last executing test programs: 8.600892476s ago: executing program 4 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(0x0, 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r6) 5.910569377s ago: executing program 4 (id=755): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d41beee3f6b9d9cb52443666d3f63dcd68c2b2b7084688a23e6cb8c14599687979ca2417bff5bba4ca2c5c967412f87660e6f08b8ad16d9003e7ce1a64299501", 0x3c}, 0x48, 0xfffffffffffffff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x323001) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000340)={{0x8, 0x80}, 'port1\x00', 0x0, 0xc2002, 0x0, 0xff, 0x7, 0x1, 0x5, 0x0, 0x2, 0xcc}) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r4, 0x1) 5.662636063s ago: executing program 4 (id=757): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x8000000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace$pokeuser(0x6, r2, 0x0, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) 2.951297955s ago: executing program 4 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, 0xd, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x850) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.838466982s ago: executing program 4 (id=771): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.924783008s ago: executing program 2 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000b80)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0xffff, 0xc5, 0x10}, @x25={0x1, 0x5, 0xff, "4af85e2d383afb93c9233c65d8c077df4e776458a520e27b8de887e035dec93003c204e6070b6b9da6f9e1e326803368499d45ec02090497b0c22ac54aadd873854221d0e391a1820fc8c210656f65fea995c73997c47eecdc0fc788a06014ae2219f2b3d0dcaa801a25f6d41acab536d7aa2487b87cb7dd61dfd527c01f877db321de787f24c9dbf76f382984b7d180800099dcd5d3a42f552560ef624823e21e9546978891e9b5a2b829c1f04cbd7529467d08c641736e948a6a1559829403878fa9374419c5ae2d7fba7fa821a9daf4b541079c82b1bc23"}}, 0xea) 1.76877907s ago: executing program 4 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) kexec_load(0x100000000, 0x1, &(0x7f00000001c0), 0x0) kexec_load(0x7f, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getgroups(0x0, 0x0) madvise(&(0x7f00000d1000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.568435472s ago: executing program 3 (id=791): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.56829895s ago: executing program 2 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1003}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'virt_wifi0\x00'}) 1.422103822s ago: executing program 3 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.304400664s ago: executing program 0 (id=796): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611850000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1.24600806s ago: executing program 1 (id=797): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000050"], &(0x7f0000000080)=""/3, 0x68, 0x3, 0x1, 0x6}, 0x28) 1.19753188s ago: executing program 3 (id=798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.197287957s ago: executing program 2 (id=799): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.110765081s ago: executing program 0 (id=800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffe2, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.074718832s ago: executing program 3 (id=801): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.020974289s ago: executing program 1 (id=802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7, @private0, 0x4a}}}, &(0x7f0000000100)=0x84) 1.020780393s ago: executing program 2 (id=803): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r0, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x4000, 0x0}, 0x10) 874.15588ms ago: executing program 3 (id=804): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000500), 0x4) 841.16445ms ago: executing program 2 (id=805): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) 697.120399ms ago: executing program 1 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000007800000000000000b00001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 696.831672ms ago: executing program 3 (id=807): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade36e9fe672ce5fbebe5b175c12cf16c48c2d4b61ce76443664e69106113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0xfdef}], 0x1) 654.633395ms ago: executing program 0 (id=808): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x100000001, 0x100862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x0, 0xed) unshare(0x8000600) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 599.122924ms ago: executing program 2 (id=809): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, 0x0, 0x0, 0x4000) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0) 513.334751ms ago: executing program 1 (id=810): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xe068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9e}, 0x50) 422.430349ms ago: executing program 1 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x50}}], 0x2, 0x40) 267.897214ms ago: executing program 0 (id=812): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) 186.882242ms ago: executing program 1 (id=813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) 109.547528ms ago: executing program 0 (id=814): recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 0s ago: executing program 0 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40044) kernel console output (not intermixed with test programs): ying for an remote control event. [ 190.575275][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.612459][ T1210] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 190.622301][ T5922] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 190.723551][ T5909] usb 4-1: device descriptor read/64, error -71 [ 190.799841][ T5922] usb 5-1: config 0 has no interfaces? [ 190.808412][ T5922] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 190.818890][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.828071][ T5922] usb 5-1: Product: syz [ 190.832357][ T5922] usb 5-1: Manufacturer: syz [ 190.838293][ T5922] usb 5-1: SerialNumber: syz [ 190.848644][ T5922] usb 5-1: config 0 descriptor?? [ 190.914209][ T796] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 190.963587][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.976986][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 191.114702][ T5909] usb 4-1: device descriptor read/64, error -71 [ 191.169239][ T5831] usb 5-1: USB disconnect, device number 21 [ 191.253902][ T5909] usb usb4-port1: attempt power cycle [ 191.443832][ T5889] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 191.556726][ T796] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 191.587248][ T796] em28xx 1-1:0.0: board has no eeprom [ 191.631311][ T5889] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.643624][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.658098][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.666674][ T796] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.683184][ T5889] usb 3-1: Product: syz [ 191.692214][ T796] em28xx 1-1:0.0: dvb set to bulk mode. [ 191.698097][ T5909] usb 4-1: device descriptor read/8, error -71 [ 191.713532][ T5889] usb 3-1: Manufacturer: syz [ 191.718283][ T5889] usb 3-1: SerialNumber: syz [ 191.732671][ T5831] em28xx 1-1:0.0: Binding DVB extension [ 191.817185][ T796] usb 1-1: USB disconnect, device number 27 [ 191.854965][ T796] em28xx 1-1:0.0: Disconnecting em28xx [ 191.879827][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.374'. [ 191.890421][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.374'. [ 191.933630][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.970339][ T5909] usb 4-1: device descriptor read/8, error -71 [ 191.992368][ T5831] em28xx 1-1:0.0: Registering input extension [ 192.029502][ T796] em28xx 1-1:0.0: Closing input extension [ 192.106061][ T5909] usb usb4-port1: unable to enumerate USB device [ 192.161847][ T796] em28xx 1-1:0.0: Freeing device [ 192.266444][ T7402] netlink: 180 bytes leftover after parsing attributes in process `syz.1.377'. [ 192.286041][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.377'. [ 192.637334][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 192.676228][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.718047][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.736692][ T5889] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 192.780597][ T5889] usb 3-1: USB disconnect, device number 16 [ 192.839042][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 193.333592][ T5889] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 193.490137][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.516451][ T5889] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 193.541850][ T5889] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 193.594952][ T5889] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 193.622860][ T5889] usb 1-1: config 129 has no interface number 0 [ 193.642562][ T5889] usb 1-1: config 129 has no interface number 1 [ 193.657487][ T5889] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 193.688642][ T5889] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 193.712004][ T5889] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 193.756672][ T5889] usb 1-1: config 129 interface 135 has no altsetting 0 [ 193.787546][ T5889] usb 1-1: config 129 interface 5 has no altsetting 0 [ 193.824495][ T5889] usb 1-1: string descriptor 0 read error: -22 [ 193.851260][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 193.876965][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.951974][ T7431] vlan2: entered promiscuous mode [ 193.971166][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.972932][ T7431] bridge0: entered promiscuous mode [ 194.011149][ T5889] usb 1-1: MIDIStreaming interface descriptor not found [ 194.144538][ T5909] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.297724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304333][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333604][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 194.359985][ T5909] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 194.399303][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.431584][ T5909] usb 3-1: Product: syz [ 194.448822][ T5909] usb 3-1: Manufacturer: syz [ 194.465306][ T5909] usb 3-1: SerialNumber: syz [ 194.490081][ T5909] usb 3-1: config 0 descriptor?? [ 194.519450][ T5909] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 194.555072][ T5909] pctv452e: pctv452e_power_ctrl: 1 [ 194.555072][ T5909] [ 194.581423][ T5909] usb 3-1: selecting invalid altsetting 3 [ 194.602499][ T5909] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 194.602499][ T5909] [ 194.647269][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 194.689140][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.718061][ T5909] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 194.731447][ T7419] dvb-usb: bulk message failed: -22 (7/0) [ 194.754486][ T5909] usb 3-1: media controller created [ 195.495628][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 195.663937][ T7419] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 195.682311][ T5909] dvb-usb: bulk message failed: -22 (8/0) [ 195.696637][ T5909] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 195.720909][ T5909] dvb-usb: MAC address reading failed. [ 195.840771][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.849794][ T7455] netlink: 6 bytes leftover after parsing attributes in process `syz.4.390'. [ 196.036013][ T5909] DVB: Unable to find symbol stb0899_attach() [ 196.071004][ T5909] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 196.276425][ T5909] rc_core: IR keymap rc-tt-1500 not found [ 196.303932][ T7460] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 196.313522][ T5909] Registered IR keymap rc-empty [ 196.319659][ T5909] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 196.354890][ T7460] team0: Device veth1_vlan failed to register rx_handler [ 196.399610][ T5909] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 196.436535][ T5831] usb 1-1: USB disconnect, device number 28 [ 196.513227][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 196.552420][ T5909] pctv452e: pctv452e_power_ctrl: 0 [ 196.552420][ T5909] [ 196.617094][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 196.673543][ T5922] dvb-usb: bulk message failed: -22 (4/0) [ 196.708320][ T5922] dvb-usb: error -22 while querying for an remote control event. [ 196.861693][ T5922] dvb-usb: bulk message failed: -22 (4/0) [ 196.897883][ T5922] dvb-usb: error -22 while querying for an remote control event. [ 197.097221][ T5922] dvb-usb: bulk message failed: -22 (4/0) [ 197.123302][ T5922] dvb-usb: error -22 while querying for an remote control event. [ 197.171131][ T5831] usb 3-1: USB disconnect, device number 17 [ 197.219460][ T7479] fuse: Bad value for 'group_id' [ 197.240791][ T7479] fuse: Bad value for 'group_id' [ 197.446500][ T5831] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 197.606448][ T30] audit: type=1326 audit(1773684651.415:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 197.695764][ T7501] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 197.715125][ T30] audit: type=1326 audit(1773684651.415:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 197.805089][ T30] audit: type=1326 audit(1773684651.435:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 197.853964][ T7504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.403'. [ 197.898845][ T30] audit: type=1326 audit(1773684651.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 198.012417][ T30] audit: type=1326 audit(1773684651.435:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 198.085211][ T7501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.182051][ T30] audit: type=1326 audit(1773684651.445:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 198.223582][ T5831] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 198.261057][ T30] audit: type=1326 audit(1773684651.445:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 198.400488][ T30] audit: type=1326 audit(1773684651.445:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28679c799 code=0x7ffc0000 [ 198.540696][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.578757][ T5831] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 198.618749][ T5831] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.675469][ T5831] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.750278][ T5831] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 198.806298][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.864523][ T5831] usb 1-1: Product: syz [ 198.880533][ T5831] usb 1-1: Manufacturer: syz [ 198.905110][ T5831] usb 1-1: SerialNumber: syz [ 199.338991][ T7519] netlink: 180 bytes leftover after parsing attributes in process `syz.1.406'. [ 199.435468][ T7519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.406'. [ 200.668539][ T7533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.839081][ T796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 200.946324][ T796] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.620204][ T7553] loop2: detected capacity change from 0 to 7 [ 201.662627][ T7553] Dev loop2: unable to read RDB block 7 [ 201.694845][ T7553] loop2: unable to read partition table [ 201.732066][ T7553] loop2: partition table beyond EOD, truncated [ 201.765919][ T7553] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 201.963103][ T5831] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 202.251382][ T5831] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 202.347590][ T5831] usb 1-1: USB disconnect, device number 29 [ 202.486282][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.626653][ T7578] netlink: 180 bytes leftover after parsing attributes in process `syz.3.421'. [ 203.635853][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.421'. [ 203.655322][ T7579] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 203.785321][ T7581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.420'. [ 203.807637][ T7579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.001739][ T7586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.422'. [ 204.441037][ T7594] loop2: detected capacity change from 0 to 7 [ 204.460827][ T5934] Dev loop2: unable to read RDB block 7 [ 204.476506][ T5934] loop2: unable to read partition table [ 204.538926][ T5934] loop2: partition table beyond EOD, truncated [ 204.578180][ T7594] Dev loop2: unable to read RDB block 7 [ 204.606333][ T7594] loop2: unable to read partition table [ 204.674976][ T7594] loop2: partition table beyond EOD, truncated [ 204.723165][ T7594] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 204.943917][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 205.113524][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 205.136299][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.167459][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 205.193474][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.221989][ T9] usb 1-1: Product: syz [ 205.237861][ T9] usb 1-1: Manufacturer: syz [ 205.258225][ T9] usb 1-1: SerialNumber: syz [ 206.014806][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 206.060958][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 206.234446][ T9] usb 1-1: USB disconnect, device number 30 [ 206.345181][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.087605][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 207.460544][ T7633] netlink: 148 bytes leftover after parsing attributes in process `syz.3.435'. [ 207.577282][ T7634] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 207.666769][ T7633] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 208.223850][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 208.393624][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 208.403767][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.428435][ T9] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 208.457397][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.499470][ T9] usb 4-1: config 1 has no interface number 2 [ 208.528820][ T9] usb 4-1: config 1 interface 255 has no altsetting 0 [ 208.553681][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 208.575842][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 208.593537][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.601959][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 208.611953][ T9] usb 4-1: Product: syz [ 208.621015][ T9] usb 4-1: Manufacturer: syz [ 208.635185][ T9] usb 4-1: SerialNumber: syz [ 208.667706][ T7651] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.440'. [ 208.973659][ T9] usb 4-1: USB disconnect, device number 17 [ 209.067386][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.076538][ T7656] netlink: 180 bytes leftover after parsing attributes in process `syz.4.442'. [ 209.094788][ T7656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.442'. [ 209.303604][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 209.433496][ T5922] usb 3-1: device descriptor read/64, error -71 [ 209.455213][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 209.683735][ T5922] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.833504][ T5922] usb 3-1: device descriptor read/64, error -71 [ 209.953793][ T5922] usb usb3-port1: attempt power cycle [ 210.323878][ T5922] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.402109][ T5922] usb 3-1: device descriptor read/8, error -71 [ 210.523633][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 210.653486][ T5922] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 210.804329][ T5922] usb 3-1: device descriptor read/8, error -71 [ 210.923558][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 211.023852][ T5909] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 211.063567][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.109653][ T5922] usb usb3-port1: unable to enumerate USB device [ 211.122451][ T5909] usb 4-1: Product: syz [ 211.134984][ T7692] xfrm0: entered promiscuous mode [ 211.141686][ T7692] xfrm0: entered allmulticast mode [ 211.143284][ T5909] usb 4-1: Manufacturer: syz [ 211.226641][ T5909] usb 4-1: SerialNumber: syz [ 211.475343][ T5909] usb 4-1: config 0 descriptor?? [ 211.534206][ T5909] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 211.552918][ T5909] dvb-usb: bulk message failed: -22 (4/0) [ 211.559024][ T5909] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 211.583571][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 211.590077][ T5909] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 211.638063][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.653187][ T5909] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 211.673564][ T5909] usb 4-1: media controller created [ 211.716097][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.745352][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.751682][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 211.751853][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.763932][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.764036][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.794293][ T7678] dvb-usb: bulk message failed: -22 (7/0) [ 211.829677][ T7678] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 211.853939][ T5909] usb 4-1: selecting invalid altsetting 3 [ 211.859756][ T5909] ttusb2: set interface to alts=3 failed [ 211.882004][ T7678] ttusb2: i2c transfer failed. [ 212.039769][ T5909] DVB: Unable to find symbol tda10086_attach() [ 212.060421][ T5909] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 212.113887][ T5909] dvb-usb: bulk message failed: -22 (4/0) [ 212.130687][ T5909] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 212.156905][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 212.174012][ T5909] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 212.210486][ T5909] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 212.256123][ T5909] usb 4-1: USB disconnect, device number 18 [ 212.398344][ T5909] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 212.885782][ T5831] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 213.058267][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 213.075337][ T5831] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 213.097204][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.118644][ T5831] usb 4-1: Product: syz [ 213.123539][ T5831] usb 4-1: Manufacturer: syz [ 213.128768][ T5831] usb 4-1: SerialNumber: syz [ 213.149012][ T5831] usb 4-1: config 0 descriptor?? [ 213.158319][ T5831] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 213.254307][ T5909] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.428029][ T5909] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 213.449374][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.469793][ T5909] usb 3-1: Product: syz [ 213.482466][ T5909] usb 3-1: Manufacturer: syz [ 213.521064][ T5909] usb 3-1: SerialNumber: syz [ 213.548890][ T5909] usb 3-1: config 0 descriptor?? [ 213.572696][ T5909] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 213.589326][ T7710] pimreg9: entered allmulticast mode [ 213.819952][ T5831] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 213.834027][ T5831] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 213.860277][ T5831] usb 4-1: USB disconnect, device number 19 [ 214.523576][ T7727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.534845][ T7727] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.560671][ T7727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.577346][ T7727] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.605540][ T7727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.611629][ T7727] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.652204][ T7727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.663696][ T7727] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.682610][ T7727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.699762][ T7727] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.984464][ T6239] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 215.048636][ T7745] netlink: 180 bytes leftover after parsing attributes in process `syz.4.467'. [ 215.064241][ T7745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.467'. [ 215.253750][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 215.270363][ T6239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.279957][ T5909] gspca_sunplus: reg_r err -71 [ 215.289521][ T5909] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 215.303301][ T5909] usb 3-1: USB disconnect, device number 22 [ 215.347938][ T6239] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 215.361461][ T6239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.371920][ T6239] usb 4-1: Product: syz [ 215.376716][ T6239] usb 4-1: Manufacturer: syz [ 215.381476][ T6239] usb 4-1: SerialNumber: syz [ 215.841317][ T7769] loop5: detected capacity change from 0 to 7 [ 215.851491][ T7769] Dev loop5: unable to read RDB block 7 [ 215.857594][ T7769] loop5: unable to read partition table [ 215.865965][ T7769] loop5: partition table beyond EOD, truncated [ 215.872281][ T7769] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 216.489219][ T7791] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 216.578305][ T7793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.477'. [ 216.595892][ T7791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.613541][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 216.613787][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 216.634327][ T1210] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 216.693593][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 216.693610][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 216.819985][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.874404][ T1210] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.909663][ T1210] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 216.941626][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.978465][ T1210] usb 3-1: Product: syz [ 216.990766][ T1210] usb 3-1: Manufacturer: syz [ 217.010974][ T1210] usb 3-1: SerialNumber: syz [ 217.046610][ T1210] usb 3-1: config 0 descriptor?? [ 217.093723][ T1210] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 217.137139][ T1210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.184879][ T1210] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 217.263593][ T1210] usb 3-1: media controller created [ 217.333525][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 217.349156][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.651232][ T1210] DVB: Unable to find symbol tda10046_attach() [ 217.679424][ T1210] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 217.690507][ T1210] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 217.933769][ T1210] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 217.967922][ T1210] usb 3-1: USB disconnect, device number 23 [ 218.147579][ T6239] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 218.319202][ T6239] usb 4-1: USB disconnect, device number 20 [ 218.457480][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.697890][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 218.705066][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 218.773851][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 218.780610][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 219.133555][ T796] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 219.313744][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 219.360146][ T796] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 219.408939][ T796] usb 5-1: config 0 has no interface number 0 [ 219.439197][ T796] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.505722][ T796] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 219.553674][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.596362][ T796] usb 5-1: Product: syz [ 219.600587][ T796] usb 5-1: Manufacturer: syz [ 219.622503][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 219.635699][ T796] usb 5-1: SerialNumber: syz [ 219.677129][ T796] usb 5-1: config 0 descriptor?? [ 219.698110][ T796] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 219.737960][ T796] em28xx 5-1:0.132: Video interface 132 found: [ 219.908055][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 219.936526][ T2345] pvrusb2: Failure uploading firmware1 [ 219.942047][ T2345] pvrusb2: Device initialization was not successful. [ 219.953532][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.965192][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.986045][ T5902] pvrusb2: Device being rendered inoperable [ 219.986587][ T2345] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 220.016872][ T2345] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 220.105678][ T796] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 220.192912][ T7829] xt_hashlimit: size too large, truncated to 1048576 [ 220.273527][ T5831] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 220.285768][ T30] audit: type=1326 audit(1773684674.095:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.327106][ T30] audit: type=1326 audit(1773684674.095:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.351974][ T30] audit: type=1326 audit(1773684674.115:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.378132][ T30] audit: type=1326 audit(1773684674.115:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.402122][ T30] audit: type=1326 audit(1773684674.115:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.426853][ T30] audit: type=1326 audit(1773684674.115:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.454716][ T30] audit: type=1326 audit(1773684674.115:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.477821][ T30] audit: type=1326 audit(1773684674.115:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.503145][ T30] audit: type=1326 audit(1773684674.115:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.513138][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 220.529833][ T796] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 220.595091][ T796] em28xx 5-1:0.132: board has no eeprom [ 220.600792][ T30] audit: type=1326 audit(1773684674.115:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x7ffc0000 [ 220.633104][ T5831] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.642965][ T5831] usb 4-1: can't read configurations, error -71 [ 220.731019][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.745240][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.913516][ T796] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 221.003513][ T5889] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 221.043579][ T796] em28xx 5-1:0.132: analog set to bulk mode. [ 221.220758][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 221.362990][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 221.384805][ T796] usb 5-1: USB disconnect, device number 22 [ 221.394758][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.477638][ T796] em28xx 5-1:0.132: Disconnecting em28xx [ 221.670252][ T5889] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 221.692640][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.711106][ T5889] usb 3-1: Product: syz [ 221.723944][ T5889] usb 3-1: Manufacturer: syz [ 221.734168][ T5889] usb 3-1: SerialNumber: syz [ 221.808460][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 221.840228][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 221.853488][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 221.887754][ T9] usb 5-1: Decoder not found [ 221.895231][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 221.907002][ T9] em28xx 5-1:0.132: failed to create media graph [ 221.922906][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 221.938804][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 221.951129][ T796] em28xx 5-1:0.132: Closing input extension [ 221.995501][ T6239] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 222.023037][ T796] em28xx 5-1:0.132: Freeing device [ 222.239556][ T6239] usb 4-1: Using ep0 maxpacket: 32 [ 222.272771][ T6239] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 222.297727][ T6239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.351259][ T6239] usb 4-1: config 0 descriptor?? [ 222.405178][ T6239] as10x_usb: device has been detected [ 222.444336][ T6239] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 222.517364][ T6239] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 222.637937][ T6239] as10x_usb: error during firmware upload part1 [ 222.677947][ T6239] Registered device nBox DVB-T Dongle [ 223.188998][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.468917][ T7878] netlink: 'syz.0.496': attribute type 44 has an invalid length. [ 223.965356][ T7885] fuse: Unknown parameter ')$'-YQm`P;}2-nH!D/ V6s l' [ 224.523031][ T5889] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 224.686148][ T5889] usb 3-1: USB disconnect, device number 24 [ 224.806473][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.726606][ T7912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.504'. [ 225.755230][ T9] IPVS: starting estimator thread 0... [ 225.778555][ T7912] IPVS: sh: FWM 3 0x00000003 - no destination available [ 225.828928][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 225.828944][ T30] audit: type=1800 audit(1773684679.625:100): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.505" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=15593 res=0 errno=0 [ 225.903821][ T7922] IPVS: using max 31 ests per chain, 74400 per kthread [ 226.242280][ T5922] usb 4-1: USB disconnect, device number 23 [ 226.356396][ T5922] Unregistered device nBox DVB-T Dongle [ 226.381477][ T5922] as10x_usb: device has been disconnected [ 227.153786][ T5922] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 227.190361][ T3560] IPVS: stop unused estimator thread 0... [ 227.366212][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.402142][ T5922] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.428857][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.459728][ T5922] usb 1-1: config 0 descriptor?? [ 227.605053][ T1210] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 227.628547][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.510'. [ 227.923721][ T1210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.050105][ T1210] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 228.060479][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.071567][ T1210] usb 5-1: Product: syz [ 228.076334][ T1210] usb 5-1: Manufacturer: syz [ 228.088799][ T1210] usb 5-1: SerialNumber: syz [ 228.365312][ T7948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.488668][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.514170][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.470462][ T1210] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 230.896830][ T1210] usb 5-1: USB disconnect, device number 23 [ 231.098776][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.365395][ T5839] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 231.460431][ T7992] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 231.640739][ T7999] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 231.882698][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 231.893919][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.998354][ T5922] usb 1-1: USB disconnect, device number 31 [ 232.045787][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 233.199780][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 233.282118][ T8041] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 233.315782][ T8041] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 234.853715][ T5889] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 235.003647][ T5889] usb 5-1: device descriptor read/64, error -71 [ 235.283616][ T5889] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 235.601611][ T5889] usb 5-1: device descriptor read/64, error -71 [ 235.734288][ T5889] usb usb5-port1: attempt power cycle [ 236.153593][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 236.194850][ T5889] usb 5-1: device descriptor read/8, error -71 [ 236.453723][ T5889] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 236.494187][ T5889] usb 5-1: device descriptor read/8, error -71 [ 236.501147][ T8103] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 236.597431][ T8106] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 236.627628][ T5889] usb usb5-port1: unable to enumerate USB device [ 236.646521][ T8103] !: entered promiscuous mode [ 236.714471][ T8106] !: left promiscuous mode [ 236.938417][ T30] audit: type=1326 audit(1773684690.745:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.061176][ T30] audit: type=1326 audit(1773684690.745:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.116361][ T30] audit: type=1326 audit(1773684690.745:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.200951][ T30] audit: type=1326 audit(1773684690.785:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.263603][ T30] audit: type=1326 audit(1773684690.785:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.286907][ T30] audit: type=1326 audit(1773684690.785:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.321107][ T30] audit: type=1326 audit(1773684690.785:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.353717][ T30] audit: type=1326 audit(1773684690.785:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.439617][ T30] audit: type=1326 audit(1773684690.785:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 237.515486][ T30] audit: type=1326 audit(1773684690.785:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 238.299835][ T5889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.444683][ T5889] usb 4-1: device descriptor read/64, error -71 [ 238.713558][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 238.873598][ T5889] usb 4-1: device descriptor read/64, error -71 [ 239.025454][ T5889] usb usb4-port1: attempt power cycle [ 239.389545][ T5889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 239.440119][ T5889] usb 4-1: device descriptor read/8, error -71 [ 239.703882][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 239.756400][ T5889] usb 4-1: device descriptor read/8, error -71 [ 239.882122][ T5889] usb usb4-port1: unable to enumerate USB device [ 239.923026][ T8164] fuse: Unknown parameter 'appraise_type' [ 240.200088][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 240.233866][ T6239] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 240.394524][ T6239] usb 1-1: Using ep0 maxpacket: 16 [ 240.415106][ T6239] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.442100][ T6239] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.467704][ T6239] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.493033][ T6239] usb 1-1: config 1 interface 0 has no altsetting 0 [ 240.507602][ T6239] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 240.518776][ T6239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.527456][ T6239] usb 1-1: Product: syz [ 240.532054][ T6239] usb 1-1: Manufacturer: syz [ 240.539085][ T6239] usb 1-1: SerialNumber: syz [ 240.761971][ T6239] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 240.775074][ T1210] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 240.947990][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.964580][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.974283][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.988117][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.000975][ T1210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.026711][ T6239] usb 1-1: USB disconnect, device number 32 [ 241.041663][ T1210] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.051791][ T6239] usblp0: removed [ 241.069484][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.108193][ T1210] usb 5-1: config 0 descriptor?? [ 241.337216][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.352411][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.449715][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 241.460347][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 241.518510][ T6239] IPVS: starting estimator thread 0... [ 241.568151][ T8204] netlink: 'syz.3.578': attribute type 4 has an invalid length. [ 241.593310][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 241.613531][ T8205] IPVS: using max 28 ests per chain, 67200 per kthread [ 241.640378][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 241.686093][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 241.753954][ T8207] FAULT_INJECTION: forcing a failure. [ 241.753954][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 241.779143][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 241.796363][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 241.834556][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.0.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.834581][ T8207] Tainted: [L]=SOFTLOCKUP [ 241.834596][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.834611][ T8207] Call Trace: [ 241.834618][ T8207] [ 241.834625][ T8207] dump_stack_lvl+0xe8/0x150 [ 241.834651][ T8207] should_fail_ex+0x412/0x560 [ 241.834676][ T8207] _copy_from_iter+0x1d3/0x1670 [ 241.834707][ T8207] ? __pfx__copy_from_iter+0x10/0x10 [ 241.834727][ T8207] ? sock_alloc_send_pskb+0x896/0x990 [ 241.834750][ T8207] ? __pfx__copy_from_iter+0x10/0x10 [ 241.834773][ T8207] ? page_copy_sane+0x16a/0x270 [ 241.834797][ T8207] copy_page_from_iter+0xdd/0x170 [ 241.834846][ T8207] skb_copy_datagram_from_iter+0x306/0x710 [ 241.834882][ T8207] packet_sendmsg+0x37e4/0x50f0 [ 241.834916][ T8207] ? __lock_acquire+0x6b5/0x2cf0 [ 241.834971][ T8207] ? aa_sk_perm+0x6d5/0x900 [ 241.835007][ T8207] ? __pfx_packet_sendmsg+0x10/0x10 [ 241.835034][ T8207] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 241.835071][ T8207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.835102][ T8207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.835128][ T8207] ____sys_sendmsg+0x972/0x9f0 [ 241.835160][ T8207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.835183][ T8207] ? import_iovec+0x73/0xa0 [ 241.835200][ T8207] ___sys_sendmsg+0x2a5/0x360 [ 241.835220][ T8207] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.835260][ T8207] ? __fget_files+0x2a/0x420 [ 241.835281][ T8207] ? __fget_files+0x3a0/0x420 [ 241.835310][ T8207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.835328][ T8207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.835352][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 241.835376][ T8207] do_syscall_64+0x14d/0xf80 [ 241.835392][ T8207] ? trace_irq_disable+0x3b/0x150 [ 241.835435][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.835457][ T8207] ? clear_bhb_loop+0x40/0x90 [ 241.835490][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.835506][ T8207] RIP: 0033:0x7fccf879c799 [ 241.835526][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.835539][ T8207] RSP: 002b:00007fccf9710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.835555][ T8207] RAX: ffffffffffffffda RBX: 00007fccf8a15fa0 RCX: 00007fccf879c799 [ 241.835567][ T8207] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 241.835576][ T8207] RBP: 00007fccf9710090 R08: 0000000000000000 R09: 0000000000000000 [ 241.835590][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.835599][ T8207] R13: 00007fccf8a16038 R14: 00007fccf8a15fa0 R15: 00007fccf8b3fa48 [ 241.835621][ T8207] [ 242.339156][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 242.346757][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 242.355295][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 242.362692][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 242.370741][ T1210] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 242.423764][ T1210] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 242.517318][ T1210] usb 5-1: USB disconnect, device number 28 [ 242.947560][ T8209] fido_id[8209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 243.027503][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 243.214748][ T8221] netlink: 'syz.4.582': attribute type 8 has an invalid length. [ 243.364716][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 243.713615][ T5889] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 243.883546][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 243.891627][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.913245][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.933694][ T5889] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 243.942789][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.981659][ T5889] usb 5-1: config 0 descriptor?? [ 244.402605][ T5889] hid (null): global environment stack underflow [ 244.433173][ T5889] nintendo 0003:057E:200E.0007: global environment stack underflow [ 244.444190][ T5889] nintendo 0003:057E:200E.0007: item 0 4 1 11 parsing failed [ 244.454536][ T5889] nintendo 0003:057E:200E.0007: HID parse failed [ 244.464781][ T5889] nintendo 0003:057E:200E.0007: probe - fail = -22 [ 244.471476][ T5889] nintendo 0003:057E:200E.0007: probe with driver nintendo failed with error -22 [ 244.634224][ T5889] usb 5-1: USB disconnect, device number 29 [ 245.231075][ T8252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.544698][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 245.673503][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 245.863467][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 245.954368][ T5889] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 245.987822][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.010863][ T5889] usb 4-1: Product: syz [ 246.010888][ T5889] usb 4-1: Manufacturer: syz [ 246.010903][ T5889] usb 4-1: SerialNumber: syz [ 246.029369][ T5889] usb 4-1: config 0 descriptor?? [ 246.082029][ T8271] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.082238][ T8271] macvtap1: entered allmulticast mode [ 246.082552][ T8271] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 246.113995][ T5889] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 246.114044][ T5889] pctv452e: pctv452e_power_ctrl: 1 [ 246.114044][ T5889] [ 246.114078][ T5889] usb 4-1: selecting invalid altsetting 3 [ 246.114089][ T5889] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 246.114089][ T5889] [ 246.114100][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 246.119131][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.119953][ T5889] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 246.120019][ T5889] usb 4-1: media controller created [ 246.120067][ T5889] dvb-usb: bulk message failed: -22 (8/0) [ 246.120093][ T5889] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 246.120150][ T5889] dvb-usb: MAC address reading failed. [ 246.150354][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.371845][ T5889] DVB: Unable to find symbol stb0899_attach() [ 246.371860][ T5889] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 246.558177][ T8271] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 246.558203][ T8271] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 246.655320][ T5889] rc_core: IR keymap rc-tt-1500 not found [ 246.655338][ T5889] Registered IR keymap rc-empty [ 246.657705][ T5889] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 246.693273][ T5889] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 246.718268][ T5889] dvb-usb: schedule remote query interval to 100 msecs. [ 246.718295][ T5889] pctv452e: pctv452e_power_ctrl: 0 [ 246.718295][ T5889] [ 246.718304][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 246.830191][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 246.830232][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 246.934010][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 246.934040][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 247.070553][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 247.070589][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 247.173843][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 247.173881][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 247.284091][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 247.284128][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 247.403478][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 247.403511][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 247.503491][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 247.503528][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 247.613478][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 247.613512][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 247.723702][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 247.723740][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 247.843635][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 247.883956][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.067530][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 248.109338][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.180571][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 248.279536][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 248.319489][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.463564][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 248.478920][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 248.500367][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.654133][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 248.709520][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.800278][ T8296] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 248.868931][ T8298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.599'. [ 248.869712][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 248.924633][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 248.933791][ T8296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.047450][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 249.053293][ T796] dvb-usb: error -22 while querying for an remote control event. [ 249.163567][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 249.195083][ T796] dvb-usb: error -22 while querying for an remote control event. [ 249.323632][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 249.329598][ T796] dvb-usb: error -22 while querying for an remote control event. [ 249.443609][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 249.449625][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 249.473488][ T6239] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 249.568970][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 249.577236][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 249.638733][ T6239] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 249.648529][ T6239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.665948][ T6239] usb 1-1: Product: syz [ 249.675265][ T6239] usb 1-1: Manufacturer: syz [ 249.684383][ T6239] usb 1-1: SerialNumber: syz [ 249.703946][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 249.709897][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 249.823548][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 249.832512][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 249.943592][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 249.950769][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.099522][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 250.108783][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.146550][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.303509][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.361179][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.503528][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.531324][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.673547][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.693615][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.835220][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.846380][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 250.973546][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 250.993504][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 251.133547][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 251.152782][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 251.293505][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 251.368934][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 251.483518][ T1210] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 251.524234][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 251.558430][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 251.689676][ T1210] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.713711][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 251.729860][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.754042][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 251.782201][ T1210] usb 5-1: Product: syz [ 251.807081][ T1210] usb 5-1: Manufacturer: syz [ 251.862027][ T1210] usb 5-1: SerialNumber: syz [ 251.907285][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 251.939032][ T1210] usb 5-1: config 0 descriptor?? [ 252.169198][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 252.297035][ T1210] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.308908][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 252.331474][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 252.505977][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 252.541171][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 252.606400][ T1210] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 252.664612][ T1210] usb 5-1: USB disconnect, device number 30 [ 252.686110][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 252.691915][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 252.873764][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 252.878885][ T6239] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.879570][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 252.954866][ T6239] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 252.964932][ T6239] usb 1-1: found format II with max.bitrate = 0, frame size=9 [ 252.972459][ T6239] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 253.014005][ T6239] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 253.103597][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 253.114647][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 253.138668][ T6239] usb 1-1: found format II with max.bitrate = 0, frame size=9 [ 253.157849][ T8334] dlm: non-version read from control device 7 [ 253.164336][ T6239] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 253.210057][ T6239] usb 1-1: unit 2 not found! [ 253.246650][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 253.252414][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 253.253720][ T1210] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 253.426436][ T6239] usb 1-1: USB disconnect, device number 33 [ 253.441346][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 253.467660][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 253.552609][ T8337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.653603][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 253.690660][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.735326][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 253.750989][ T5909] usb 4-1: USB disconnect, device number 28 [ 253.766774][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 253.936235][ T5909] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 254.169207][ T1210] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 254.192327][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.211998][ T1210] usb 5-1: Product: syz [ 254.222886][ T1210] usb 5-1: Manufacturer: syz [ 254.237795][ T1210] usb 5-1: SerialNumber: syz [ 254.374900][ T5889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 254.426650][ T1210] usb 5-1: config 0 descriptor?? [ 254.471126][ T1210] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 254.539746][ T1210] pctv452e: pctv452e_power_ctrl: 1 [ 254.539746][ T1210] [ 254.548052][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 254.558712][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.571745][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.580864][ T1210] usb 5-1: selecting invalid altsetting 3 [ 254.594385][ T5889] usb 1-1: Product: syz [ 254.598602][ T5889] usb 1-1: Manufacturer: syz [ 254.603962][ T5889] usb 1-1: SerialNumber: syz [ 254.619112][ T5889] usb 1-1: config 0 descriptor?? [ 254.636869][ T1210] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 254.636869][ T1210] [ 254.692422][ T1210] dvb-usb: bulk message failed: -22 (5/0) [ 254.830575][ T1210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.868639][ T5889] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 254.977671][ T1210] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 255.077376][ T1210] usb 5-1: media controller created [ 255.098363][ T1210] dvb-usb: bulk message failed: -22 (8/0) [ 255.176651][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 255.193502][ T1210] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 255.208905][ T6239] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.232725][ T1210] dvb-usb: MAC address reading failed. [ 255.301587][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.405053][ T6239] usb 4-1: Using ep0 maxpacket: 16 [ 255.466810][ T6239] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.488923][ T6239] usb 4-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 255.500897][ T5889] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 255.663686][ T6239] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.739204][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747445][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.786366][ T6239] usb 4-1: config 1 has no interface number 1 [ 255.813671][ T6239] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.831270][ T6239] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 255.849658][ T6239] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 255.878529][ T6239] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 255.957970][ T1210] DVB: Unable to find symbol stb0899_attach() [ 255.997589][ T1210] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 256.175303][ T6239] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.186654][ T6239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.200607][ T6239] usb 4-1: Product: syz [ 256.235771][ T6239] usb 4-1: Manufacturer: syz [ 256.242594][ T6239] usb 4-1: SerialNumber: syz [ 256.353488][ T1210] rc_core: IR keymap rc-tt-1500 not found [ 256.359286][ T1210] Registered IR keymap rc-empty [ 256.385025][ T1210] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 256.534399][ T1210] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 256.598970][ T1210] dvb-usb: schedule remote query interval to 100 msecs. [ 256.636397][ T1210] pctv452e: pctv452e_power_ctrl: 0 [ 256.636397][ T1210] [ 256.655491][ T1210] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 256.687412][ T8367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.731425][ T8367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.743860][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 256.752143][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 256.873517][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 256.879806][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 256.993487][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 257.001155][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 257.047069][ T5889] usb 1-1: USB disconnect, device number 34 [ 257.123659][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 257.137588][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 257.186747][ T8380] tipc: Started in network mode [ 257.192009][ T8380] tipc: Node identity 06587c3a1b3b, cluster identity 4711 [ 257.200137][ T8380] tipc: Enabled bearer , priority 0 [ 257.209511][ T8380] syzkaller0: entered promiscuous mode [ 257.216167][ T8380] syzkaller0: entered allmulticast mode [ 257.273646][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 257.279508][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 257.362246][ T8380] tipc: Resetting bearer [ 257.387155][ T8379] tipc: Resetting bearer [ 257.393787][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 257.399895][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 257.430644][ T8379] tipc: Disabling bearer [ 257.456390][ T1210] usb 5-1: USB disconnect, device number 31 [ 257.514064][ T1210] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 257.855040][ T5889] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 257.872514][ T6239] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 257.896029][ T6239] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 257.936078][ T6239] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 258.064610][ T6239] usb 4-1: USB disconnect, device number 29 [ 258.073493][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 258.089522][ T5889] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.137183][ T5889] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 258.203292][ T5889] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.265469][ T5889] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.335894][ T5889] usb 1-1: config 1 interface 0 has no altsetting 0 [ 258.369678][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 258.411464][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.452649][ T5889] usb 1-1: Product: syz [ 258.480798][ T5889] usb 1-1: Manufacturer: syz [ 258.498856][ T5889] usb 1-1: SerialNumber: syz [ 258.527646][ T5889] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 258.582279][ T5889] usb-storage 1-1:1.0: USB Mass Storage device detected [ 258.644694][ T5889] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 258.775464][ T8387] fuse: Bad value for 'fd' [ 258.790292][ T6239] usb 1-1: USB disconnect, device number 35 [ 259.765664][ T8415] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 259.831033][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.625'. [ 259.982736][ T8415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.534486][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 261.503769][ T5889] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 261.713517][ T5889] usb 3-1: device descriptor read/64, error -71 [ 261.917673][ T8453] loop2: detected capacity change from 0 to 7 [ 261.941628][ T8453] Dev loop2: unable to read RDB block 7 [ 261.951568][ T8453] loop2: unable to read partition table [ 261.963215][ T8453] loop2: partition table beyond EOD, truncated [ 261.971866][ T5889] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 261.985864][ T8453] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 262.128950][ T5889] usb 3-1: device descriptor read/64, error -71 [ 262.226350][ T796] IPVS: starting estimator thread 0... [ 262.254272][ T5889] usb usb3-port1: attempt power cycle [ 262.314286][ T8462] IPVS: using max 33 ests per chain, 79200 per kthread [ 262.509968][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 262.548282][ T8465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.576216][ T8465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.584994][ T8465] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 262.595526][ T5889] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 262.608126][ T8465] bond5: (slave ipip0): Error -95 calling set_mac_address [ 262.630505][ T5889] usb 3-1: device descriptor read/8, error -71 [ 262.705860][ T1210] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 262.873664][ T5889] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 262.883664][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 262.893068][ T1210] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 262.895012][ T5889] usb 3-1: device descriptor read/8, error -71 [ 262.908460][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.918514][ T1210] usb 4-1: Product: syz [ 262.928503][ T1210] usb 4-1: Manufacturer: syz [ 262.933157][ T1210] usb 4-1: SerialNumber: syz [ 262.964554][ T1210] usb 4-1: config 0 descriptor?? [ 262.976808][ T8474] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 263.026655][ T5889] usb usb3-port1: unable to enumerate USB device [ 263.089625][ T8476] netlink: 180 bytes leftover after parsing attributes in process `syz.1.641'. [ 263.113885][ T8476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.641'. [ 263.396810][ T1210] airspy 4-1:0.0: Board ID: 00 [ 263.411139][ T1210] airspy 4-1:0.0: Firmware version: [ 264.543474][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 264.543493][ T30] audit: type=1326 audit(1773684718.345:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 264.632893][ T30] audit: type=1326 audit(1773684718.345:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 264.722264][ T30] audit: type=1326 audit(1773684718.345:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 264.797842][ T1210] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 264.806543][ T30] audit: type=1326 audit(1773684718.345:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 264.901555][ T1210] airspy 4-1:0.0: Registered as swradio24 [ 264.919948][ T30] audit: type=1326 audit(1773684718.345:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 264.946858][ T1210] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 264.995912][ T1210] usb 4-1: USB disconnect, device number 30 [ 265.045159][ T30] audit: type=1326 audit(1773684718.345:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 265.160565][ T30] audit: type=1326 audit(1773684718.345:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 265.231362][ T30] audit: type=1326 audit(1773684718.345:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60899c799 code=0x7ffc0000 [ 265.713548][ T1210] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 265.913948][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 265.923682][ T1210] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 265.941038][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.980529][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.003742][ T1210] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 266.027643][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.081095][ T1210] usb 3-1: config 0 descriptor?? [ 266.166002][ T8527] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 266.505227][ T1210] hid_parser_main: 19 callbacks suppressed [ 266.505246][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x7 [ 266.526927][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.538617][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.547636][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.556459][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.567691][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.579479][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.587228][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.595865][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.610731][ T1210] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 266.653008][ T1210] apple 0003:05AC:0247.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.2-1/input0 [ 266.716730][ T1210] usb 3-1: USB disconnect, device number 29 [ 266.851860][ T8533] fido_id[8533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 267.393333][ T8542] FAULT_INJECTION: forcing a failure. [ 267.393333][ T8542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.410298][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.2.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.410329][ T8542] Tainted: [L]=SOFTLOCKUP [ 267.410337][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.410349][ T8542] Call Trace: [ 267.410356][ T8542] [ 267.410364][ T8542] dump_stack_lvl+0xe8/0x150 [ 267.410398][ T8542] should_fail_ex+0x412/0x560 [ 267.410432][ T8542] _copy_to_user+0x31/0xb0 [ 267.410455][ T8542] simple_read_from_buffer+0xe1/0x170 [ 267.410489][ T8542] proc_fail_nth_read+0x1bb/0x230 [ 267.410522][ T8542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.410557][ T8542] ? rw_verify_area+0x2a6/0x4d0 [ 267.410583][ T8542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.410605][ T8542] vfs_read+0x20c/0xa70 [ 267.410619][ T8542] ? fdget_pos+0x246/0x320 [ 267.410644][ T8542] ? __pfx___mutex_lock+0x10/0x10 [ 267.410662][ T8542] ? __pfx_vfs_read+0x10/0x10 [ 267.410679][ T8542] ? __fget_files+0x2a/0x420 [ 267.410703][ T8542] ? __fget_files+0x3a0/0x420 [ 267.410723][ T8542] ? __fget_files+0x2a/0x420 [ 267.410752][ T8542] ksys_read+0x150/0x270 [ 267.410771][ T8542] ? __pfx_ksys_read+0x10/0x10 [ 267.410795][ T8542] do_syscall_64+0x14d/0xf80 [ 267.410811][ T8542] ? trace_irq_disable+0x3b/0x150 [ 267.410833][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.410848][ T8542] ? clear_bhb_loop+0x40/0x90 [ 267.410866][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.410880][ T8542] RIP: 0033:0x7f879515cfce [ 267.410895][ T8542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.410907][ T8542] RSP: 002b:00007f87960fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.410923][ T8542] RAX: ffffffffffffffda RBX: 00007f87960fb6c0 RCX: 00007f879515cfce [ 267.410934][ T8542] RDX: 000000000000000f RSI: 00007f87960fb0a0 RDI: 0000000000000004 [ 267.410943][ T8542] RBP: 00007f87960fb090 R08: 0000000000000000 R09: 0000000000000000 [ 267.410952][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.410960][ T8542] R13: 00007f8795416038 R14: 00007f8795415fa0 R15: 00007f879553fa48 [ 267.410983][ T8542] [ 268.373543][ T5831] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 268.536282][ T5831] usb 4-1: config 9 has an invalid interface number: 164 but max is 1 [ 268.589092][ T5831] usb 4-1: config 9 has an invalid interface number: 82 but max is 1 [ 268.607601][ T5831] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 268.647059][ T5831] usb 4-1: config 9 has no interface number 0 [ 268.718626][ T5831] usb 4-1: config 9 has no interface number 1 [ 268.741326][ T5831] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 268.765956][ T5831] usb 4-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 268.808180][ T5831] usb 4-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 268.821391][ T5831] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0x5 has invalid maxpacket 1648, setting to 64 [ 268.836131][ T5831] usb 4-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 268.858878][ T5831] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 268.914341][ T5831] usb 4-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 268.928891][ T5831] usb 4-1: config 9 interface 164 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 268.965052][ T5889] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.999383][ T5831] usb 4-1: config 9 interface 82 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.039205][ T5831] usb 4-1: config 9 interface 82 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 269.088669][ T5831] usb 4-1: config 9 interface 164 has no altsetting 0 [ 269.118785][ T5831] usb 4-1: config 9 interface 82 has no altsetting 0 [ 269.141837][ T5831] usb 4-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=56.9b [ 269.156612][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.182964][ T5831] usb 4-1: Product: syz [ 269.197265][ T5831] usb 4-1: Manufacturer: syz [ 269.212731][ T5831] usb 4-1: SerialNumber: syz [ 269.217708][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 269.236917][ T5889] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 269.261138][ T8549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.269740][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.340563][ T5889] usb 3-1: Product: syz [ 269.423650][ T5889] usb 3-1: Manufacturer: syz [ 269.483479][ T5889] usb 3-1: SerialNumber: syz [ 269.526470][ T5831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.534987][ T5889] usb 3-1: config 0 descriptor?? [ 269.569262][ T5889] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 269.575536][ T30] audit: type=1800 audit(1773684723.365:122): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.668" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 269.584693][ T5831] snd-usb-audio 4-1:9.164: probe with driver snd-usb-audio failed with error -2 [ 269.623983][ T5889] pctv452e: pctv452e_power_ctrl: 1 [ 269.623983][ T5889] [ 269.679503][ T5889] usb 3-1: selecting invalid altsetting 3 [ 269.708353][ T5889] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 269.708353][ T5889] [ 269.731475][ T5831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.742473][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 269.807940][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.850015][ T5889] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 269.871235][ T5889] usb 3-1: media controller created [ 269.887520][ T5889] dvb-usb: bulk message failed: -22 (8/0) [ 269.904364][ T5831] usb 4-1: USB disconnect, device number 31 [ 269.921278][ T5889] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 270.016315][ T5889] dvb-usb: MAC address reading failed. [ 270.145340][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.170510][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.391132][ T5889] DVB: Unable to find symbol stb0899_attach() [ 270.449234][ T5889] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 270.653562][ T5831] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 270.798038][ T5889] rc_core: IR keymap rc-tt-1500 not found [ 270.838656][ T5889] Registered IR keymap rc-empty [ 270.867813][ T5889] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 270.894175][ T5889] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 270.926549][ T5889] dvb-usb: schedule remote query interval to 100 msecs. [ 270.935892][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 270.953469][ T5889] pctv452e: pctv452e_power_ctrl: 0 [ 270.953469][ T5889] [ 270.964935][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.982030][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 271.002248][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.031221][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 271.060308][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.068560][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 271.074789][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 271.126336][ T5831] usb 4-1: config 0 descriptor?? [ 271.217353][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 271.233051][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 271.354610][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 271.360473][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 271.485254][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 271.491142][ T9] dvb-usb: error -22 while querying for an remote control event. [ 271.587967][ T5831] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 271.617474][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 271.623274][ T9] dvb-usb: error -22 while querying for an remote control event. [ 271.674149][ T5831] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 271.763897][ T5831] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 271.793345][ T5831] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 271.793940][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 271.806747][ T5889] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 271.823557][ T5831] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 271.830690][ T9] dvb-usb: error -22 while querying for an remote control event. [ 271.840128][ T5831] em28xx 4-1:0.0: No AC97 audio processor [ 271.879369][ T5831] usb 4-1: USB disconnect, device number 32 [ 271.916462][ T5831] em28xx 4-1:0.0: Disconnecting em28xx [ 271.945623][ T5831] em28xx 4-1:0.0: Freeing device [ 271.973652][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 271.987380][ T5889] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 272.008230][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 272.014042][ T9] dvb-usb: error -22 while querying for an remote control event. [ 272.035742][ T5889] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 272.051400][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.123731][ T5889] usb 5-1: Product: syz [ 272.137561][ T5889] usb 5-1: Manufacturer: syz [ 272.142201][ T5889] usb 5-1: SerialNumber: syz [ 272.153538][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.159376][ T10] dvb-usb: error -22 while querying for an remote control event. [ 272.185498][ T5889] pwc: Askey VC010 type 1 USB webcam detected. [ 272.283650][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.289462][ T10] dvb-usb: error -22 while querying for an remote control event. [ 272.385316][ T8591] netlink: 'syz.4.670': attribute type 6 has an invalid length. [ 272.413673][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.419464][ T10] dvb-usb: error -22 while querying for an remote control event. [ 272.436988][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 272.592119][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.602778][ T10] dvb-usb: error -22 while querying for an remote control event. [ 272.733832][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.740431][ T5889] pwc: send_video_command error -71 [ 272.745731][ T5889] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 272.753328][ T5889] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 272.762904][ T10] dvb-usb: error -22 while querying for an remote control event. [ 272.807799][ T5889] usb 5-1: USB disconnect, device number 32 [ 272.923548][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 272.929510][ T10] dvb-usb: error -22 while querying for an remote control event. [ 273.058054][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 273.068403][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 273.225882][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 273.239648][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 273.405921][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 273.426578][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 273.565001][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 273.575974][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 273.703504][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 273.720618][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 273.853540][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 273.865114][ T10] dvb-usb: error -22 while querying for an remote control event. [ 273.923481][ T5889] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.983634][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 273.992696][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.073511][ T5889] usb 5-1: device descriptor read/64, error -71 [ 274.124629][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.141067][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.273473][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.291880][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.323485][ T5889] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 274.423732][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.429574][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.493486][ T5889] usb 5-1: device descriptor read/64, error -71 [ 274.563531][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.584963][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.615710][ T5889] usb usb5-port1: attempt power cycle [ 274.723490][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.744671][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.883581][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 274.897047][ T10] dvb-usb: error -22 while querying for an remote control event. [ 274.973537][ T5889] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 275.019469][ T5889] usb 5-1: device descriptor read/8, error -71 [ 275.043511][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 275.049315][ T10] dvb-usb: error -22 while querying for an remote control event. [ 275.088928][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 275.136174][ T8617] vlan3: entered promiscuous mode [ 275.151668][ T8617] gretap0: entered promiscuous mode [ 275.183637][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 275.189453][ T10] dvb-usb: error -22 while querying for an remote control event. [ 275.238150][ T30] audit: type=1326 audit(1773684729.045:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.0.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf879c799 code=0x0 [ 275.274232][ T5889] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 275.290747][ T8622] netlink: 'syz.0.680': attribute type 8 has an invalid length. [ 275.304245][ T5889] usb 5-1: device descriptor read/8, error -71 [ 275.313525][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 275.320491][ T10] dvb-usb: error -22 while querying for an remote control event. [ 275.425486][ T5889] usb usb5-port1: unable to enumerate USB device [ 275.463905][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 275.471696][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 275.595624][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 275.609014][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 275.753824][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 275.759719][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 275.993510][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.006705][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.123821][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.136991][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.263911][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.273639][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.403516][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.409361][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.536910][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.546402][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.673538][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.687017][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.823516][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 276.833320][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 276.962765][ T5889] usb 3-1: USB disconnect, device number 30 [ 277.018071][ T5831] hid_parser_main: 109 callbacks suppressed [ 277.018091][ T5831] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 277.064346][ T5831] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.079241][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 277.276910][ T8646] fido_id[8646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.475044][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 277.973581][ T5889] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 278.183927][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 278.232905][ T5889] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 278.275696][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.331335][ T5889] usb 5-1: Product: syz [ 278.358356][ T5889] usb 5-1: Manufacturer: syz [ 278.384608][ T5889] usb 5-1: SerialNumber: syz [ 278.411425][ T5889] usb 5-1: config 0 descriptor?? [ 278.442543][ T5889] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 278.480224][ T5889] pctv452e: pctv452e_power_ctrl: 1 [ 278.480224][ T5889] [ 278.525134][ T5889] usb 5-1: selecting invalid altsetting 3 [ 278.541695][ T5889] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 278.541695][ T5889] [ 278.594535][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 278.632537][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.687007][ T5889] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 278.740873][ T5889] usb 5-1: media controller created [ 278.772123][ T5889] dvb-usb: bulk message failed: -22 (8/0) [ 278.810716][ T5889] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 278.857950][ T5889] dvb-usb: MAC address reading failed. [ 278.979908][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.279575][ T5889] DVB: Unable to find symbol stb0899_attach() [ 279.316241][ T5889] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 279.535022][ T5889] rc_core: IR keymap rc-tt-1500 not found [ 279.573846][ T5889] Registered IR keymap rc-empty [ 279.610913][ T5889] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 279.695166][ T5889] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 279.761069][ T5889] dvb-usb: schedule remote query interval to 100 msecs. [ 279.819527][ T5889] pctv452e: pctv452e_power_ctrl: 0 [ 279.819527][ T5889] [ 279.848348][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 279.903770][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 279.947718][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.018565][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 280.093564][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.110359][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.263498][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.275823][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.413546][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.433564][ T6239] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 280.448734][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.583469][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.604302][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.622872][ T6239] usb 1-1: Using ep0 maxpacket: 32 [ 280.639837][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.675000][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.710868][ T6239] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.746557][ T6239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.770737][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.778296][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 280.819300][ T6239] usb 1-1: config 0 descriptor?? [ 280.852985][ T6239] hub 1-1:0.0: USB hub found [ 280.903603][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 280.923487][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 281.006538][ T5889] usb 5-1: USB disconnect, device number 37 [ 281.205221][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 281.346572][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 281.378271][ T2345] pvrusb2: Failure uploading firmware1 [ 281.403726][ T2345] pvrusb2: Device initialization was not successful. [ 281.452077][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 281.480359][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 281.502504][ T5902] pvrusb2: Device being rendered inoperable [ 282.019434][ T8688] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 282.093595][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 282.125074][ T8688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.256292][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.298281][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.311884][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 282.339577][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 282.378371][ T5889] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 282.421514][ T5889] usb 2-1: Manufacturer: syz [ 282.461159][ T5889] usb 2-1: config 0 descriptor?? [ 282.483580][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 282.491392][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.547910][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.600789][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.649014][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 282.675064][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.713585][ T10] usb 4-1: config 0 descriptor?? [ 282.896166][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.949720][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.955048][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.969340][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.983592][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.008166][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.018750][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.041516][ T5889] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x2 [ 283.059820][ T5889] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 283.082390][ T5889] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 283.134643][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 283.145353][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 283.170300][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 283.183493][ T5831] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 283.193576][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.207455][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 19346, setting to 1024 [ 283.226583][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 283.236917][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 283.253216][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x2 [ 283.254548][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.285549][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0 [ 283.293302][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0 [ 283.330066][ T5902] usb 3-1: config 0 descriptor?? [ 283.349623][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0 [ 283.362508][ T8703] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 283.370406][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0 [ 283.390392][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.410739][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x4 [ 283.420744][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.433885][ T10] hid-multitouch 0003:045E:9994.000B: unknown main item tag 0x0 [ 283.462299][ T5831] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 283.475939][ T10] hid-multitouch 0003:045E:9994.000B: hidraw1: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0 [ 283.493276][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.544643][ T5831] usb 5-1: config 0 descriptor?? [ 283.554435][ T10] usb 4-1: USB disconnect, device number 33 [ 283.691195][ T8707] fido_id[8707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 283.826705][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 283.832819][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 283.890232][ T5831] usb 5-1: USB disconnect, device number 38 [ 284.016068][ T6239] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 284.048526][ T6239] usbhid 1-1:0.0: can't add hid device: -71 [ 284.083830][ T6239] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 284.124810][ T6239] usb 1-1: USB disconnect, device number 36 [ 284.265202][ T5889] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 284.274859][ T5889] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 284.287595][ T5889] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 284.304365][ T5889] usb 2-1: USB disconnect, device number 8 [ 284.405617][ T8721] fido_id[8721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 284.900482][ T8724] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 284.918515][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 285.183501][ T6239] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 285.213564][ T5889] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 285.343489][ T6239] usb 2-1: Using ep0 maxpacket: 8 [ 285.351952][ T6239] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.365551][ T6239] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 285.374938][ T6239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.377717][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 285.394748][ T6239] usb 2-1: Product: syz [ 285.400567][ T6239] usb 2-1: Manufacturer: syz [ 285.408183][ T6239] usb 2-1: SerialNumber: syz [ 285.425114][ T6239] usb 2-1: config 0 descriptor?? [ 285.443869][ T5889] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 285.461457][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.491165][ T5889] usb 1-1: Product: syz [ 285.508243][ T5889] usb 1-1: Manufacturer: syz [ 285.522791][ T5889] usb 1-1: SerialNumber: syz [ 285.550127][ T5889] usb 1-1: config 0 descriptor?? [ 285.580788][ T5889] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 285.613163][ T5889] pctv452e: pctv452e_power_ctrl: 1 [ 285.613163][ T5889] [ 285.638957][ T6239] usb 2-1: USB disconnect, device number 9 [ 285.672583][ T5889] usb 1-1: selecting invalid altsetting 3 [ 285.700381][ T5889] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 285.700381][ T5889] [ 285.755018][ T5909] usb 3-1: USB disconnect, device number 31 [ 285.764693][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 285.811770][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.868176][ T5889] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 285.902655][ T5889] usb 1-1: media controller created [ 285.925428][ T5889] dvb-usb: bulk message failed: -22 (8/0) [ 285.939067][ T5889] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 285.951233][ T8727] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 285.970498][ T5889] dvb-usb: MAC address reading failed. [ 286.029348][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.251482][ T5889] DVB: Unable to find symbol stb0899_attach() [ 286.268788][ T5889] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 286.444822][ T5889] rc_core: IR keymap rc-tt-1500 not found [ 286.451222][ T5889] Registered IR keymap rc-empty [ 286.465519][ T5889] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 286.483300][ T5889] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 286.511455][ T5889] dvb-usb: schedule remote query interval to 100 msecs. [ 286.519042][ T5889] pctv452e: pctv452e_power_ctrl: 0 [ 286.519042][ T5889] [ 286.526763][ T5889] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 286.624746][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 286.631406][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 286.753936][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 286.760532][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 286.874713][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 286.890414][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.033518][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.066854][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.233503][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.261437][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.290913][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 287.423474][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.423511][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.533546][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.533590][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.643609][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.664173][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 287.766007][ T5902] usb 1-1: USB disconnect, device number 37 [ 287.793641][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 287.802747][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 288.143221][ T5902] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 289.013518][ T5889] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 289.249549][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0 [ 289.296441][ T5889] usb 3-1: string descriptor 0 read error: -22 [ 289.333651][ T5889] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 289.363232][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.595937][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.637671][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.183685][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.717'. [ 290.375837][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.399658][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.413578][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.450272][ T8793] bond6: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 290.460698][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.468119][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.481652][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.493770][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.501060][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.510725][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.518108][ T5889] greenasia 0003:0E8F:0012.000C: unknown main item tag 0x0 [ 290.530530][ T8793] bond6: entered promiscuous mode [ 290.560107][ T8793] bond6: entered allmulticast mode [ 290.592582][ T8793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.643903][ T5902] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 290.677519][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 290.780660][ T8798] erspan0: entered promiscuous mode [ 290.816810][ T8798] erspan0: left promiscuous mode [ 290.828440][ T5902] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 290.850428][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 290.905391][ T5902] usb 5-1: Product: syz [ 290.920431][ T5902] usb 5-1: Manufacturer: syz [ 290.933005][ T5902] usb 5-1: SerialNumber: syz [ 290.968297][ T5889] greenasia 0003:0E8F:0012.000C: hidraw0: USB HID vff.7f Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 291.001468][ T5902] usb 5-1: config 0 descriptor?? [ 291.100246][ T5889] greenasia 0003:0E8F:0012.000C: no inputs found [ 291.241132][ T5889] usb 3-1: USB disconnect, device number 32 [ 291.666612][ T8820] libceph: resolve '0..' (ret=-3): failed [ 291.803484][ T5902] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 291.974259][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 292.045455][ T5902] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 292.082135][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.132349][ T5902] usb 4-1: Product: syz [ 292.153826][ T5902] usb 4-1: Manufacturer: syz [ 292.163549][ T5902] usb 4-1: SerialNumber: syz [ 292.240051][ T5902] usb 4-1: config 0 descriptor?? [ 292.479394][ T5902] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 292.534296][ T5902] pctv452e: pctv452e_power_ctrl: 1 [ 292.534296][ T5902] [ 292.585903][ T5902] usb 4-1: selecting invalid altsetting 3 [ 292.648057][ T5902] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 292.648057][ T5902] [ 292.706222][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 292.791086][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.846751][ T5902] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 292.932553][ T5902] usb 4-1: media controller created [ 292.969241][ T5902] dvb-usb: bulk message failed: -22 (8/0) [ 293.007065][ T5902] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 293.039516][ T8825] netlink: 180 bytes leftover after parsing attributes in process `syz.1.728'. [ 293.049209][ T5902] dvb-usb: MAC address reading failed. [ 293.107474][ T8825] netlink: 48 bytes leftover after parsing attributes in process `syz.1.728'. [ 293.108824][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.394238][ T5902] DVB: Unable to find symbol stb0899_attach() [ 293.420525][ T5902] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 293.767306][ T5902] rc_core: IR keymap rc-tt-1500 not found [ 293.796444][ T5902] Registered IR keymap rc-empty [ 293.821296][ T5902] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 293.877598][ T5902] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 293.939806][ T5902] dvb-usb: schedule remote query interval to 100 msecs. [ 293.952857][ T6239] usb 5-1: USB disconnect, device number 39 [ 293.976528][ T5902] pctv452e: pctv452e_power_ctrl: 0 [ 293.976528][ T5902] [ 294.049591][ T5902] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 294.120328][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 294.193093][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 294.313226][ T8834] vlan0: entered promiscuous mode [ 294.347819][ T8834] hsr0: entered promiscuous mode [ 294.354597][ T8838] loop2: detected capacity change from 0 to 7 [ 294.379553][ T8838] Dev loop2: unable to read RDB block 7 [ 294.383827][ T6239] dvb-usb: bulk message failed: -22 (4/0) [ 294.413689][ T8838] loop2: unable to read partition table [ 294.414800][ T6239] dvb-usb: error -22 while querying for an remote control event. [ 294.419830][ T8838] loop2: partition table beyond EOD, truncated [ 294.507803][ T8838] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 294.607071][ T6239] dvb-usb: bulk message failed: -22 (4/0) [ 294.644655][ T6239] dvb-usb: error -22 while querying for an remote control event. [ 294.693500][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 294.794267][ T6239] dvb-usb: bulk message failed: -22 (4/0) [ 294.810399][ T6239] dvb-usb: error -22 while querying for an remote control event. [ 294.886182][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 294.914110][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.933680][ T6239] dvb-usb: bulk message failed: -22 (4/0) [ 294.940328][ T10] usb 3-1: config 8 has an invalid interface number: 42 but max is 0 [ 294.958999][ T6239] dvb-usb: error -22 while querying for an remote control event. [ 294.959011][ T10] usb 3-1: config 8 has no interface number 0 [ 294.959082][ T10] usb 3-1: config 8 interface 42 has no altsetting 0 [ 294.996933][ T10] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 295.007350][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.022098][ T10] usb 3-1: Product: syz [ 295.026500][ T10] usb 3-1: Manufacturer: syz [ 295.031257][ T10] usb 3-1: SerialNumber: syz [ 295.093572][ T1210] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 295.123596][ T5902] dvb-usb: bulk message failed: -22 (4/0) [ 295.129397][ T5902] dvb-usb: error -22 while querying for an remote control event. [ 295.176946][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 295.253909][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 295.269331][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.288196][ T5902] dvb-usb: bulk message failed: -22 (4/0) [ 295.298834][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.307140][ T1210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 295.322115][ T5902] dvb-usb: error -22 while querying for an remote control event. [ 295.347811][ T10] empeg 3-1:8.42: empeg converter detected [ 295.357578][ T10] usb 3-1: active config #8 != 1 ?? [ 295.382569][ T10] usb 3-1: USB disconnect, device number 33 [ 295.392773][ T6239] usb 4-1: USB disconnect, device number 34 [ 295.401331][ T1210] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 295.436763][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.497844][ T1210] usb 5-1: Product: syz [ 295.541141][ T1210] usb 5-1: Manufacturer: syz [ 295.568687][ T1210] usb 5-1: SerialNumber: syz [ 295.621537][ T1210] usb 5-1: config 0 descriptor?? [ 295.645116][ T6239] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 295.676504][ T1210] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 297.407864][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 297.435216][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 297.532862][ T8876] netlink: 'syz.2.740': attribute type 4 has an invalid length. [ 297.582617][ T1210] gspca_zc3xx: reg_w_i err -71 [ 297.681212][ T8882] xt_connbytes: Forcing CT accounting to be enabled [ 297.721667][ T8882] xt_NFQUEUE: number of total queues is 0 [ 297.847794][ T8887] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 297.939779][ T8887] team0: Port device dummy0 added [ 298.117854][ T8894] netlink: 180 bytes leftover after parsing attributes in process `syz.0.744'. [ 298.167891][ T8894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.744'. [ 298.203465][ T1210] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 298.221562][ T1210] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 298.250567][ T1210] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 298.294988][ T1210] usb 5-1: USB disconnect, device number 40 [ 298.374566][ T6239] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 298.565664][ T6239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.619744][ T6239] usb 4-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 298.661367][ T6239] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 8 [ 298.973506][ T1210] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 299.181482][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 299.210780][ T1210] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 299.251526][ T1210] usb 1-1: config 0 has no interface number 1 [ 299.281486][ T1210] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 299.303289][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.333291][ T1210] usb 1-1: Product: syz [ 299.356526][ T1210] usb 1-1: Manufacturer: syz [ 299.378523][ T1210] usb 1-1: SerialNumber: syz [ 299.415390][ T1210] usb 1-1: config 0 descriptor?? [ 299.625948][ T1210] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 299.752276][ T1210] usb 1-1: USB disconnect, device number 38 [ 299.805990][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.863552][ T6239] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 300.911826][ T6239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.004450][ T6239] usb 4-1: can't set config #1, error -71 [ 301.051383][ T6239] usb 4-1: USB disconnect, device number 35 [ 301.855189][ T8948] netlink: 180 bytes leftover after parsing attributes in process `syz.3.759'. [ 301.871231][ T8948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.759'. [ 302.507256][ T8958] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 302.519793][ T8958] team0: Port device batadv1 added [ 303.073896][ T8965] loop2: detected capacity change from 0 to 7 [ 303.089941][ T1210] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 303.103051][ T8965] Dev loop2: unable to read RDB block 7 [ 303.112901][ T8965] loop2: unable to read partition table [ 303.131960][ T8965] loop2: partition table beyond EOD, truncated [ 303.146679][ T8965] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 303.156168][ T5902] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 303.268343][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 303.302802][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.328558][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 303.346546][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.359723][ T1210] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 303.379274][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 303.409273][ T5902] usb 1-1: Product: syz [ 303.414045][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.429708][ T5902] usb 1-1: Manufacturer: syz [ 303.440124][ T1210] usb 4-1: Product: syz [ 303.445128][ T5902] usb 1-1: SerialNumber: syz [ 303.460481][ T1210] usb 4-1: Manufacturer: syz [ 303.475205][ T1210] usb 4-1: SerialNumber: syz [ 303.713671][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.753275][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.806697][ T5902] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 303.851626][ T5902] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 303.896693][ T5902] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.912058][ T1210] usb 4-1: USB disconnect, device number 36 [ 303.934910][ T5902] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 304.015683][ T5902] usb 1-1: USB disconnect, device number 39 [ 304.054183][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.671937][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.680141][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.765138][ T8998] bridge0: entered allmulticast mode [ 304.790102][ T9002] bridge_slave_1: left allmulticast mode [ 304.813809][ T9002] bridge_slave_1: left promiscuous mode [ 304.833132][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.887497][ T9002] bridge_slave_0: left allmulticast mode [ 304.897676][ T9002] bridge_slave_0: left promiscuous mode [ 304.920656][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.609213][ T9036] rose0: tun_chr_ioctl cmd 2147767507 [ 305.622347][ T9036] rose0: tun_chr_ioctl cmd 2147767506 [ 306.068712][ T9056] netlink: 'syz.3.801': attribute type 4 has an invalid length. [ 306.080225][ T9053] syzkaller0: entered promiscuous mode [ 306.089258][ T9053] syzkaller0: entered allmulticast mode [ 306.549517][ T9071] loop7: detected capacity change from 0 to 7 [ 306.566727][ C0] blk_print_req_error: 10 callbacks suppressed [ 306.566747][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.566782][ C0] buffer_io_error: 10 callbacks suppressed [ 306.566795][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.571717][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.571756][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.571870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.571900][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.574321][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.574355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.575824][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.575856][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.576052][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.576080][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.576250][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.576278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.576353][ T9071] ldm_validate_partition_table(): Disk read failed. [ 306.576472][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.576499][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.576667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.576694][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.576872][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.576899][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 306.584979][ T9071] Dev loop7: unable to read RDB block 0 [ 306.590107][ T9071] loop7: unable to read partition table [ 306.590315][ T9071] loop7: partition table beyond EOD, truncated [ 306.590351][ T9071] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 306.644136][ T9071] [ 306.644151][ T9071] ====================================================== [ 306.644161][ T9071] WARNING: possible circular locking dependency detected [ 306.644181][ T9071] syzkaller #0 Tainted: G L [ 306.644192][ T9071] ------------------------------------------------------ [ 306.644201][ T9071] syz.0.808/9071 is trying to acquire lock: [ 306.644213][ T9071] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 306.644278][ T9071] [ 306.644278][ T9071] but task is already holding lock: [ 306.644286][ T9071] ffff88802595f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 306.644347][ T9071] [ 306.644347][ T9071] which lock already depends on the new lock. [ 306.644347][ T9071] [ 306.644356][ T9071] [ 306.644356][ T9071] the existing dependency chain (in reverse order) is: [ 306.644364][ T9071] [ 306.644364][ T9071] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 306.644404][ T9071] blk_alloc_queue+0x546/0x680 [ 306.644428][ T9071] __blk_mq_alloc_disk+0x197/0x390 [ 306.644451][ T9071] loop_add+0x482/0xb40 [ 306.644474][ T9071] loop_init+0xd9/0x170 [ 306.644494][ T9071] do_one_initcall+0x250/0x8d0 [ 306.644521][ T9071] do_initcall_level+0x104/0x190 [ 306.644539][ T9071] do_initcalls+0x59/0xa0 [ 306.644556][ T9071] kernel_init_freeable+0x2a6/0x3e0 [ 306.644574][ T9071] kernel_init+0x1d/0x1d0 [ 306.644599][ T9071] ret_from_fork+0x51e/0xb90 [ 306.644623][ T9071] ret_from_fork_asm+0x1a/0x30 [ 306.644650][ T9071] [ 306.644650][ T9071] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 306.644681][ T9071] fs_reclaim_acquire+0x71/0x100 [ 306.644702][ T9071] kmem_cache_alloc_noprof+0x40/0x650 [ 306.644721][ T9071] __kernfs_iattrs+0xdf/0x340 [ 306.644746][ T9071] kernfs_iop_setattr+0xea/0x3f0 [ 306.644781][ T9071] notify_change+0xc1a/0xf40 [ 306.644804][ T9071] do_truncate+0x1c2/0x250 [ 306.644825][ T9071] path_openat+0x2f89/0x3860 [ 306.644845][ T9071] do_file_open+0x23e/0x4a0 [ 306.644864][ T9071] do_sys_openat2+0x113/0x200 [ 306.644891][ T9071] __x64_sys_openat+0x138/0x170 [ 306.644918][ T9071] do_syscall_64+0x14d/0xf80 [ 306.644939][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.644959][ T9071] [ 306.644959][ T9071] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 306.644991][ T9071] __lock_acquire+0x15a5/0x2cf0 [ 306.645016][ T9071] lock_acquire+0xf0/0x2e0 [ 306.645039][ T9071] down_read+0x47/0x2e0 [ 306.645061][ T9071] kernfs_iop_getattr+0x9e/0x450 [ 306.645086][ T9071] vfs_getattr_nosec+0x2e1/0x430 [ 306.645111][ T9071] loop_assign_backing_file+0x27a/0x4b0 [ 306.645139][ T9071] lo_ioctl+0x1acb/0x1fb0 [ 306.645165][ T9071] blkdev_ioctl+0x5e3/0x740 [ 306.645189][ T9071] __se_sys_ioctl+0xfc/0x170 [ 306.645210][ T9071] do_syscall_64+0x14d/0xf80 [ 306.645230][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.645250][ T9071] [ 306.645250][ T9071] other info that might help us debug this: [ 306.645250][ T9071] [ 306.645257][ T9071] Chain exists of: [ 306.645257][ T9071] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 306.645257][ T9071] [ 306.645303][ T9071] Possible unsafe locking scenario: [ 306.645303][ T9071] [ 306.645311][ T9071] CPU0 CPU1 [ 306.645318][ T9071] ---- ---- [ 306.645325][ T9071] lock(&q->q_usage_counter(io)#24); [ 306.645348][ T9071] lock(fs_reclaim); [ 306.645367][ T9071] lock(&q->q_usage_counter(io)#24); [ 306.645392][ T9071] rlock(&root->kernfs_iattr_rwsem); [ 306.645407][ T9071] [ 306.645407][ T9071] *** DEADLOCK *** [ 306.645407][ T9071] [ 306.645414][ T9071] 3 locks held by syz.0.808/9071: [ 306.645426][ T9071] #0: ffff888025d02448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 306.645486][ T9071] #1: ffff88802595f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 306.645553][ T9071] #2: ffff88802595f2f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 306.645618][ T9071] [ 306.645618][ T9071] stack backtrace: [ 306.645632][ T9071] CPU: 1 UID: 0 PID: 9071 Comm: syz.0.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.645659][ T9071] Tainted: [L]=SOFTLOCKUP [ 306.645666][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.645679][ T9071] Call Trace: [ 306.645686][ T9071] [ 306.645695][ T9071] dump_stack_lvl+0xe8/0x150 [ 306.645723][ T9071] print_circular_bug+0x2e1/0x300 [ 306.645756][ T9071] check_noncircular+0x12e/0x150 [ 306.645800][ T9071] __lock_acquire+0x15a5/0x2cf0 [ 306.645837][ T9071] lock_acquire+0xf0/0x2e0 [ 306.645860][ T9071] ? kernfs_iop_getattr+0x9e/0x450 [ 306.645892][ T9071] down_read+0x47/0x2e0 [ 306.645914][ T9071] ? kernfs_iop_getattr+0x9e/0x450 [ 306.645942][ T9071] kernfs_iop_getattr+0x9e/0x450 [ 306.645973][ T9071] vfs_getattr_nosec+0x2e1/0x430 [ 306.646001][ T9071] loop_assign_backing_file+0x27a/0x4b0 [ 306.646032][ T9071] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 306.646076][ T9071] lo_ioctl+0x1acb/0x1fb0 [ 306.646107][ T9071] ? __pfx_lo_ioctl+0x10/0x10 [ 306.646135][ T9071] ? stack_trace_save+0xa9/0x100 [ 306.646154][ T9071] ? __pfx_stack_trace_save+0x10/0x10 [ 306.646174][ T9071] ? stack_depot_save_flags+0x33/0x810 [ 306.646201][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646227][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646251][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646276][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646301][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646325][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 306.646352][ T9071] ? unwind_next_frame+0xa5/0x23c0 [ 306.646389][ T9071] ? is_bpf_text_address+0x26/0x2b0 [ 306.646410][ T9071] ? is_bpf_text_address+0x292/0x2b0 [ 306.646429][ T9071] ? is_bpf_text_address+0x26/0x2b0 [ 306.646451][ T9071] ? kernel_text_address+0xa5/0xe0 [ 306.646473][ T9071] ? __kernel_text_address+0xd/0x30 [ 306.646493][ T9071] ? unwind_get_return_address+0x4d/0x90 [ 306.646521][ T9071] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.646542][ T9071] ? arch_stack_walk+0xfb/0x150 [ 306.646575][ T9071] ? stack_trace_save+0xa9/0x100 [ 306.646594][ T9071] ? __pfx_stack_trace_save+0x10/0x10 [ 306.646613][ T9071] ? kasan_save_free_info+0x46/0x50 [ 306.646642][ T9071] ? stack_depot_save_flags+0x33/0x810 [ 306.646671][ T9071] ? format_decode+0xd0/0xe10 [ 306.646698][ T9071] ? kasan_save_track+0x4f/0x80 [ 306.646717][ T9071] ? kasan_save_track+0x3e/0x80 [ 306.646737][ T9071] ? kasan_save_free_info+0x46/0x50 [ 306.646775][ T9071] ? __kasan_slab_free+0x5c/0x80 [ 306.646796][ T9071] ? kfree+0x1c1/0x630 [ 306.646813][ T9071] ? tomoyo_path_number_perm+0x501/0x630 [ 306.646838][ T9071] ? security_file_ioctl+0xc3/0x2a0 [ 306.646861][ T9071] ? __se_sys_ioctl+0x47/0x170 [ 306.646882][ T9071] ? do_syscall_64+0x14d/0xf80 [ 306.646901][ T9071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.646924][ T9071] ? __asan_memset+0x22/0x50 [ 306.646942][ T9071] ? blk_get_meta_cap+0x16d/0x7a0 [ 306.646967][ T9071] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 306.646993][ T9071] ? blkdev_common_ioctl+0x14b7/0x3250 [ 306.647024][ T9071] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 306.647049][ T9071] ? kasan_quarantine_put+0xbb/0x1f0 [ 306.647074][ T9071] ? tomoyo_path_number_perm+0x219/0x630 [ 306.647099][ T9071] ? tomoyo_path_number_perm+0x219/0x630 [ 306.647125][ T9071] ? do_vfs_ioctl+0x1166/0x1530 [ 306.647149][ T9071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 306.647177][ T9071] ? do_futex+0x333/0x420 [ 306.647209][ T9071] ? __pfx_lo_ioctl+0x10/0x10 [ 306.647237][ T9071] blkdev_ioctl+0x5e3/0x740 [ 306.647263][ T9071] ? __pfx_blkdev_ioctl+0x10/0x10 [ 306.647288][ T9071] ? rcu_is_watching+0x15/0xb0 [ 306.647317][ T9071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 306.647342][ T9071] ? __pfx_blkdev_ioctl+0x10/0x10 [ 306.647367][ T9071] __se_sys_ioctl+0xfc/0x170 [ 306.647391][ T9071] do_syscall_64+0x14d/0xf80 [ 306.647412][ T9071] ? trace_irq_disable+0x3b/0x150 [ 306.647441][ T9071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.647461][ T9071] ? clear_bhb_loop+0x40/0x90 [ 306.647484][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.647504][ T9071] RIP: 0033:0x7fccf879c799 [ 306.647523][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.647541][ T9071] RSP: 002b:00007fccf9710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.647564][ T9071] RAX: ffffffffffffffda RBX: 00007fccf8a15fa0 RCX: 00007fccf879c799 [ 306.647579][ T9071] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 306.647591][ T9071] RBP: 00007fccf8832c99 R08: 0000000000000000 R09: 0000000000000000 [ 306.647604][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.647617][ T9071] R13: 00007fccf8a16038 R14: 00007fccf8a15fa0 R15: 00007fccf8b3fa48 [ 306.647639][ T9071] [ 306.674157][ T5934] ldm_validate_partition_table(): Disk read failed. [ 306.674569][ T5934] Dev loop7: unable to read RDB block 0 [ 306.675083][ T5934] loop7: unable to read partition table [ 306.675248][ T5934] loop7: partition table beyond EOD, truncated [ 306.687567][ T9071] ldm_validate_partition_table(): Disk read failed. [ 306.688015][ T9071] Dev loop7: unable to read RDB block 0 [ 306.688450][ T9071] loop7: unable to read partition table [ 306.688584][ T9071] loop7: partition table beyond EOD, truncated [ 306.688612][ T9071] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5)