944fa2bd365ecdbc2be2233a4f0650837c211d5d895e154cdbb7978892fc388619a636ef50dcc788e273a136a6817d558dcc1f0e5410fe51ff6ba6da869ce5b159650910cf1fb00b51f70b6f5728e94e7602abfc213c17405c559e472e591cb98140d3fc4847f8e255db31541e325fb3f0b6fd525bc948355fc9610b2aff82177962a38168e036e2ea4b5b6d27500fbe7eaf4617fec638c94abc743835d7b41010e51db672c00a217ad802397459d38f9aa77dc8cb0e01ed53d532e65127a5c72d4ca694a16ee1daea24746206700fce36a527b548e7fa19a781448f5040f6a96206f00a222a480d78ccc650661c9493c1ad305850a8a7414e93517e9aa6c50e314e5f642a3c737a7805d097bb108586b4cec0ea98a7b898ee4786dd9043f5b28735625609d79627f6ce80bf6f741f787544b828b50ac30a23cceddfd56d9196a7a0c59b9c6e44a1875364988ef64755e9c6bb58872c6accaab58efce79d4ad8dd6e564d9cf80861baa467ce8ed3c255be975bb3ed47bd4bf6871beed5dfee0519c103bd48107f23268be4dd3a46c07c5a6eb3d0f1dce4fe106d3c8a08465a12d0dece2ac41c9dae2e89f24cdb9567ff0acfcf0f27508ea131fe8485f0bce943c0c6556de2a34ebf50b0593f544bd9620316a15cdb92da329643a7b0c0b5f90", 0xdb1}], 0x2}, 0x4000) 878.444411ms ago: executing program 3 (id=25315): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 753.533892ms ago: executing program 3 (id=25316): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x15, 0xe, 0x80000000}, 0x14) 543.461362ms ago: executing program 1 (id=25317): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 538.209679ms ago: executing program 2 (id=25318): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000340)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, 0x0, 0x0, 0x0, 0x9}) 505.736318ms ago: executing program 4 (id=25319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 499.890695ms ago: executing program 3 (id=25320): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) 354.816613ms ago: executing program 1 (id=25321): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 348.758348ms ago: executing program 3 (id=25322): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 343.34985ms ago: executing program 2 (id=25323): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 244.077228ms ago: executing program 4 (id=25324): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}], 0x1}) 177.682063ms ago: executing program 3 (id=25325): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) 144.893136ms ago: executing program 1 (id=25326): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x80) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) read$nci(r0, 0x0, 0x0) 93.300086ms ago: executing program 3 (id=25327): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000004140)=""/4101, 0xb}], 0x2) 0s ago: executing program 1 (id=25328): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) kernel console output (not intermixed with test programs): ll pass the complete MPEG2 transport stream to the software demuxer. [ 1479.982786][T21515] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1480.002615][T21515] usb 3-1: media controller created [ 1480.043153][T21515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1480.099250][T21515] usb 3-1: digital interface selection failed (-22) [ 1480.118740][T21515] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1480.149106][T21515] usb 3-1: setting power OFF [ 1480.163999][T21515] dvb-usb: bulk message failed: -22 (2/0) [ 1480.192165][T21515] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1480.204442][T21515] (NULL device *): no alternate interface [ 1480.298243][T21515] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1480.329007][T21515] usb 3-1: USB disconnect, device number 98 [ 1481.134970][T21498] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1481.284962][T21498] usb 3-1: Using ep0 maxpacket: 8 [ 1481.296837][T21498] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1481.315025][T21498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.346360][T21498] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1481.353422][T21498] pvrusb2: ********** [ 1481.374970][T21498] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1481.395586][T21498] pvrusb2: Important functionality might not be entirely working. [ 1481.413804][T21498] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1481.425910][T21498] pvrusb2: ********** [ 1481.545038][ T2366] pvrusb2: Invalid write control endpoint [ 1481.597223][ T2366] pvrusb2: Invalid write control endpoint [ 1481.603016][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1481.615312][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1481.622943][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1481.637690][ T2366] pvrusb2: Device being rendered inoperable [ 1481.647652][ T2366] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1481.655563][ T2366] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1481.664001][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1481.670564][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1481.681375][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1481.715082][T21515] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1481.761427][T21498] usb 3-1: USB disconnect, device number 99 [ 1481.876875][T21515] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1481.896520][T21515] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1481.915830][T21515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1481.934912][T21515] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.954900][T21515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1481.966415][T21515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1481.979554][T21515] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1481.997170][T21515] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1482.016116][T21515] usb 2-1: Product: syz [ 1482.021768][T21515] usb 2-1: Manufacturer: syz [ 1482.038705][T24530] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1482.056886][T21515] cdc_wdm 2-1:1.0: skipping garbage [ 1482.065120][T21515] cdc_wdm 2-1:1.0: skipping garbage [ 1482.079684][T21515] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1482.094850][T21515] cdc_wdm 2-1:1.0: Unknown control protocol [ 1482.271489][ C0] wdm_int_callback: 42 callbacks suppressed [ 1482.271601][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.284358][ C0] wdm_int_callback: 42 callbacks suppressed [ 1482.284380][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.297260][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.303918][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.310965][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.317612][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.324227][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.330880][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.337742][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.344393][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.350934][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.357578][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.363947][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.370593][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.377407][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.384053][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.390389][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.397032][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.403385][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1482.410039][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1482.446118][T21515] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1482.623547][T21515] usb 5-1: Using ep0 maxpacket: 8 [ 1482.656499][T21515] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1482.677463][T21515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.695333][T21515] usb 5-1: Product: syz [ 1482.700188][T21515] usb 5-1: Manufacturer: syz [ 1482.711154][T21515] usb 5-1: SerialNumber: syz [ 1482.728800][T21515] usb 5-1: config 0 descriptor?? [ 1482.748500][T21515] gspca_main: se401-2.14.0 probing 047d:5003 [ 1482.953492][T24539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.978395][T24539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.200160][T21515] gspca_se401: ExtraFeatures: 4 [ 1483.216214][T21515] gspca_se401: Frame size: 64x0 bayer [ 1483.226589][T21515] gspca_se401: Frame size: 0x0 1/16th janggu [ 1483.247009][T21515] gspca_se401: Frame size: 0x0 1/16th janggu [ 1483.263352][T21515] gspca_se401: Frame size: 0x0 1/16th janggu [ 1483.270326][T21515] gspca_se401: Frame size: 0x0 1/16th janggu [ 1483.414025][T21515] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input192 [ 1483.479210][T21515] usb 5-1: USB disconnect, device number 79 [ 1483.610746][T24572] binder: 24569:24572 ioctl c0306201 200000000640 returned -22 [ 1483.930210][T24584] kvm: user requested TSC rate below hardware speed [ 1484.468879][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1484.487204][ T8040] usb 2-1: USB disconnect, device number 66 [ 1484.569868][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.576795][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.517070][T21507] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1485.699943][T21507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.736427][T21507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.751421][T21507] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1485.761306][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.786920][T21507] usb 5-1: config 0 descriptor?? [ 1486.231950][T21507] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 1486.256026][T21507] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 1486.272985][T21507] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 1486.292564][T21507] hid-thrustmaster 0003:044F:B65D.0093: item fetching failed at offset 6/7 [ 1486.314084][T21507] hid-thrustmaster 0003:044F:B65D.0093: parse failed with error -22 [ 1486.331809][T21507] hid-thrustmaster 0003:044F:B65D.0093: probe with driver hid-thrustmaster failed with error -22 [ 1486.450532][T21507] usb 5-1: USB disconnect, device number 80 [ 1487.344549][T24699] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1487.575415][T21498] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1487.735315][T21498] usb 2-1: Using ep0 maxpacket: 8 [ 1487.753134][T21498] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1487.773677][T21498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.816307][T21498] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1487.838986][T21498] pvrusb2: ********** [ 1487.848902][T21498] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1487.870535][T24712] kvm: kvm [24711]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 1487.871399][T21498] pvrusb2: Important functionality might not be entirely working. [ 1487.909318][T21498] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1487.933790][T21498] pvrusb2: ********** [ 1488.018624][ T2366] pvrusb2: Invalid write control endpoint [ 1488.159634][ T2366] pvrusb2: Invalid write control endpoint [ 1488.182375][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1488.215008][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1488.231430][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1488.268472][ T2366] pvrusb2: Device being rendered inoperable [ 1488.286202][T21498] usb 2-1: USB disconnect, device number 67 [ 1488.294325][ T2366] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1488.325640][ T2366] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1488.354334][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1488.374720][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1488.407326][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1488.766453][T24730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23844'. [ 1488.789331][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23844'. [ 1489.375494][T21516] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1489.544990][T21516] usb 4-1: Using ep0 maxpacket: 32 [ 1489.546981][T21516] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1489.547016][T21516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.557004][T21516] usb 4-1: config 0 descriptor?? [ 1489.772314][T21516] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1489.800825][T21516] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1489.824926][T21516] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1489.842617][T21516] usb 4-1: media controller created [ 1489.891303][T21516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.976796][T21516] az6027: usb out operation failed. (-71) [ 1489.989363][T21516] az6027: usb out operation failed. (-71) [ 1490.004223][T21516] stb0899_attach: Driver disabled by Kconfig [ 1490.018134][T21516] az6027: no front-end attached [ 1490.018134][T21516] [ 1490.042578][T21516] az6027: usb out operation failed. (-71) [ 1490.064684][T21516] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1490.110157][T21516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input193 [ 1490.159275][T21516] dvb-usb: schedule remote query interval to 400 msecs. [ 1490.181571][T21516] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1490.223904][T21516] usb 4-1: USB disconnect, device number 75 [ 1490.360937][T21516] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1491.753955][T24834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23891'. [ 1492.084493][T24848] IPv6: NLM_F_CREATE should be specified when creating new route [ 1492.274646][T24859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.427160][T24926] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23930'. [ 1494.805774][T21516] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1494.977409][T21516] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.012320][T21516] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1495.041390][T21516] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1495.073050][T21516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1495.088898][T21516] usb 5-1: SerialNumber: syz [ 1495.323501][T21516] usb 5-1: 0:2 : does not exist [ 1495.348271][T21516] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 1495.402819][T24951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23953'. [ 1495.472990][T21516] usb 5-1: USB disconnect, device number 81 [ 1495.581610][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1496.301824][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23956'. [ 1496.468973][T24984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23958'. [ 1497.115531][T21516] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1497.297037][T21516] usb 2-1: Using ep0 maxpacket: 8 [ 1497.317864][T21516] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1497.337223][T21516] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1497.351564][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1497.367608][T21516] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1497.376771][T25016] sock: sock_set_timeout: `syz.4.23972' (pid 25016) tries to set negative timeout [ 1497.381485][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.403031][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1497.427390][T21516] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1497.442563][T21516] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1497.454090][T21516] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1497.469646][T21516] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1497.495849][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1497.539509][T21516] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1497.573543][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.598462][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1497.623955][T21516] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1497.652058][T21516] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1497.670183][T21516] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1497.682357][T21516] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1497.709577][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1497.734119][T21516] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1497.748997][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.792287][T21516] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1497.820181][T21516] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1497.859442][T21516] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1497.871834][T21516] usb 2-1: string descriptor 0 read error: -22 [ 1497.881685][T21516] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1497.901048][T21516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.931946][T21516] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1498.193669][T21516] usb 2-1: USB disconnect, device number 68 [ 1498.403162][T24996] adutux: No device or device unplugged -19 [ 1498.595914][T21515] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1498.770376][T21515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1498.788216][T21515] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.819974][T21515] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1498.842892][T21515] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1498.860155][T21515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.879215][T21515] usb 3-1: Product: syz [ 1498.889069][T21515] usb 3-1: Manufacturer: syz [ 1498.902456][T21515] usb 3-1: SerialNumber: syz [ 1498.928988][T21515] usb 3-1: selecting invalid altsetting 1 [ 1498.942285][T21515] usb 3-1: unit 6 not found! [ 1499.266928][T16689] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1499.436993][T16689] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1499.463802][T16689] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1499.495079][T16689] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1499.528968][T16689] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1499.542728][T21515] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1499.562519][T16689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1499.592671][T16689] usb 5-1: Product: syz [ 1499.607227][T16689] usb 5-1: Manufacturer: syz [ 1499.622574][T16689] usb 5-1: SerialNumber: syz [ 1499.715462][T21515] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1499.737763][T21515] usb 3-1: USB disconnect, device number 100 [ 1499.827088][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1499.863188][T16689] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1500.087616][ T8040] usb 5-1: USB disconnect, device number 82 [ 1500.117025][ T8040] usblp0: removed [ 1501.009304][T25121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.24022'. [ 1501.303746][T25133] netlink: 'syz.1.24027': attribute type 10 has an invalid length. [ 1501.336186][T25133] macvlan1: entered allmulticast mode [ 1501.359949][T25137] netlink: 'syz.1.24027': attribute type 4 has an invalid length. [ 1501.387628][T25137] netlink: 156 bytes leftover after parsing attributes in process `syz.1.24027'. [ 1502.053146][ T30] audit: type=1326 audit(1781289733.707:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25163 comm="syz.2.24041" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f57b9ce59 code=0x0 [ 1502.136427][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24043'. [ 1502.284974][T21515] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1502.434926][T21515] usb 4-1: Using ep0 maxpacket: 16 [ 1502.441980][T21515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.453487][T21515] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1502.463204][T21515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.474225][T21515] usb 4-1: config 0 descriptor?? [ 1502.902068][T21515] mcp2221 0003:04D8:00DD.0094: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1503.344288][T21515] usb 4-1: USB disconnect, device number 76 [ 1504.375481][T16689] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1504.537032][T16689] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1504.551502][T16689] usb 4-1: config 0 has no interface number 0 [ 1504.565672][T16689] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.589861][T16689] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.609171][T16689] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1504.645783][T16689] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1504.656451][T16689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.677766][T16689] usb 4-1: config 0 descriptor?? [ 1504.845089][T21515] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1505.004956][T21515] usb 3-1: Using ep0 maxpacket: 16 [ 1505.018038][T21515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.041673][T21515] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1505.064261][T21515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.088099][T21515] usb 3-1: config 0 descriptor?? [ 1505.332686][T16689] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0095/input/input194 [ 1505.461978][T16689] uclogic 0003:28BD:0042.0095: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1505.491642][T16689] usb 4-1: USB disconnect, device number 77 [ 1505.525469][T21515] mcp2221 0003:04D8:00DD.0096: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1505.679282][T25227] fido_id[25227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1505.939565][T16689] usb 3-1: USB disconnect, device number 101 [ 1507.917653][T16689] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1508.097979][T16689] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.118193][T16689] usb 2-1: config 0 has no interface number 0 [ 1508.129689][T16689] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.147396][T16689] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.160103][T16689] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1508.176622][T16689] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1508.186396][T16689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.201230][T16689] usb 2-1: config 0 descriptor?? [ 1508.255131][T21507] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1508.455975][T21507] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.468876][T21507] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.483408][T21507] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1508.502685][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1508.513403][T21507] usb 5-1: SerialNumber: syz [ 1508.740969][T21507] usb 5-1: 0:2 : does not exist [ 1508.786544][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24108'. [ 1508.800672][T21507] usb 5-1: USB disconnect, device number 83 [ 1508.825276][ T8040] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1508.848251][T16689] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0097/input/input195 [ 1508.861521][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.966113][T16689] uclogic 0003:28BD:0042.0097: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 1508.996448][T16689] usb 2-1: USB disconnect, device number 69 [ 1509.021248][ T8040] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1509.048579][ T8040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.077634][ T8040] usb 4-1: Product: syz [ 1509.092186][ T8040] usb 4-1: Manufacturer: syz [ 1509.098730][ T8040] usb 4-1: SerialNumber: syz [ 1509.116781][ T8040] usb 4-1: config 0 descriptor?? [ 1509.133087][T25309] fido_id[25309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1509.148623][ T8040] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1509.737581][ T8040] gspca_sunplus: reg_r err -71 [ 1509.745222][ T8040] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1509.766543][ T8040] usb 4-1: USB disconnect, device number 78 [ 1510.093224][T25339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24118'. [ 1510.103577][T25339] netlink: 'syz.4.24118': attribute type 7 has an invalid length. [ 1510.112385][T25339] netlink: 'syz.4.24118': attribute type 8 has an invalid length. [ 1510.120839][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24118'. [ 1511.315939][T25389] batman_adv: batadv0: Adding interface: vlan0 [ 1511.326019][T25389] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.376024][T25389] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1511.990824][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24156'. [ 1512.000763][T25414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.013684][T25414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.602858][T25445] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1512.609462][T25445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1512.624166][T25445] vhci_hcd vhci_hcd.0: Device attached [ 1512.656023][T25445] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1512.662629][T25445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1512.685905][T25445] vhci_hcd vhci_hcd.0: Device attached [ 1512.731342][T25445] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 1512.737936][T25445] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1512.791404][T25445] vhci_hcd vhci_hcd.0: Device attached [ 1512.801818][T25458] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 1512.808456][T25458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1512.820860][T25458] vhci_hcd vhci_hcd.0: Device attached [ 1512.829643][T25459] vhci_hcd: connection closed [ 1512.831288][T22978] vhci_hcd vhci_hcd.4: stop threads [ 1512.831900][T25448] vhci_hcd: connection closed [ 1512.837262][T25454] vhci_hcd: connection closed [ 1512.846509][T25446] vhci_hcd: connection closed [ 1512.849615][T22978] vhci_hcd vhci_hcd.4: release socket [ 1512.863261][T22978] vhci_hcd vhci_hcd.4: disconnect device [ 1512.869759][T22978] vhci_hcd vhci_hcd.4: stop threads [ 1512.876184][T22978] vhci_hcd vhci_hcd.4: release socket [ 1512.887440][T22978] vhci_hcd vhci_hcd.4: disconnect device [ 1512.893608][T22978] vhci_hcd vhci_hcd.4: stop threads [ 1512.895962][T21507] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 1512.900207][T22978] vhci_hcd vhci_hcd.4: release socket [ 1512.912574][T22978] vhci_hcd vhci_hcd.4: disconnect device [ 1512.919246][T22978] vhci_hcd vhci_hcd.4: stop threads [ 1512.921969][T21507] usb 41-1: enqueue for inactive port 0 [ 1512.926640][T22978] vhci_hcd vhci_hcd.4: release socket [ 1512.966381][T22978] vhci_hcd vhci_hcd.4: disconnect device [ 1512.972253][T21516] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1513.015656][T21507] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1513.038820][ C1] blk_print_req_error: 168 callbacks suppressed [ 1513.038844][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.054441][ C1] buffer_io_error: 165 callbacks suppressed [ 1513.054464][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1513.073443][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.082741][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1513.090696][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.099938][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1513.107881][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.117136][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1513.125099][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.134301][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1513.142277][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.151514][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1513.159484][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.168726][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1513.179075][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.188296][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1513.196273][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.205468][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1513.213428][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.222647][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1513.238996][ T4999] ldm_validate_partition_table(): Disk read failed. [ 1513.248254][ T4999] Dev loop9: unable to read RDB block 0 [ 1513.257401][ T4999] loop9: unable to read partition table [ 1513.263354][ T4999] loop9: partition table beyond EOD, truncated [ 1513.305046][T21516] usb 3-1: Using ep0 maxpacket: 8 [ 1513.320086][T21516] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1513.343013][T21516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1513.354384][T21516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1513.388637][T21516] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1513.404226][T21516] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1513.418648][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.651113][T21516] usb 3-1: GET_CAPABILITIES returned 0 [ 1513.674205][T21516] usbtmc 3-1:16.0: can't read capabilities [ 1513.873849][T16689] usb 3-1: USB disconnect, device number 102 [ 1514.345287][T16689] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1514.515031][T16689] usb 2-1: Using ep0 maxpacket: 8 [ 1514.522193][T16689] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1514.531801][T16689] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1514.544999][T16689] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1514.564918][T16689] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1514.585179][T16689] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1514.608944][T16689] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1514.623171][T16689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.725273][T16683] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1514.855875][T16689] usb 2-1: GET_CAPABILITIES returned 0 [ 1514.863664][T16689] usbtmc 2-1:16.0: can't read capabilities [ 1514.877946][T21507] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1514.906279][T16683] usb 3-1: Using ep0 maxpacket: 32 [ 1514.918904][T16683] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 1514.929679][T16683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.942725][T16683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.953295][T16683] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1514.963384][T16683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.988611][T16683] usb 3-1: config 0 descriptor?? [ 1515.059597][T21507] usb 5-1: config 0 has no interfaces? [ 1515.084939][T21507] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1515.102614][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.111953][T21516] usb 2-1: USB disconnect, device number 70 [ 1515.151326][T21507] usb 5-1: config 0 descriptor?? [ 1515.432402][T16683] logitech 0003:046D:C29C.0098: unknown main item tag 0x1 [ 1515.467527][T16683] logitech 0003:046D:C29C.0098: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 1515.492036][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24185'. [ 1515.535854][T25493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24185'. [ 1515.608605][T21507] usb 5-1: USB disconnect, device number 84 [ 1515.826076][T16683] logitech 0003:046D:C29C.0098: no inputs found [ 1515.860766][T16683] usb 3-1: USB disconnect, device number 103 [ 1516.943717][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24205'. [ 1516.961778][T25540] netlink: 'syz.2.24205': attribute type 21 has an invalid length. [ 1517.595705][T16689] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1517.766751][T16689] usb 5-1: Using ep0 maxpacket: 8 [ 1517.790479][T16689] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1517.810203][T16689] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 1517.838558][T16689] usb 5-1: config 0 has no interface number 0 [ 1517.859120][T16689] usb 5-1: too many endpoints for config 0 interface 79 altsetting 134: 132, using maximum allowed: 30 [ 1517.903003][T16689] usb 5-1: config 0 interface 79 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 1517.926269][T16689] usb 5-1: config 0 interface 79 has no altsetting 0 [ 1517.946094][T16689] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1517.964979][T16689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.973268][T16689] usb 5-1: Product: syz [ 1517.983455][T16689] usb 5-1: Manufacturer: syz [ 1517.993624][T16689] usb 5-1: SerialNumber: syz [ 1518.011597][T16689] usb 5-1: config 0 descriptor?? [ 1518.065009][T16683] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1518.236451][T16683] usb 2-1: Using ep0 maxpacket: 8 [ 1518.248947][T16683] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1518.273178][T16683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.275761][T16689] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1518.310820][T16683] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1518.325990][T16689] usb 5-1: setting power ON [ 1518.329755][T16683] pvrusb2: ********** [ 1518.341485][T16689] dvb-usb: bulk message failed: -22 (2/0) [ 1518.343004][T16683] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1518.379785][T16689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1518.384389][T16683] pvrusb2: Important functionality might not be entirely working. [ 1518.402644][T16689] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1518.423638][T16683] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1518.423708][T16689] usb 5-1: media controller created [ 1518.453875][T16683] pvrusb2: ********** [ 1518.488916][T16689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1518.520177][ T2366] pvrusb2: Invalid write control endpoint [ 1518.572602][T16689] usb 5-1: digital interface selection failed (-22) [ 1518.600702][T16689] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1518.632344][T16689] usb 5-1: setting power OFF [ 1518.638974][T16689] dvb-usb: bulk message failed: -22 (2/0) [ 1518.653408][ T2366] pvrusb2: Invalid write control endpoint [ 1518.665227][T16689] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1518.685816][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1518.697630][T16689] (NULL device *): no alternate interface [ 1518.705339][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1518.752196][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1518.766550][T16683] usb 2-1: USB disconnect, device number 71 [ 1518.795002][ T2366] pvrusb2: Device being rendered inoperable [ 1518.814698][ T2366] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1518.831362][T16689] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1518.840549][ T2366] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1518.877091][T16689] usb 5-1: USB disconnect, device number 85 [ 1518.884462][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1518.918263][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1518.959569][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1519.385024][T16689] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1519.556334][T16689] usb 4-1: Using ep0 maxpacket: 8 [ 1519.582076][T16689] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1519.627081][T16689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1519.651109][T16689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1519.673678][T16689] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1519.708037][T16689] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1519.732342][T16689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.987655][T16689] usb 4-1: GET_CAPABILITIES returned 0 [ 1520.008035][T16689] usbtmc 4-1:16.0: can't read capabilities [ 1520.220801][T16689] usb 4-1: USB disconnect, device number 79 [ 1520.515017][T25624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1520.521620][T25624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1520.548535][T25624] vhci_hcd vhci_hcd.0: Device attached [ 1520.569297][T25629] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1520.575901][T25629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1520.609985][T25629] vhci_hcd vhci_hcd.0: Device attached [ 1520.637075][T25624] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 1520.643679][T25624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1520.655709][T25624] vhci_hcd vhci_hcd.0: Device attached [ 1520.667498][T25624] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 1520.674098][T25624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1520.689307][T25624] vhci_hcd vhci_hcd.0: Device attached [ 1520.700696][T25635] vhci_hcd: connection closed [ 1520.700958][T19435] vhci_hcd vhci_hcd.1: stop threads [ 1520.713202][T25633] vhci_hcd: connection closed [ 1520.713442][T25626] vhci_hcd: connection closed [ 1520.718469][T25630] vhci_hcd: connection closed [ 1520.725027][T19435] vhci_hcd vhci_hcd.1: release socket [ 1520.745489][T19435] vhci_hcd vhci_hcd.1: disconnect device [ 1520.755238][T19435] vhci_hcd vhci_hcd.1: stop threads [ 1520.764954][T19435] vhci_hcd vhci_hcd.1: release socket [ 1520.780749][T19435] vhci_hcd vhci_hcd.1: disconnect device [ 1520.786525][T21498] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1520.786670][T25627] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1520.840448][T19435] vhci_hcd vhci_hcd.1: stop threads [ 1520.853560][T19435] vhci_hcd vhci_hcd.1: release socket [ 1520.864107][T19435] vhci_hcd vhci_hcd.1: disconnect device [ 1520.882576][T19435] vhci_hcd vhci_hcd.1: stop threads [ 1520.898869][T19435] vhci_hcd vhci_hcd.1: release socket [ 1520.918847][T19435] vhci_hcd vhci_hcd.1: disconnect device [ 1522.044988][T16689] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1522.204970][T16689] usb 3-1: Using ep0 maxpacket: 8 [ 1522.219518][T16689] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1522.242216][T16689] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.278139][T16689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1522.297980][T16689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.312654][T16689] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.329032][T16689] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.339166][T16689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.803046][T16689] usb 3-1: USB disconnect, device number 104 [ 1523.004033][T25715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1523.826413][T25748] xt_hashlimit: size too large, truncated to 1048576 [ 1525.041381][T25788] IPv6: NLM_F_CREATE should be specified when creating new route [ 1525.725924][T25817] cifs: Unknown parameter '0' [ 1525.916090][T21498] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1526.113178][T25835] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24334'. [ 1526.787165][T16689] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1526.955286][T16689] usb 2-1: Using ep0 maxpacket: 16 [ 1526.967399][T16689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.980210][T16689] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1526.990760][T16689] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1527.001115][T16689] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1527.017529][T16689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.027386][T16689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1527.037982][T16689] usb 2-1: SerialNumber: syz [ 1527.048804][T25857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1527.067902][T25857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1527.087094][T16689] hub 2-1:1.0: bad descriptor, ignoring hub [ 1527.100646][T16689] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1527.299645][T25857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1527.318988][T25857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1527.388212][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24349'. [ 1527.551030][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24352'. [ 1527.691800][T25892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24357'. [ 1527.787658][T16689] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1528.105178][T16689] usb 2-1: USB disconnect, device number 72 [ 1528.131803][T16689] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1528.715984][T21507] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1528.886391][T21507] usb 4-1: Using ep0 maxpacket: 16 [ 1528.903781][T21507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.945654][T21507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.958050][T21507] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1528.985519][T21507] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1529.004909][T21507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.050818][T21507] usb 4-1: config 0 descriptor?? [ 1529.493377][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.514572][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.543733][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.563829][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.582893][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.611795][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.646989][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.665089][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.682683][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.696101][T21507] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 1529.730825][T21507] microsoft 0003:045E:07DA.0099: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1529.781759][T21507] microsoft 0003:045E:07DA.0099: no inputs found [ 1529.810368][T21507] microsoft 0003:045E:07DA.0099: could not initialize ff, continuing anyway [ 1529.989166][T21507] usb 4-1: USB disconnect, device number 80 [ 1530.734574][T26004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24394'. [ 1530.745494][T26004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24394'. [ 1531.045205][T26014] netlink: 'syz.4.24400': attribute type 13 has an invalid length. [ 1531.056533][T26014] netlink: 'syz.4.24400': attribute type 17 has an invalid length. [ 1531.229477][T21507] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1531.383711][T26014] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1531.400019][T21507] usb 3-1: Using ep0 maxpacket: 8 [ 1531.414258][T21507] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1531.431900][T21507] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1531.453166][T21507] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1531.484611][T21507] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1531.522153][T21507] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1531.554925][T21507] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1531.564285][T21507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.806516][T21507] usb 3-1: GET_CAPABILITIES returned 0 [ 1531.813363][T21507] usbtmc 3-1:16.0: can't read capabilities [ 1532.023000][T16689] usb 3-1: USB disconnect, device number 105 [ 1532.711483][ C1] blk_print_req_error: 131 callbacks suppressed [ 1532.711506][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.727155][ C1] buffer_io_error: 130 callbacks suppressed [ 1532.727177][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1532.745161][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.754441][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1532.762474][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.771699][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1532.779670][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.788873][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 1532.796859][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.806078][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 1532.813992][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.823246][ C0] Buffer I/O error on dev loop9, logical block 5, async page read [ 1532.831222][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.840493][ C0] Buffer I/O error on dev loop9, logical block 6, async page read [ 1532.848711][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.857996][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1532.891127][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.900409][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1532.930978][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.940293][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1532.956599][ T4999] ldm_validate_partition_table(): Disk read failed. [ 1532.970469][ T4999] Dev loop9: unable to read RDB block 0 [ 1532.981581][ T4999] loop9: unable to read partition table [ 1532.989358][ T4999] loop9: partition table beyond EOD, truncated [ 1533.212589][T26072] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1533.840094][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24436'. [ 1534.459123][T26118] netem: change failed [ 1535.305097][T16683] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1535.479661][T16683] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1535.506928][T16683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.527916][T16683] usb 5-1: Product: syz [ 1535.539947][T16683] usb 5-1: Manufacturer: syz [ 1535.554995][T16683] usb 5-1: SerialNumber: syz [ 1535.567884][T16683] usb 5-1: config 0 descriptor?? [ 1535.579606][T16683] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1535.593228][ T30] audit: type=1326 audit(1781289767.247:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26154 comm="syz.1.24457" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x0 [ 1535.852293][ T3263] batman_adv: batadv0: Interface deactivated: gretap2 [ 1536.199802][T16683] gspca_sunplus: reg_r err -71 [ 1536.207000][T16683] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1536.224343][T16683] usb 5-1: USB disconnect, device number 86 [ 1536.360326][T26162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24460'. [ 1536.370159][T26162] netlink: 'syz.3.24460': attribute type 7 has an invalid length. [ 1536.379295][T26162] netlink: 'syz.3.24460': attribute type 8 has an invalid length. [ 1536.387811][T26162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24460'. [ 1536.646379][ T3263] batman_adv: batadv0: Removing interface: gretap2 [ 1537.253574][ T3263] bond1 (unregistering): Released all slaves [ 1537.277849][ T3263] bond2 (unregistering): Released all slaves [ 1537.309466][ T3263] bond3 (unregistering): Released all slaves [ 1537.330600][ T3263] bond4 (unregistering): Released all slaves [ 1537.357149][ T3263] bond5 (unregistering): Released all slaves [ 1537.375035][ T3263] bond6 (unregistering): Released all slaves [ 1537.404355][ T3263] bond7 (unregistering): Released all slaves [ 1537.422558][ T3263] bond8 (unregistering): Released all slaves [ 1537.719733][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24472'. [ 1537.743045][ T3263] : left promiscuous mode [ 1538.003658][ T3263] tipc: Left network mode [ 1538.136211][ T3263] IPVS: stopping backup sync thread 24854 ... [ 1539.887357][ T3263] hsr_slave_0: left promiscuous mode [ 1539.906647][ T3263] hsr_slave_1: left promiscuous mode [ 1540.192635][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24510'. [ 1540.208090][ T3263] pim6reg (unregistering): left allmulticast mode [ 1541.022871][T26291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24517'. [ 1541.546521][ T3263] IPVS: stop unused estimator thread 0... [ 1541.655575][T16689] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1541.824969][T16689] usb 4-1: Using ep0 maxpacket: 8 [ 1541.846375][T16689] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1541.865168][T16689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1541.883636][T16689] usb 4-1: Product: syz [ 1541.893770][T16689] usb 4-1: Manufacturer: syz [ 1541.906729][T16689] usb 4-1: SerialNumber: syz [ 1541.959957][T16689] usb 4-1: config 0 descriptor?? [ 1541.981022][T16689] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1542.174944][T21502] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1542.187704][T16689] gspca_sn9c2028: read1 error -32 [ 1542.193462][T16689] gspca_sn9c2028: read1 error -32 [ 1542.284917][T16683] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1542.326813][T21502] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1542.336006][T21502] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1542.346413][T21502] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1542.355554][T21502] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1542.367491][T21502] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1542.378865][T21502] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1542.391813][T21502] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1542.401382][T21502] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1542.408704][T21507] usb 4-1: USB disconnect, device number 81 [ 1542.409908][T21502] usb 3-1: Product: syz [ 1542.420682][T21502] usb 3-1: Manufacturer: syz [ 1542.438878][T26310] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1542.450953][T21502] cdc_wdm 3-1:1.0: skipping garbage [ 1542.456861][T21502] cdc_wdm 3-1:1.0: skipping garbage [ 1542.464594][T21502] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1542.468252][T16683] usb 5-1: Using ep0 maxpacket: 8 [ 1542.475371][T21502] cdc_wdm 3-1:1.0: Unknown control protocol [ 1542.491327][T16683] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1542.502989][T16683] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1542.513743][T16683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1542.524466][T16683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1542.536068][T16683] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.549734][T16683] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1542.559843][T16683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.662560][ C0] wdm_int_callback: 9990 callbacks suppressed [ 1542.662594][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.675335][ C0] wdm_int_callback: 9990 callbacks suppressed [ 1542.675367][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.688399][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.695048][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.701464][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.708107][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.714438][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.721086][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.728210][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.734856][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.741542][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.748180][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.754548][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.761183][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.767899][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.774546][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.780913][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.787580][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.793937][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1542.800570][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1542.811109][T16683] usb 5-1: GET_CAPABILITIES returned 0 [ 1542.819727][T16683] usbtmc 5-1:16.0: can't read capabilities [ 1543.018348][ C1] blk_print_req_error: 131 callbacks suppressed [ 1543.018370][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.033922][ C1] buffer_io_error: 130 callbacks suppressed [ 1543.033939][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1543.047806][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.056997][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1543.064931][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.074108][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1543.082019][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.091205][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1543.099122][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.108332][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1543.116257][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.125461][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1543.133373][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.142561][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1543.156936][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.166223][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1543.174209][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.183421][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1543.191437][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1543.200621][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1543.217691][ T4999] ldm_validate_partition_table(): Disk read failed. [ 1543.234497][ T4999] Dev loop9: unable to read RDB block 0 [ 1543.251013][ T4999] loop9: unable to read partition table [ 1543.260565][ T4999] loop9: partition table beyond EOD, truncated [ 1544.920340][T16683] usb 3-1: USB disconnect, device number 106 [ 1544.920551][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1544.945566][T21502] usb 5-1: USB disconnect, device number 87 [ 1545.043856][T26346] bond0: ARP target 9.0.0.0 is already present [ 1545.051190][T26346] bond0: option arp_ip_target: invalid value (9) [ 1545.066025][T26346] bond0 (unregistering): Released all slaves [ 1545.455075][T16689] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1545.644890][T16689] usb 3-1: Using ep0 maxpacket: 16 [ 1545.655178][T16689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.694305][T16689] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1545.721020][T16689] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1545.742839][T16689] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1545.776986][T16689] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.802980][T16689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1545.823901][T16689] usb 3-1: SerialNumber: syz [ 1545.842877][T26353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.861268][T26353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.879798][T16689] hub 3-1:1.0: bad descriptor, ignoring hub [ 1545.908602][T16689] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1546.013960][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.021357][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.101153][T26353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1546.133022][T26353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1546.606742][T16689] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1546.895102][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24577'. [ 1546.915258][T16689] usb 3-1: USB disconnect, device number 107 [ 1546.929963][T16689] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1547.084900][T21507] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1547.286022][T21507] usb 5-1: Using ep0 maxpacket: 8 [ 1547.300023][T21507] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1547.333139][T21507] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1547.353929][T26444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24584'. [ 1547.384853][T21507] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1547.408716][T21507] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.457567][T21507] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1547.494038][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.746871][T21507] usb 5-1: GET_CAPABILITIES returned 0 [ 1547.768305][T21507] usbtmc 5-1:16.0: can't read capabilities [ 1547.911141][T26466] program syz.0.24592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.992568][T21507] usb 5-1: USB disconnect, device number 88 [ 1548.438982][T26496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.729930][T26511] netlink: 'syz.3.24606': attribute type 3 has an invalid length. [ 1549.162702][T26524] netlink: 'syz.0.24609': attribute type 2 has an invalid length. [ 1549.725943][T16689] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1549.931473][T16689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.953815][T16689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.991325][T16689] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1550.019997][T16689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.046738][T16689] usb 4-1: config 0 descriptor?? [ 1550.168235][T21507] hid_parser_main: 5 callbacks suppressed [ 1550.168261][T21507] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 1550.260449][T21507] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1550.499339][T16689] playstation 0003:054C:0DF2.009B: unknown main item tag 0x0 [ 1550.527629][T16689] playstation 0003:054C:0DF2.009B: unknown main item tag 0x0 [ 1550.553024][T16689] playstation 0003:054C:0DF2.009B: unknown main item tag 0x0 [ 1550.574669][T16689] playstation 0003:054C:0DF2.009B: unknown main item tag 0x0 [ 1550.591415][T16689] playstation 0003:054C:0DF2.009B: unknown main item tag 0x0 [ 1550.617335][T16689] playstation 0003:054C:0DF2.009B: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1550.696043][T16689] playstation 0003:054C:0DF2.009B: Invalid byte count transferred, expected 20 got 0 [ 1550.735299][T16689] playstation 0003:054C:0DF2.009B: Failed to retrieve DualSense pairing info: -22 [ 1550.756177][T16689] playstation 0003:054C:0DF2.009B: Failed to get MAC address from DualSense [ 1550.775823][T16689] playstation 0003:054C:0DF2.009B: Failed to create dualsense. [ 1550.823355][T16689] playstation 0003:054C:0DF2.009B: probe with driver playstation failed with error -22 [ 1550.918717][T16689] usb 4-1: USB disconnect, device number 82 [ 1551.156043][T26596] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1551.162605][T26596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1551.171110][T26596] vhci_hcd vhci_hcd.0: Device attached [ 1551.344985][T21502] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1551.425042][T16683] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1551.498041][T21502] usb 5-1: Using ep0 maxpacket: 8 [ 1551.504503][T21502] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.515380][T21502] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1551.528794][T21502] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1551.538778][T21502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.547317][T21502] usb 5-1: Product: syz [ 1551.551616][T21502] usb 5-1: Manufacturer: syz [ 1551.556440][T21502] usb 5-1: SerialNumber: syz [ 1551.736119][T21507] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1551.782092][T16689] usb 5-1: USB disconnect, device number 89 [ 1551.918080][T21507] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1551.926688][T21507] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1551.937180][T21507] usb 4-1: config 220 has an invalid descriptor of length 157, skipping remainder of the config [ 1551.947824][T21507] usb 4-1: config 220 has no interface number 2 [ 1551.954180][T21507] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1551.967581][T21507] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1551.974456][T21507] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1551.981449][T21507] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1551.990912][T21507] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1552.002254][T21507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.011688][T21507] usb 4-1: Product: syz [ 1552.016029][T21507] usb 4-1: Manufacturer: syz [ 1552.020820][T21507] usb 4-1: SerialNumber: syz [ 1552.219179][T26613] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.24647'. [ 1552.229415][T26613] openvswitch: netlink: Message has 16 unknown bytes. [ 1552.251434][T21507] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1552.269268][T21507] uvcvideo 4-1:220.0: No valid video chain found. [ 1552.276116][T21507] usb 4-1: selecting invalid altsetting 0 [ 1552.302169][T21507] usb 4-1: selecting invalid altsetting 0 [ 1552.317376][T21507] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1552.365570][T21507] usb 4-1: USB disconnect, device number 83 [ 1552.692254][ T30] audit: type=1326 audit(1781289784.347:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1552.748474][ T30] audit: type=1326 audit(1781289784.347:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1552.814891][ T30] audit: type=1326 audit(1781289784.347:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1552.894465][ T30] audit: type=1326 audit(1781289784.357:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1552.948903][ T30] audit: type=1326 audit(1781289784.357:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1553.026450][ T30] audit: type=1326 audit(1781289784.357:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1553.114405][ T30] audit: type=1326 audit(1781289784.357:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1553.184858][ T30] audit: type=1326 audit(1781289784.357:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26634 comm="syz.1.24657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4f59ce59 code=0x7ffc0000 [ 1554.202315][T26597] vhci_hcd: connection reset by peer [ 1554.222001][T19435] vhci_hcd vhci_hcd.0: stop threads [ 1554.240772][T19435] vhci_hcd vhci_hcd.0: release socket [ 1554.262666][T19435] vhci_hcd vhci_hcd.0: disconnect device [ 1554.275482][T16689] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1554.455995][T16689] usb 2-1: Using ep0 maxpacket: 32 [ 1554.467609][T16689] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1554.489828][T16689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.514211][T16689] usb 2-1: config 0 descriptor?? [ 1554.751069][T16689] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1554.783147][T16689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1554.805964][T16689] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1554.829184][T16689] usb 2-1: media controller created [ 1554.890273][T16689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1554.972918][T16689] az6027: usb out operation failed. (-71) [ 1554.986815][T16689] az6027: usb out operation failed. (-71) [ 1555.002219][T16689] stb0899_attach: Driver disabled by Kconfig [ 1555.034817][T16689] az6027: no front-end attached [ 1555.034817][T16689] [ 1555.056520][T16689] az6027: usb out operation failed. (-71) [ 1555.071848][T16689] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1555.097037][T16689] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input196 [ 1555.147754][T16689] dvb-usb: schedule remote query interval to 400 msecs. [ 1555.176711][T16689] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1555.211874][T16689] usb 2-1: USB disconnect, device number 73 [ 1555.301544][T16689] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1556.361127][T21502] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1556.524891][T21502] usb 5-1: Using ep0 maxpacket: 32 [ 1556.540824][T21502] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 1556.555486][T16683] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1556.558514][T21502] usb 5-1: config 2 has no interface number 0 [ 1556.583193][T21502] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1556.593510][T21502] usb 5-1: config 2 interface 88 has no altsetting 0 [ 1556.617267][T21502] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1556.639076][T21502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.664559][T21502] usb 5-1: Product: syz [ 1556.678581][T21502] usb 5-1: Manufacturer: syz [ 1556.686441][T21502] usb 5-1: SerialNumber: syz [ 1556.711346][T26727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1556.943977][T26727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1557.294222][T26768] tipc: Enabling of bearer rejected, already enabled [ 1557.395825][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24717'. [ 1557.564165][T21502] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1557.585873][T21502] asix 5-1:2.88: probe with driver asix failed with error -71 [ 1557.618844][T21502] usb 5-1: USB disconnect, device number 90 [ 1558.241728][T26797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24729'. [ 1558.723962][T26815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24737'. [ 1558.754260][T26815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24737'. [ 1558.914299][T26824] kvm: kvm [26822]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x7fffffff [ 1559.234928][ T30] audit: type=1326 audit(1781289790.887:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.272596][ T30] audit: type=1326 audit(1781289790.887:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.350732][ T30] audit: type=1326 audit(1781289790.927:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.405087][ T30] audit: type=1326 audit(1781289790.927:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.475472][ T30] audit: type=1326 audit(1781289790.927:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.533811][ T30] audit: type=1326 audit(1781289790.967:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.584185][ T30] audit: type=1800 audit(1781289790.967:1712): pid=26843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24750" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1559.610445][ T30] audit: type=1326 audit(1781289790.977:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.638636][ T30] audit: type=1326 audit(1781289790.977:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1559.667701][ T30] audit: type=1326 audit(1781289790.977:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26842 comm="syz.4.24750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f29cb59ce59 code=0x7ffc0000 [ 1560.500541][T26896] netlink: 'syz.2.24771': attribute type 13 has an invalid length. [ 1560.509066][T26896] netlink: 'syz.2.24771': attribute type 17 has an invalid length. [ 1560.561332][T26896] erspan0: left promiscuous mode [ 1560.667615][T26896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.819836][T26896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1560.847181][T26896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1560.859363][T26896] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1560.931213][T26896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1560.956967][T26896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1561.000502][T26896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1561.020973][T26896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1561.050735][T26896] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1561.173343][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.204018][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.238443][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.281638][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.307978][T26946] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1562.757019][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24801'. [ 1563.155017][T16683] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1563.335908][T16683] usb 4-1: Using ep0 maxpacket: 32 [ 1563.351988][T16683] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1563.370683][T16683] usb 4-1: config 0 has no interface number 0 [ 1563.388865][T16683] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1563.432916][T16683] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1563.475051][T16683] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1563.495731][T16683] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1563.524436][T16683] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1563.534196][T16683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.554141][T16683] usb 4-1: Product: syz [ 1563.568478][T16683] usb 4-1: Manufacturer: syz [ 1563.583493][T16683] usb 4-1: SerialNumber: syz [ 1563.602612][T16683] usb 4-1: config 0 descriptor?? [ 1563.625709][T26967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1563.662535][T16683] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input198 [ 1563.687190][ T4984] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 1563.807268][T26987] xt_hashlimit: size too large, truncated to 1048576 [ 1563.879814][T16683] usb 4-1: USB disconnect, device number 84 [ 1564.587870][T27014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.779524][T27021] netlink: 'syz.3.24826': attribute type 13 has an invalid length. [ 1564.792082][T27023] netlink: 'syz.4.24827': attribute type 1 has an invalid length. [ 1564.800049][T27021] netlink: 'syz.3.24826': attribute type 17 has an invalid length. [ 1564.945999][T21502] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1564.986061][T27021] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1565.010109][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.017339][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.107615][T21502] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1565.124994][T21502] usb 2-1: config 0 has no interface number 0 [ 1565.132891][T21502] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1565.151535][T21502] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1565.170277][T21502] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1565.181893][T21502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.198242][T21502] usb 2-1: config 0 descriptor?? [ 1565.215749][T27017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1565.240291][T21502] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1565.441765][T16683] usb 2-1: USB disconnect, device number 74 [ 1565.448452][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1565.466088][T21500] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1565.626880][T21500] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.637308][T21500] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.648637][T21500] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1565.658731][T21500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.667198][T21500] usb 5-1: Product: syz [ 1565.671649][T21500] usb 5-1: Manufacturer: syz [ 1565.676801][T21500] usb 5-1: SerialNumber: syz [ 1565.899797][T21500] usb 5-1: 0:1 : does not exist [ 1565.905026][T21500] usb 5-1: unit 4 not found! [ 1565.909727][T21500] usb 5-1: unit 80 not found! [ 1565.982492][T21500] usb 5-1: USB disconnect, device number 91 [ 1566.117427][T27046] overlay: Unknown parameter 'Wz!?V1|G* [ 1571.623264][T27189] batman_adv: batadv0: Interface activated: vlan0 [ 1571.641059][T27189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1571.652215][T27189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1571.669455][T27189] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1571.679919][T27189] veth1_vlan: left promiscuous mode [ 1571.689022][T27189] veth0_vlan: left promiscuous mode [ 1571.696153][T27189] veth0_vlan: entered promiscuous mode [ 1571.707199][T27189] veth1_vlan: entered promiscuous mode [ 1571.714647][T27189] veth1_vlan: entered allmulticast mode [ 1571.727930][T27189] veth1_macvtap: left promiscuous mode [ 1571.736261][T27189] veth0_macvtap: left promiscuous mode [ 1571.743609][T27189] veth0_macvtap: entered promiscuous mode [ 1571.763644][T27189] veth1_macvtap: entered promiscuous mode [ 1571.781273][T27189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1571.796469][T27189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1571.812127][T27189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1571.827297][T27189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1571.849562][T27189] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1571.887565][T27189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1571.900276][T27189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1571.929317][T27189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.942859][T27189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1571.957567][T27189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1571.969669][T27189] virt_wifi0: entered promiscuous mode [ 1571.988296][T27189] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1572.127837][T19435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.143303][T19435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.168036][T19435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.190189][T19435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.221287][T19435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.235271][T21502] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1572.261503][T19435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.301959][T27195] batman_adv: batadv0: Interface deactivated: vlan0 [ 1572.316851][T21500] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1572.355023][T27197] netlink: 64 bytes leftover after parsing attributes in process `syz.0.24905'. [ 1572.379953][T27195] batman_adv: batadv0: Removing interface: vlan0 [ 1572.446311][T19435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.461486][T19435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.817742][ T136] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1573.041723][T21500] usb 5-1: USB disconnect, device number 93 [ 1573.195442][T21502] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1573.355840][T21502] usb 4-1: Using ep0 maxpacket: 8 [ 1573.372210][T21502] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1573.403276][T21502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1573.420527][T21502] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1573.436554][T21502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.469162][T21502] usb 4-1: config 0 descriptor?? [ 1573.698012][T27232] loop4: detected capacity change from 0 to 7 [ 1573.710924][T27232] Dev loop4: unable to read RDB block 7 [ 1573.716996][T27232] loop4: unable to read partition table [ 1573.722981][T27232] loop4: partition table beyond EOD, truncated [ 1573.730051][T27232] loop_reread_partitions: partition scan of loop4 (荫x ) failed (rc=-5) [ 1573.845423][T19435] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1573.863004][T19435] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1573.921653][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1573.955926][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1573.977596][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1573.985008][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1573.992172][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1574.003708][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1574.021326][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1574.035435][T21507] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1574.043394][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1574.062688][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x4 [ 1574.083114][T21502] lenovo 0003:17EF:60B5.009C: unknown main item tag 0x0 [ 1574.099696][T21502] lenovo 0003:17EF:60B5.009C: hidraw0: USB HID v0.02 Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 1574.144133][T21502] usb 4-1: USB disconnect, device number 86 [ 1574.376871][T27240] fido_id[27240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1574.691085][T27263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24931'. [ 1574.706842][T21502] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1574.888409][T21502] usb 5-1: Using ep0 maxpacket: 8 [ 1574.932018][T21502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.965512][T21502] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1574.987229][T21502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.021081][T21502] usb 5-1: config 0 descriptor?? [ 1575.052535][T21502] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1575.175856][T21515] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1575.292420][T27281] macsec2: entered promiscuous mode [ 1575.312303][T27281] macsec2: entered allmulticast mode [ 1575.324935][T27281] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1575.369095][T21515] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1575.389428][T21515] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.420142][T21515] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1575.454434][T21515] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1575.484059][T21515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.504365][T21515] usb 4-1: Product: syz [ 1575.512775][T21515] usb 4-1: Manufacturer: syz [ 1575.522918][T21515] usb 4-1: SerialNumber: syz [ 1575.830936][T21515] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1575.860152][T21515] usb 4-1: USB disconnect, device number 87 [ 1575.870202][T21502] gspca_vc032x: reg_w err -71 [ 1575.892235][T21502] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1575.943999][T21502] usb 5-1: USB disconnect, device number 94 [ 1576.000560][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1576.031278][T27292] veth0: entered promiscuous mode [ 1576.038317][T27292] veth0: left promiscuous mode [ 1576.069607][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24942'. [ 1576.093761][T27293] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1577.134678][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24972'. [ 1577.672033][T27380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.686745][T27381] netlink: 277 bytes leftover after parsing attributes in process `syz.4.24982'. [ 1577.935812][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1578.202406][T27398] kvm: user requested TSC rate below hardware speed [ 1578.405553][T27408] netlink: 'syz.0.24995': attribute type 1 has an invalid length. [ 1578.441443][T27408] netlink: 'syz.0.24995': attribute type 2 has an invalid length. [ 1578.469765][T27408] netlink: 'syz.0.24995': attribute type 1 has an invalid length. [ 1578.490419][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24995'. [ 1578.755095][T21507] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1578.867548][T27419] netlink: 'syz.4.24999': attribute type 3 has an invalid length. [ 1578.875864][T27419] netlink: 'syz.4.24999': attribute type 7 has an invalid length. [ 1578.883753][T27419] netlink: 136 bytes leftover after parsing attributes in process `syz.4.24999'. [ 1578.939282][T21507] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1578.967379][T21507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.998796][T21507] usb 4-1: Product: syz [ 1579.018109][T21507] usb 4-1: Manufacturer: syz [ 1579.032831][T21507] usb 4-1: SerialNumber: syz [ 1579.104993][T27428] netlink: 'syz.2.25004': attribute type 16 has an invalid length. [ 1579.263898][T21507] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1579.304567][T21507] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1579.327109][T21507] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1579.346987][T21507] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1579.371666][T21507] usb 4-1: USB disconnect, device number 88 [ 1579.450970][T27441] input: syz1 as /devices/virtual/input/input200 [ 1579.638044][T21502] IPVS: starting estimator thread 0... [ 1579.644186][T27449] netlink: 'syz.0.25014': attribute type 1 has an invalid length. [ 1579.668399][T27449] netlink: 'syz.0.25014': attribute type 3 has an invalid length. [ 1579.707122][T27449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25014'. [ 1579.765694][T27452] IPVS: using max 27 ests per chain, 64800 per kthread [ 1579.910168][T27460] cifs: Bad value for 'user' [ 1579.988607][T27466] vlan0 (unregistering): left allmulticast mode [ 1579.998414][T27466] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1580.080991][T27466] vlan0 (unregistering): left promiscuous mode [ 1580.126241][T27466] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1580.189027][T27466] bridge0: port 3(vlan0) entered disabled state [ 1581.633289][T27544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25056'. [ 1581.663703][T27540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25053'. [ 1581.693434][T27546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25057'. [ 1581.703008][T27546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25057'. [ 1581.719301][T27546] netlink: 39 bytes leftover after parsing attributes in process `syz.4.25057'. [ 1581.891233][T27553] netlink: 'syz.1.25061': attribute type 1 has an invalid length. [ 1581.908398][T27553] netlink: 'syz.1.25061': attribute type 2 has an invalid length. [ 1582.177462][T27568] netem: incorrect gi model size [ 1582.195945][T27568] netem: change failed [ 1582.356840][T27579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25070'. [ 1582.840113][T27598] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.25080'. [ 1582.849745][T27598] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.25080'. [ 1583.315140][T21502] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1583.477404][T21502] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1583.501906][T21502] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1583.512618][T21502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.521969][T21502] usb 2-1: Product: syz [ 1583.531312][T21502] usb 2-1: Manufacturer: syz [ 1583.538599][T21502] usb 2-1: SerialNumber: syz [ 1583.606097][T21515] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1583.765727][T21515] usb 3-1: Using ep0 maxpacket: 16 [ 1583.780513][T21515] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.793754][T21502] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1583.802172][T21515] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1583.812776][T21515] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1583.833884][T21515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.866529][T21515] usb 3-1: config 0 descriptor?? [ 1583.938574][T27638] validate_nla: 2 callbacks suppressed [ 1583.938596][T27638] netlink: 'syz.4.25099': attribute type 1 has an invalid length. [ 1584.180551][T21502] usb 2-1: unit 80 not found! [ 1584.306704][T21515] usbhid 3-1:0.0: can't add hid device: -71 [ 1584.318544][T21515] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1584.349818][T21515] usb 3-1: USB disconnect, device number 109 [ 1584.519950][T21502] usb 2-1: USB disconnect, device number 75 [ 1584.674874][T21507] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1584.706016][T27656] netlink: 'syz.3.25106': attribute type 1 has an invalid length. [ 1584.867702][T21507] usb 5-1: Using ep0 maxpacket: 32 [ 1584.881743][T21507] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1584.891098][T21507] usb 5-1: config 0 has no interface number 0 [ 1584.900118][T21507] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1584.909832][T21507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.926936][T21507] usb 5-1: Product: syz [ 1584.937346][T21507] usb 5-1: Manufacturer: syz [ 1584.953287][T21507] usb 5-1: SerialNumber: syz [ 1584.976723][T21507] usb 5-1: config 0 descriptor?? [ 1585.003866][T21507] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1585.028440][T27664] netlink: 'syz.2.25110': attribute type 12 has an invalid length. [ 1585.055304][T27664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25110'. [ 1585.214164][T21507] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1585.238683][T21507] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1585.609183][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1585.610424][T21498] usb 5-1: USB disconnect, device number 95 [ 1585.653112][T21498] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1585.673261][T21502] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1585.699150][T21498] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1585.726761][T21498] quatech2 5-1:0.51: device disconnected [ 1585.837601][T21502] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1585.848955][T21502] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1585.867095][T21502] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1585.879663][T21502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.892527][T21502] usb 2-1: Product: syz [ 1585.897041][T21502] usb 2-1: Manufacturer: syz [ 1585.901830][T21502] usb 2-1: SerialNumber: syz [ 1585.985029][T21500] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1586.122405][T21502] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1586.134952][T21500] usb 3-1: Using ep0 maxpacket: 32 [ 1586.147014][T21500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.168064][T21500] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1586.177756][T21500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.193489][T21500] usb 3-1: config 0 descriptor?? [ 1586.320762][T21502] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1586.336549][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1586.339439][T21502] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1586.419957][T21500] usb 3-1: string descriptor 0 read error: -71 [ 1586.441404][T21500] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1586.456801][T21500] usb 3-1: USB disconnect, device number 110 [ 1586.669167][T27709] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1586.690144][T27710] netlink: 67 bytes leftover after parsing attributes in process `syz.4.25132'. [ 1586.729436][T21502] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1586.749812][T27710] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1586.854511][T21502] usb 2-1: USB disconnect, device number 76 [ 1586.927465][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.319797][T27731] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1587.331532][T27731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1588.585270][T21507] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1588.702929][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25160'. [ 1588.767592][T21507] usb 5-1: Using ep0 maxpacket: 8 [ 1588.787220][T21507] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1588.812705][T21507] usb 5-1: config 179 has no interface number 0 [ 1588.832765][T21507] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1588.855202][T21507] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1588.899077][T21507] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1588.930060][T21507] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1588.969783][T21507] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1589.011058][T21507] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1589.028316][T21507] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1589.047941][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.120349][T21507] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input201 [ 1589.205798][ T4984] input input201: unable to receive magic message: -110 [ 1589.225192][ T4984] input input201: unable to receive magic message: -32 [ 1589.266550][ T4984] input input201: unable to receive magic message: -32 [ 1589.289591][ T4984] input input201: unable to receive magic message: -32 [ 1589.321285][ T4984] input input201: unable to receive magic message: -32 [ 1589.340719][ T4984] input input201: unable to receive magic message: -32 [ 1589.500610][T21500] usb 5-1: USB disconnect, device number 96 [ 1589.500917][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1589.724888][T21515] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1589.791437][T27813] netlink: 56 bytes leftover after parsing attributes in process `syz.1.25178'. [ 1589.889497][T21515] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1589.904793][T21515] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1589.925136][T21515] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1589.942287][T21515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.969085][T27801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1589.988905][T21515] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1590.212488][T21515] usb 3-1: USB disconnect, device number 111 [ 1590.904540][T27850] netem: change failed [ 1591.295859][T21500] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1591.454858][T21500] usb 4-1: Using ep0 maxpacket: 16 [ 1591.472437][T21500] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1591.492128][T21500] usb 4-1: config 0 has no interface number 0 [ 1591.499585][T21500] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1591.511018][T21500] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1591.523735][T21500] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1591.535448][T21500] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1591.543977][T21500] usb 4-1: Product: syz [ 1591.548481][T21500] usb 4-1: SerialNumber: syz [ 1591.562312][T21500] usb 4-1: config 0 descriptor?? [ 1591.578345][T21500] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1591.590853][T21500] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input202 [ 1591.820635][T27855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.836100][T27855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.851955][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1591.859924][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1591.867671][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1591.874960][T21500] usb 4-1: USB disconnect, device number 89 [ 1591.875262][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1591.888176][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1591.920964][T21500] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1592.540309][T27896] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.25217'. [ 1592.578311][T27896] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1592.735389][T16683] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1592.895300][T21500] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1592.905120][T16683] usb 4-1: Using ep0 maxpacket: 16 [ 1592.921847][T16683] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.954873][T16683] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1592.967002][T16683] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1592.983225][T16683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.997967][T16683] usb 4-1: config 0 descriptor?? [ 1593.057162][T21500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.079685][T21500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.095143][T21500] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1593.117711][T21500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.134201][T21500] usb 2-1: config 0 descriptor?? [ 1593.301701][T27923] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1593.451807][T16683] mcp2221 0003:04D8:00DD.009D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1593.716536][T21500] hid_parser_main: 12 callbacks suppressed [ 1593.716561][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.738706][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.755285][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.774909][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.795771][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.826010][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.847513][T21500] hid-thrustmaster 0003:044F:B65D.009E: unknown main item tag 0x0 [ 1593.866655][T21500] hid-thrustmaster 0003:044F:B65D.009E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 1593.887648][T21502] usb 4-1: USB disconnect, device number 90 [ 1593.921470][T21500] hid-thrustmaster 0003:044F:B65D.009E: Wrong number of endpoints? [ 1593.938791][ C0] hid-thrustmaster 0003:044F:B65D.009E: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 1594.104989][T27938] input: syz0 as /devices/virtual/input/input203 [ 1594.176808][T16683] usb 2-1: USB disconnect, device number 77 [ 1594.444893][T21515] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1594.624870][T21515] usb 5-1: Using ep0 maxpacket: 16 [ 1594.637325][T21515] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.660873][T21515] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1594.674513][T21515] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1594.694287][T21515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.715938][T21515] usb 5-1: config 0 descriptor?? [ 1595.178517][T21515] usbhid 5-1:0.0: can't add hid device: -71 [ 1595.194398][T27965] loop8: detected capacity change from 0 to 8 [ 1595.200627][T21515] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1595.214657][T21515] usb 5-1: USB disconnect, device number 97 [ 1595.226390][T27965] Dev loop8: unable to read RDB block 8 [ 1595.246668][T27965] loop8: unable to read partition table [ 1595.253934][T27965] loop8: partition table beyond EOD, truncated [ 1595.274861][T27965] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1595.415083][T27969] program syz.2.25250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.632692][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1595.632712][ T30] audit: type=1326 audit(1781289827.287:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.669364][ T30] audit: type=1326 audit(1781289827.327:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.696771][ T30] audit: type=1326 audit(1781289827.327:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.745028][T21502] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1595.758015][ T30] audit: type=1326 audit(1781289827.327:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.784072][ T30] audit: type=1326 audit(1781289827.327:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.856394][ T30] audit: type=1326 audit(1781289827.327:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.891933][T27984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25258'. [ 1595.907427][T21502] usb 3-1: Using ep0 maxpacket: 32 [ 1595.919787][T21502] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.932557][ T30] audit: type=1326 audit(1781289827.327:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1595.942712][T21502] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1596.002466][ T30] audit: type=1326 audit(1781289827.327:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1596.036513][T21502] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1596.052957][T21502] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1596.066957][ T30] audit: type=1326 audit(1781289827.327:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1596.097389][T21502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.119520][ T30] audit: type=1326 audit(1781289827.327:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27978 comm="syz.3.25256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fdc61f9ce59 code=0x7ffc0000 [ 1596.144482][T21502] usb 3-1: config 0 descriptor?? [ 1596.566754][T21502] elecom 0003:056E:00FB.009F: unknown main item tag 0x0 [ 1596.584322][T21502] elecom 0003:056E:00FB.009F: unknown main item tag 0x0 [ 1596.602735][T21502] elecom 0003:056E:00FB.009F: unknown main item tag 0x0 [ 1596.646698][T21502] elecom 0003:056E:00FB.009F: hidraw0: USB HID v1.01 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 1596.694311][T28000] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1596.805537][T21515] usb 3-1: USB disconnect, device number 112 [ 1596.864499][T28001] fido_id[28001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1597.215279][T21500] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1597.376248][T21500] usb 2-1: Using ep0 maxpacket: 32 [ 1597.386543][T21500] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1597.401636][T21500] usb 2-1: config 0 has no interface number 0 [ 1597.413704][T21500] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1597.433360][T21500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.442110][T21500] usb 2-1: Product: syz [ 1597.455185][T21500] usb 2-1: Manufacturer: syz [ 1597.462341][T21500] usb 2-1: SerialNumber: syz [ 1597.478027][T21500] usb 2-1: config 0 descriptor?? [ 1597.498683][T21500] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1597.715200][T21500] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1597.746132][T21500] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1598.122366][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1598.130972][T21500] usb 2-1: USB disconnect, device number 78 [ 1598.154305][T21500] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1598.190235][T21500] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1598.231067][T21500] quatech2 2-1:0.51: device disconnected [ 1598.515167][T21515] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1598.685415][T21515] usb 4-1: Using ep0 maxpacket: 32 [ 1598.697115][T21515] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1598.721698][T21515] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1598.736969][T21515] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1598.748297][T21515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.767568][T21515] usb 4-1: config 0 descriptor?? [ 1599.218477][T21515] corsair-psu 0003:1B1C:1C09.00A0: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 1599.237476][T28065] netlink: 'syz.1.25292': attribute type 10 has an invalid length. [ 1599.290687][T28069] netlink: 14 bytes leftover after parsing attributes in process `syz.1.25292'. [ 1599.332324][T28072] syz_tun: entered allmulticast mode [ 1599.348919][T28073] loop5: detected capacity change from 0 to 7 [ 1599.366556][T28073] Dev loop5: unable to read RDB block 7 [ 1599.373311][T28072] dvmrp8: entered allmulticast mode [ 1599.380550][T28073] loop5: unable to read partition table [ 1599.389304][T28070] syz_tun: left allmulticast mode [ 1599.394688][T28073] loop5: partition table beyond EOD, truncated [ 1599.412162][T28073] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1599.599171][T21515] corsair-psu 0003:1B1C:1C09.00A0: unable to initialize device (-95) [ 1599.635287][T21515] corsair-psu 0003:1B1C:1C09.00A0: probe with driver corsair-psu failed with error -95 [ 1599.689756][T21515] usb 4-1: USB disconnect, device number 91 [ 1600.258789][T21507] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1600.394902][T21515] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1600.427591][T21507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.441961][T21507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.453920][T21507] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1600.464286][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.476722][T21507] usb 5-1: config 0 descriptor?? [ 1600.568247][T21515] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1600.588490][T21515] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 1600.607728][T21515] usb 2-1: config 114 has no interface number 0 [ 1600.618171][T21515] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1600.629374][T21515] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1600.642492][T21515] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1600.654145][T21515] usb 2-1: config 114 interface 240 has no altsetting 0 [ 1600.663670][T28104] macvlan0: entered promiscuous mode [ 1600.672047][T21515] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1600.683106][T21515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.695409][T28104] macvlan0: entered allmulticast mode [ 1600.701102][T28106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.707126][T28104] team0: Device macvlan0 is already an upper device of the team interface [ 1600.718294][T21515] usb 2-1: Product: syz [ 1600.727317][T21515] usb 2-1: Manufacturer: syz [ 1600.732016][T21515] usb 2-1: SerialNumber: syz [ 1600.757122][T28094] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1600.765921][T28094] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1600.920808][T21507] hid_parser_main: 37 callbacks suppressed [ 1600.920834][T21507] hid-steam 0003:28DE:1142.00A1: unknown main item tag 0x0 [ 1600.961029][T21507] hid-steam 0003:28DE:1142.00A1: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1601.004288][T21515] ir_usb 2-1:114.240: IR Dongle converter detected [ 1601.014520][T21515] usb 2-1: IRDA class descriptor not found, device not bound [ 1601.024882][T21507] hid-steam 0003:28DE:1142.00A1: Steam wireless receiver connected [ 1601.053914][T21515] usb 2-1: USB disconnect, device number 79 [ 1601.072249][T21507] hid-steam 0003:28DE:1142.00A1: No HID_FEATURE_REPORT submitted - nothing to read [ 1601.132117][T21507] hid-steam 0003:28DE:1142.00A2: unknown main item tag 0x0 [ 1601.171612][T28112] input: syz1 as /devices/virtual/input/input204 [ 1601.207959][T21507] hid-steam 0003:28DE:1142.00A2: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1601.233526][T28115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25313'. [ 1601.257425][T21507] usb 5-1: USB disconnect, device number 98 [ 1601.399903][T28114] fido_id[28114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1601.566748][T21507] hid-steam 0003:28DE:1142.00A1: Steam wireless receiver disconnected [ 1602.246487][T21515] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1602.269104][T28146] [ 1602.271517][T28146] ===================================================== [ 1602.278478][T28146] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1602.286168][T28146] syzkaller #0 Tainted: G L [ 1602.292186][T28146] ----------------------------------------------------- [ 1602.299201][T28146] syz.1.25328/28146 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1602.307097][T28146] ffff88802ab27aa0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1602.315807][T28146] [ 1602.315807][T28146] and this task is already holding: [ 1602.323207][T28146] ffff888052edfb40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1602.331980][T28146] which would create a new lock dependency: [ 1602.337904][T28146] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1602.345630][T28146] [ 1602.345630][T28146] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1602.355235][T28146] (&client->buffer_lock){..-.}-{3:3} [ 1602.355277][T28146] [ 1602.355277][T28146] ... which became SOFTIRQ-irq-safe at: [ 1602.368415][T28146] lock_acquire+0x106/0x350 [ 1602.373048][T28146] _raw_spin_lock+0x2e/0x40 [ 1602.377719][T28146] evdev_pass_values+0xcb/0xc00 [ 1602.382803][T28146] evdev_events+0x1e6/0x340 [ 1602.387426][T28146] input_pass_values+0x288/0x890 [ 1602.392564][T28146] input_event_dispose+0x330/0x6b0 [ 1602.397820][T28146] input_event+0x84/0xc0 [ 1602.402194][T28146] xpad360_process_packet+0x649/0xdd0 [ 1602.407792][T28146] xpad_irq_in+0x14f/0x2410 [ 1602.412428][T28146] __usb_hcd_giveback_urb+0x374/0x530 [ 1602.418011][T28146] dummy_timer+0xac3/0x4b40 [ 1602.422698][T28146] __hrtimer_run_queues+0x3bc/0xa10 [ 1602.428025][T28146] hrtimer_run_softirq+0x17a/0x240 [ 1602.433269][T28146] handle_softirqs+0x225/0x840 [ 1602.438154][T28146] __irq_exit_rcu+0xca/0x220 [ 1602.442864][T28146] irq_exit_rcu+0x9/0x30 [ 1602.447238][T28146] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1602.453024][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.459140][T28146] finish_task_switch+0x41a/0xbc0 [ 1602.464305][T28146] __schedule+0x1848/0x57a0 [ 1602.468956][T28146] preempt_schedule_irq+0x4d/0xa0 [ 1602.474179][T28146] irqentry_exit+0x14f/0x8e0 [ 1602.478935][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.485055][T28146] __sanitizer_cov_trace_pc+0x49/0x70 [ 1602.490567][T28146] shmem_get_folio_gfp+0x1e1/0x16c0 [ 1602.495900][T28146] shmem_fault+0x179/0x390 [ 1602.500460][T28146] __do_fault+0x138/0x2a0 [ 1602.504928][T28146] do_pte_missing+0x228c/0x3540 [ 1602.509911][T28146] handle_mm_fault+0x1b38/0x3080 [ 1602.514978][T28146] __get_user_pages+0x1678/0x2720 [ 1602.520125][T28146] populate_vma_page_range+0x2be/0x3c0 [ 1602.525750][T28146] __mm_populate+0x25f/0x390 [ 1602.530473][T28146] vm_mmap_pgoff+0x353/0x4e0 [ 1602.535177][T28146] do_syscall_64+0x174/0x580 [ 1602.539873][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.545868][T28146] [ 1602.545868][T28146] to a SOFTIRQ-irq-unsafe lock: [ 1602.552965][T28146] (tasklist_lock){.+.+}-{3:3} [ 1602.552995][T28146] [ 1602.552995][T28146] ... which became SOFTIRQ-irq-unsafe at: [ 1602.565682][T28146] ... [ 1602.565693][T28146] lock_acquire+0x106/0x350 [ 1602.572925][T28146] _raw_read_lock+0x36/0x50 [ 1602.577543][T28146] __do_wait+0xd9/0x720 [ 1602.581820][T28146] do_wait+0x1e7/0x510 [ 1602.585995][T28146] kernel_wait+0xd6/0x1c0 [ 1602.590428][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1602.596468][T28146] process_scheduled_works+0xa8e/0x14e0 [ 1602.602113][T28146] worker_thread+0xa47/0xfb0 [ 1602.606806][T28146] kthread+0x389/0x470 [ 1602.610982][T28146] ret_from_fork+0x514/0xb70 [ 1602.615674][T28146] ret_from_fork_asm+0x1a/0x30 [ 1602.620550][T28146] [ 1602.620550][T28146] other info that might help us debug this: [ 1602.620550][T28146] [ 1602.630796][T28146] Chain exists of: [ 1602.630796][T28146] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1602.630796][T28146] [ 1602.644052][T28146] Possible interrupt unsafe locking scenario: [ 1602.644052][T28146] [ 1602.652426][T28146] CPU0 CPU1 [ 1602.657890][T28146] ---- ---- [ 1602.663330][T28146] lock(tasklist_lock); [ 1602.667595][T28146] local_irq_disable(); [ 1602.674368][T28146] lock(&client->buffer_lock); [ 1602.681814][T28146] lock(&new->fa_lock); [ 1602.688597][T28146] [ 1602.692085][T28146] lock(&client->buffer_lock); [ 1602.697171][T28146] [ 1602.697171][T28146] *** DEADLOCK *** [ 1602.697171][T28146] [ 1602.705339][T28146] 4 locks held by syz.1.25328/28146: [ 1602.710645][T28146] #0: ffffffff8eb032f0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4be/0x1e70 [ 1602.719856][T28146] #1: ffff888034ce3858 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4cb/0x1e70 [ 1602.729379][T28146] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1602.738484][T28146] #3: ffff888052edfb40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1602.747684][T28146] [ 1602.747684][T28146] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1602.758104][T28146] -> (&client->buffer_lock){..-.}-{3:3} { [ 1602.763953][T28146] IN-SOFTIRQ-W at: [ 1602.768150][T28146] lock_acquire+0x106/0x350 [ 1602.774502][T28146] _raw_spin_lock+0x2e/0x40 [ 1602.780855][T28146] evdev_pass_values+0xcb/0xc00 [ 1602.787548][T28146] evdev_events+0x1e6/0x340 [ 1602.793904][T28146] input_pass_values+0x288/0x890 [ 1602.800717][T28146] input_event_dispose+0x330/0x6b0 [ 1602.807693][T28146] input_event+0x84/0xc0 [ 1602.813791][T28146] xpad360_process_packet+0x649/0xdd0 [ 1602.821005][T28146] xpad_irq_in+0x14f/0x2410 [ 1602.827354][T28146] __usb_hcd_giveback_urb+0x374/0x530 [ 1602.834579][T28146] dummy_timer+0xac3/0x4b40 [ 1602.840935][T28146] __hrtimer_run_queues+0x3bc/0xa10 [ 1602.847994][T28146] hrtimer_run_softirq+0x17a/0x240 [ 1602.854959][T28146] handle_softirqs+0x225/0x840 [ 1602.861593][T28146] __irq_exit_rcu+0xca/0x220 [ 1602.868046][T28146] irq_exit_rcu+0x9/0x30 [ 1602.874143][T28146] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1602.881622][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.889444][T28146] finish_task_switch+0x41a/0xbc0 [ 1602.896324][T28146] __schedule+0x1848/0x57a0 [ 1602.902674][T28146] preempt_schedule_irq+0x4d/0xa0 [ 1602.909549][T28146] irqentry_exit+0x14f/0x8e0 [ 1602.916009][T28146] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.923831][T28146] __sanitizer_cov_trace_pc+0x49/0x70 [ 1602.931045][T28146] shmem_get_folio_gfp+0x1e1/0x16c0 [ 1602.938089][T28146] shmem_fault+0x179/0x390 [ 1602.944367][T28146] __do_fault+0x138/0x2a0 [ 1602.950544][T28146] do_pte_missing+0x228c/0x3540 [ 1602.957241][T28146] handle_mm_fault+0x1b38/0x3080 [ 1602.964052][T28146] __get_user_pages+0x1678/0x2720 [ 1602.970916][T28146] populate_vma_page_range+0x2be/0x3c0 [ 1602.978214][T28146] __mm_populate+0x25f/0x390 [ 1602.984644][T28146] vm_mmap_pgoff+0x353/0x4e0 [ 1602.991069][T28146] do_syscall_64+0x174/0x580 [ 1602.997495][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.005237][T28146] INITIAL USE at: [ 1603.009240][T28146] lock_acquire+0x106/0x350 [ 1603.015495][T28146] _raw_spin_lock+0x2e/0x40 [ 1603.021763][T28146] evdev_handle_get_val+0x75/0xa30 [ 1603.028629][T28146] evdev_ioctl_handler+0x11e5/0x1f60 [ 1603.035672][T28146] __se_sys_ioctl+0xfc/0x170 [ 1603.042049][T28146] do_syscall_64+0x174/0x580 [ 1603.048392][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.056044][T28146] } [ 1603.058641][T28146] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1603.067033][T28146] -> (&new->fa_lock){....}-{3:3} { [ 1603.072209][T28146] INITIAL USE at: [ 1603.076140][T28146] lock_acquire+0x106/0x350 [ 1603.082232][T28146] _raw_write_lock_irq+0x3d/0x50 [ 1603.088761][T28146] fasync_remove_entry+0xf1/0x1c0 [ 1603.095386][T28146] lease_modify+0x4f7/0x6c0 [ 1603.101478][T28146] locks_remove_file+0x5ed/0xf40 [ 1603.108006][T28146] __fput+0x378/0xa50 [ 1603.113584][T28146] task_work_run+0x1d9/0x270 [ 1603.119773][T28146] exit_to_user_mode_loop+0x193/0x6b0 [ 1603.126727][T28146] do_syscall_64+0x353/0x580 [ 1603.132900][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.140379][T28146] INITIAL READ USE at: [ 1603.144728][T28146] lock_acquire+0x106/0x350 [ 1603.151252][T28146] _raw_read_lock_irqsave+0x48/0x60 [ 1603.158477][T28146] kill_fasync+0x199/0x4d0 [ 1603.164926][T28146] pipe_release+0x19c/0x330 [ 1603.171444][T28146] __fput+0x418/0xa50 [ 1603.177441][T28146] task_work_run+0x1d9/0x270 [ 1603.184050][T28146] exit_to_user_mode_loop+0x193/0x6b0 [ 1603.191432][T28146] do_syscall_64+0x353/0x580 [ 1603.198034][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.205940][T28146] } [ 1603.208452][T28146] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1603.217288][T28146] ... acquired at: [ 1603.221105][T28146] _raw_read_lock_irqsave+0x48/0x60 [ 1603.226504][T28146] kill_fasync+0x199/0x4d0 [ 1603.231120][T28146] evdev_pass_values+0x552/0xc00 [ 1603.236242][T28146] evdev_events+0x1e6/0x340 [ 1603.240936][T28146] input_pass_values+0x288/0x890 [ 1603.246074][T28146] input_event_dispose+0x330/0x6b0 [ 1603.251389][T28146] input_inject_event+0x1dd/0x330 [ 1603.256613][T28146] evdev_write+0x325/0x4c0 [ 1603.261219][T28146] vfs_write+0x296/0xba0 [ 1603.265660][T28146] ksys_write+0x150/0x270 [ 1603.270187][T28146] do_syscall_64+0x174/0x580 [ 1603.274969][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.281062][T28146] [ 1603.283398][T28146] [ 1603.283398][T28146] the dependencies between the lock to be acquired [ 1603.283409][T28146] and SOFTIRQ-irq-unsafe lock: [ 1603.296957][T28146] -> (tasklist_lock){.+.+}-{3:3} { [ 1603.302198][T28146] HARDIRQ-ON-R at: [ 1603.306278][T28146] lock_acquire+0x106/0x350 [ 1603.312629][T28146] _raw_read_lock+0x36/0x50 [ 1603.318982][T28146] __do_wait+0xd9/0x720 [ 1603.324992][T28146] do_wait+0x1e7/0x510 [ 1603.330912][T28146] kernel_wait+0xd6/0x1c0 [ 1603.337094][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.344846][T28146] process_scheduled_works+0xa8e/0x14e0 [ 1603.352239][T28146] worker_thread+0xa47/0xfb0 [ 1603.358675][T28146] kthread+0x389/0x470 [ 1603.364592][T28146] ret_from_fork+0x514/0xb70 [ 1603.371022][T28146] ret_from_fork_asm+0x1a/0x30 [ 1603.377632][T28146] SOFTIRQ-ON-R at: [ 1603.381712][T28146] lock_acquire+0x106/0x350 [ 1603.388047][T28146] _raw_read_lock+0x36/0x50 [ 1603.394398][T28146] __do_wait+0xd9/0x720 [ 1603.400396][T28146] do_wait+0x1e7/0x510 [ 1603.406319][T28146] kernel_wait+0xd6/0x1c0 [ 1603.412496][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.420247][T28146] process_scheduled_works+0xa8e/0x14e0 [ 1603.427634][T28146] worker_thread+0xa47/0xfb0 [ 1603.434068][T28146] kthread+0x389/0x470 [ 1603.439981][T28146] ret_from_fork+0x514/0xb70 [ 1603.446430][T28146] ret_from_fork_asm+0x1a/0x30 [ 1603.453053][T28146] INITIAL USE at: [ 1603.457050][T28146] lock_acquire+0x106/0x350 [ 1603.463310][T28146] _raw_write_lock_irq+0x3d/0x50 [ 1603.470009][T28146] copy_process+0x29eb/0x4380 [ 1603.476447][T28146] kernel_clone+0x2d7/0x940 [ 1603.482710][T28146] user_mode_thread+0x110/0x180 [ 1603.489332][T28146] rest_init+0x23/0x300 [ 1603.495245][T28146] start_kernel+0x38a/0x3e0 [ 1603.501615][T28146] x86_64_start_reservations+0x24/0x30 [ 1603.508859][T28146] x86_64_start_kernel+0x137/0x1b0 [ 1603.515737][T28146] common_startup_64+0x13e/0x147 [ 1603.522432][T28146] INITIAL READ USE at: [ 1603.526859][T28146] lock_acquire+0x106/0x350 [ 1603.533547][T28146] _raw_read_lock+0x36/0x50 [ 1603.540249][T28146] __do_wait+0xd9/0x720 [ 1603.546605][T28146] do_wait+0x1e7/0x510 [ 1603.552871][T28146] kernel_wait+0xd6/0x1c0 [ 1603.559390][T28146] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.567478][T28146] process_scheduled_works+0xa8e/0x14e0 [ 1603.575214][T28146] worker_thread+0xa47/0xfb0 [ 1603.582000][T28146] kthread+0x389/0x470 [ 1603.588263][T28146] ret_from_fork+0x514/0xb70 [ 1603.595129][T28146] ret_from_fork_asm+0x1a/0x30 [ 1603.602084][T28146] } [ 1603.604677][T28146] ... key at: [] tasklist_lock+0x18/0x40 [ 1603.612627][T28146] ... acquired at: [ 1603.616533][T28146] _raw_read_lock+0x36/0x50 [ 1603.621249][T28146] send_sigio+0x101/0x370 [ 1603.625785][T28146] dnotify_handle_event+0x169/0x440 [ 1603.631198][T28146] fsnotify+0x18a5/0x1b60 [ 1603.635770][T28146] path_openat+0x11aa/0x3890 [ 1603.640564][T28146] do_file_open+0x23e/0x4a0 [ 1603.645264][T28146] do_sys_openat2+0x113/0x200 [ 1603.650137][T28146] __x64_sys_open+0x11e/0x150 [ 1603.655014][T28146] do_syscall_64+0x174/0x580 [ 1603.659807][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.665892][T28146] [ 1603.668232][T28146] -> (&f_owner->lock){....}-{3:3} { [ 1603.673476][T28146] INITIAL USE at: [ 1603.677417][T28146] lock_acquire+0x106/0x350 [ 1603.683509][T28146] _raw_write_lock_irq+0x3d/0x50 [ 1603.690032][T28146] __f_setown+0x5f/0x380 [ 1603.695865][T28146] do_fcntl+0x1730/0x1a30 [ 1603.701778][T28146] __se_sys_fcntl+0xc8/0x150 [ 1603.707948][T28146] do_syscall_64+0x174/0x580 [ 1603.714129][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.721605][T28146] INITIAL READ USE at: [ 1603.725951][T28146] lock_acquire+0x106/0x350 [ 1603.732469][T28146] _raw_read_lock_irq+0x45/0x60 [ 1603.739338][T28146] f_getown+0x54/0x2a0 [ 1603.745426][T28146] do_fcntl+0x1ac/0x1a30 [ 1603.751697][T28146] __se_sys_fcntl+0xc8/0x150 [ 1603.758309][T28146] do_syscall_64+0x174/0x580 [ 1603.764916][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.772832][T28146] } [ 1603.775360][T28146] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1603.784229][T28146] ... acquired at: [ 1603.788039][T28146] _raw_read_lock_irqsave+0x48/0x60 [ 1603.793433][T28146] send_sigio+0x38/0x370 [ 1603.797876][T28146] kill_fasync+0x24d/0x4d0 [ 1603.802492][T28146] lease_break_callback+0x26/0x30 [ 1603.807715][T28146] __break_lease+0x80d/0x1e70 [ 1603.812588][T28146] do_dentry_open+0xf11/0x1380 [ 1603.817569][T28146] vfs_open+0x3b/0x340 [ 1603.821849][T28146] path_openat+0x2e3b/0x3890 [ 1603.826653][T28146] do_file_open+0x23e/0x4a0 [ 1603.831360][T28146] do_sys_openat2+0x113/0x200 [ 1603.836241][T28146] __x64_sys_openat+0x138/0x170 [ 1603.841294][T28146] do_syscall_64+0x174/0x580 [ 1603.846077][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.852175][T28146] [ 1603.854529][T28146] [ 1603.854529][T28146] stack backtrace: [ 1603.860441][T28146] CPU: 1 UID: 0 PID: 28146 Comm: syz.1.25328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.860477][T28146] Tainted: [L]=SOFTLOCKUP [ 1603.860484][T28146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1603.860496][T28146] Call Trace: [ 1603.860503][T28146] [ 1603.860512][T28146] dump_stack_lvl+0xe8/0x150 [ 1603.860536][T28146] __lock_acquire+0x2a37/0x2cd0 [ 1603.860564][T28146] ? send_sigio+0x38/0x370 [ 1603.860589][T28146] lock_acquire+0x106/0x350 [ 1603.860607][T28146] ? send_sigio+0x38/0x370 [ 1603.860632][T28146] ? kill_fasync+0x199/0x4d0 [ 1603.860657][T28146] ? lock_acquire+0x106/0x350 [ 1603.860675][T28146] ? kill_fasync+0x199/0x4d0 [ 1603.860702][T28146] _raw_read_lock_irqsave+0x48/0x60 [ 1603.860730][T28146] ? send_sigio+0x38/0x370 [ 1603.860754][T28146] send_sigio+0x38/0x370 [ 1603.860781][T28146] kill_fasync+0x24d/0x4d0 [ 1603.860807][T28146] ? kill_fasync+0x53/0x4d0 [ 1603.860834][T28146] lease_break_callback+0x26/0x30 [ 1603.860862][T28146] __break_lease+0x80d/0x1e70 [ 1603.860891][T28146] ? __pfx___break_lease+0x10/0x10 [ 1603.860915][T28146] ? __pfx_apparmor_file_open+0x10/0x10 [ 1603.860945][T28146] do_dentry_open+0xf11/0x1380 [ 1603.860971][T28146] vfs_open+0x3b/0x340 [ 1603.860990][T28146] ? path_openat+0x2e23/0x3890 [ 1603.861017][T28146] path_openat+0x2e3b/0x3890 [ 1603.861042][T28146] ? arch_stack_walk+0xfb/0x150 [ 1603.861068][T28146] ? do_getname+0x2e/0x250 [ 1603.861089][T28146] ? stack_depot_save_flags+0x33/0x800 [ 1603.861189][T28146] ? __pfx_path_openat+0x10/0x10 [ 1603.861214][T28146] ? __x64_sys_openat+0x138/0x170 [ 1603.861237][T28146] ? __lock_acquire+0x683/0x2cd0 [ 1603.861259][T28146] do_file_open+0x23e/0x4a0 [ 1603.861287][T28146] ? __pfx_do_file_open+0x10/0x10 [ 1603.861321][T28146] ? alloc_fd+0x62e/0x6a0 [ 1603.861346][T28146] do_sys_openat2+0x113/0x200 [ 1603.861366][T28146] ? __se_sys_futex+0x3a8/0x450 [ 1603.861388][T28146] ? __pfx_do_sys_openat2+0x10/0x10 [ 1603.861411][T28146] ? rcu_is_watching+0x15/0xb0 [ 1603.861443][T28146] __x64_sys_openat+0x138/0x170 [ 1603.861473][T28146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.861492][T28146] do_syscall_64+0x174/0x580 [ 1603.861508][T28146] ? trace_irq_disable+0x3b/0x140 [ 1603.861535][T28146] ? clear_bhb_loop+0x40/0x90 [ 1603.861556][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.861574][T28146] RIP: 0033:0x7f9b4f59ce59 [ 1603.861592][T28146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.861609][T28146] RSP: 002b:00007f9b50408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1603.861630][T28146] RAX: ffffffffffffffda RBX: 00007f9b4f815fa0 RCX: 00007f9b4f59ce59 [ 1603.861644][T28146] RDX: 0000000000101842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1603.861657][T28146] RBP: 00007f9b4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1603.861669][T28146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.861681][T28146] R13: 00007f9b4f816038 R14: 00007f9b4f815fa0 R15: 00007f9b4f93fa48 [ 1603.861701][T28146] [ 1604.161231][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1604.179391][T21507] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1604.264978][T21515] usb 3-1: Using ep0 maxpacket: 8 [ 1604.271618][T21515] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1604.279904][T21515] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1604.291046][T21515] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1604.301339][T21515] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1604.312747][T21515] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1604.322918][T21515] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.336019][T21515] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1604.345256][T21515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.365465][T21507] usb 5-1: Using ep0 maxpacket: 32 [ 1604.372150][T21507] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1604.381403][T21507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.391447][T21507] usb 5-1: config 0 descriptor?? [ 1604.559527][T21515] usb 3-1: GET_CAPABILITIES returned 0 [ 1604.565321][T21515] usbtmc 3-1:16.0: can't read capabilities [ 1604.601829][T21507] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1604.610358][T21507] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1604.621598][T21507] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1604.629202][T21507] usb 5-1: media controller created [ 1604.640722][T21507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1604.763553][T21515] usb 3-1: USB disconnect, device number 113 [ 1604.803357][T21507] az6027: usb out operation failed. (-71) [ 1604.809954][T21507] az6027: usb out operation failed. (-71) [ 1604.818109][T21507] stb0899_attach: Driver disabled by Kconfig [ 1604.824148][T21507] az6027: no front-end attached [ 1604.824148][T21507] [ 1604.833137][T21507] az6027: usb out operation failed. (-71) [ 1604.839101][T21507] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1604.847331][T21507] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input205 [ 1604.860041][T21507] dvb-usb: schedule remote query interval to 400 msecs. [ 1604.867246][T21507] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1604.877968][T21507] usb 5-1: USB disconnect, device number 99 [ 1604.911261][T21507] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1607.446185][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.452971][ T1317] ieee802154 phy1 wpan1: encryption failed: -22