last executing test programs: 6.233539213s ago: executing program 3 (id=4469): dup(0xffffffffffffffff) unshare(0x2a020400) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0) 4.617104244s ago: executing program 3 (id=4491): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.395090539s ago: executing program 3 (id=4495): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 4.20335285s ago: executing program 3 (id=4498): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) 2.687979684s ago: executing program 1 (id=4522): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000340)={0x20, 0x1, 0x0, 0x1, 0xfffffffffffff15f}) 2.613352041s ago: executing program 1 (id=4523): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) 2.450830628s ago: executing program 1 (id=4524): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x8000) r1 = openat(r0, &(0x7f0000000180)='.\x00', 0x48000, 0x0) getdents(r1, 0x0, 0x0) 1.969301722s ago: executing program 3 (id=4525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.805850571s ago: executing program 3 (id=4527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x78, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000d80)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003860000008603"]}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.667870783s ago: executing program 2 (id=4530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 1.621009063s ago: executing program 2 (id=4531): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 1.533309464s ago: executing program 1 (id=4533): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.493412658s ago: executing program 2 (id=4534): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 1.442060075s ago: executing program 1 (id=4535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x8, 0x5, 0xffff2bfc, 0x3, {0x2, 0x80f, 0x7fff, 0x7, 0x800000000000a, 0xffc, 0x8, 0x802, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x6704, 0x38311813}}}, 0x90) 1.123150088s ago: executing program 1 (id=4538): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.12299805s ago: executing program 2 (id=4539): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @my=0x1, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x0, 0x2}) 1.110307749s ago: executing program 0 (id=4541): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 971.757622ms ago: executing program 2 (id=4543): unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(r0, &(0x7f0000000040)=0x2, r1, 0x0, 0x889, 0x8) 869.780453ms ago: executing program 2 (id=4544): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3b, 0x23e) write(r1, &(0x7f0000000040), 0x0) 869.695721ms ago: executing program 4 (id=4545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, 0x0) 725.174809ms ago: executing program 0 (id=4546): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000840)={0x7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0xde23, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x108) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="070000000000000002004e21e0000001"], 0x90) 640.427949ms ago: executing program 4 (id=4547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0x63a}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48884}, 0x0) 584.081738ms ago: executing program 0 (id=4548): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) 429.132003ms ago: executing program 4 (id=4549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00", @ANYBLOB="afb3"], 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 322.280844ms ago: executing program 4 (id=4550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000002c80)=[{&(0x7f00000002c0)=""/244, 0xf4}], 0x1, 0x200, 0x3) 270.314761ms ago: executing program 0 (id=4551): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 143.223322ms ago: executing program 0 (id=4552): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400"], 0x18}, 0x48814) 81.792025ms ago: executing program 4 (id=4553): unshare(0x28000600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) 13.768167ms ago: executing program 4 (id=4554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) fcntl$getflags(r0, 0x401) 0s ago: executing program 0 (id=4555): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) kernel console output (not intermixed with test programs): n process `syz.1.3325'. [ 292.580149][ T5729] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 292.590577][ T5729] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 292.615428][ T5729] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 292.634973][ T5729] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 292.645131][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.657722][ T5729] usb 5-1: Product: syz [ 292.663261][ T5729] usb 5-1: Manufacturer: syz [ 292.672784][ T5729] usb 5-1: SerialNumber: syz [ 292.690605][ T5729] usb 5-1: config 0 descriptor?? [ 292.706116][T13374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.717764][T13374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.738247][ T5729] usb 5-1: ucan: probing device on interface #0 [ 293.352901][ T5729] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 293.557456][T10346] usb 5-1: USB disconnect, device number 44 [ 293.989211][T13446] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 294.030896][T13448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.380389][T13497] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 295.400829][T13497] syzkaller1: linktype set to 805 [ 295.411540][T13504] netlink: 'syz.1.3376': attribute type 12 has an invalid length. [ 295.425305][T13504] netlink: 'syz.1.3376': attribute type 44 has an invalid length. [ 295.427030][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 295.427045][ T29] audit: type=1326 audit(1781270571.570:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.468030][ T29] audit: type=1326 audit(1781270571.610:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.511786][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3378'. [ 295.526139][ T29] audit: type=1326 audit(1781270571.610:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.567484][ T29] audit: type=1326 audit(1781270571.610:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.608325][T13510] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 295.608325][T13510] program syz.3.3380 not setting count and/or reply_len properly [ 295.626016][ T29] audit: type=1326 audit(1781270571.610:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.719996][ T29] audit: type=1326 audit(1781270571.650:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.760858][ T29] audit: type=1326 audit(1781270571.650:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f819ce59 code=0x7ffc0000 [ 295.787101][ T29] audit: type=1326 audit(1781270571.650:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18f819cbc2 code=0x7ffc0000 [ 295.813613][ T29] audit: type=1326 audit(1781270571.650:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f18f819cc57 code=0x7ffc0000 [ 295.842077][ T29] audit: type=1326 audit(1781270571.650:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.0.3377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f18f8159b51 code=0x7ffc0000 [ 296.540230][T10356] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 296.701979][T10356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.726498][T10356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.760011][T10356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.785681][T10356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.805742][T13549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.831352][T10356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.172394][ T5715] usb 4-1: USB disconnect, device number 47 [ 297.178967][ T5729] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 297.358422][ T5729] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 297.367989][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.398630][ T5729] usb 3-1: config 0 descriptor?? [ 297.454124][T13593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3413'. [ 297.614896][ T5729] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 297.650810][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'. [ 297.824156][ T5729] [drm:udl_init] *ERROR* Selecting channel failed [ 297.902527][ T5729] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 297.926219][ T5729] [drm] Initialized udl on minor 2 [ 297.946105][ T5729] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 297.965143][ T5729] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 297.978522][T10346] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 297.992814][ T5729] usb 3-1: USB disconnect, device number 44 [ 297.999566][T10346] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 298.125481][T13619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.222643][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3428'. [ 298.495996][T10356] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 298.685948][T10356] usb 5-1: Using ep0 maxpacket: 32 [ 298.691815][T13640] ======================================================= [ 298.691815][T13640] WARNING: The mand mount option has been deprecated and [ 298.691815][T13640] and is ignored by this kernel. Remove the mand [ 298.691815][T13640] option from the mount to silence this warning. [ 298.691815][T13640] ======================================================= [ 298.708534][T10356] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 298.775953][T10356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.797236][T10356] usb 5-1: Product: syz [ 298.805595][T10356] usb 5-1: Manufacturer: syz [ 298.818728][T10356] usb 5-1: SerialNumber: syz [ 298.847366][T10356] usb 5-1: config 0 descriptor?? [ 298.880829][T10356] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 298.889945][T10356] dvb-usb: bulk message failed: -22 (2/0) [ 298.935765][T10356] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.966145][T10356] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 298.976590][T10356] usb 5-1: media controller created [ 298.997064][T10356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.057197][T13625] dvb-usb: bulk message failed: -22 (3/0) [ 299.085780][T10356] usb 5-1: selecting invalid altsetting 7 [ 299.107236][T10356] cxusb: set interface failed [ 299.117525][T10356] dvb-usb: bulk message failed: -22 (1/0) [ 299.176097][T13657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.206097][T10356] DVB: Unable to find symbol lgdt330x_attach() [ 299.230063][T10356] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 299.336033][T10356] rc_core: IR keymap rc-dvico-portable not found [ 299.336054][T10356] Registered IR keymap rc-empty [ 299.336923][T10356] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 299.340314][T10356] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 299.343109][T10356] dvb-usb: schedule remote query interval to 100 msecs. [ 299.343134][T10356] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 299.350621][T10356] usb 5-1: USB disconnect, device number 45 [ 299.523967][T10356] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 299.904283][T13688] netlink: 889 bytes leftover after parsing attributes in process `syz.4.3456'. [ 300.631436][T13725] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3472'. [ 301.040019][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 301.040036][ T29] audit: type=1800 audit(1781270577.180:671): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3481" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 301.114459][T13747] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3484'. [ 301.395812][T13758] sctp: [Deprecated]: syz.1.3487 (pid 13758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.395812][T13758] Use struct sctp_sack_info instead [ 301.638883][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'. [ 301.683592][T13774] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 301.748761][T13774] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 302.620381][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 303.504234][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.546217][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.570289][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55649 - 0 [ 303.596853][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 42006 - 0 [ 303.758098][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.791775][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.822862][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55649 - 0 [ 303.842343][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 42006 - 0 [ 303.945684][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.978954][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.988916][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.999498][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.008880][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.012920][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.046220][T10353] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 304.077179][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.089037][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55649 - 0 [ 304.102035][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 42006 - 0 [ 304.146251][T10346] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 304.239471][T10353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.259137][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.273297][T10353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.294775][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.305634][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55649 - 0 [ 304.318333][T10353] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 304.329030][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 42006 - 0 [ 304.339606][T10353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.340650][T10346] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x5C, changing to 0xC [ 304.348832][T10353] usb 3-1: Product: syz [ 304.365147][T10353] usb 3-1: Manufacturer: syz [ 304.374118][T10346] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xC has invalid wMaxPacketSize 0 [ 304.385240][T10353] usb 3-1: SerialNumber: syz [ 304.386397][T10346] usb 2-1: config 0 interface 0 has no altsetting 0 [ 304.401607][T10346] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.412787][T10346] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 304.422167][T10346] usb 2-1: Product: syz [ 304.429824][T10346] usb 2-1: Manufacturer: syz [ 304.434524][T10346] usb 2-1: SerialNumber: syz [ 304.452268][T10346] usb 2-1: config 0 descriptor?? [ 304.463568][T10346] usb 2-1: selecting invalid altsetting 0 [ 304.566306][T10354] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 304.649774][T10353] usb 3-1: 0:1 : does not exist [ 304.667767][ T5735] usb 2-1: USB disconnect, device number 47 [ 304.678819][T10353] usb 3-1: unit 4 not found! [ 304.687002][T10353] usb 3-1: unit 80 not found! [ 304.742504][T10353] usb 3-1: USB disconnect, device number 45 [ 304.758238][T10354] usb 4-1: Using ep0 maxpacket: 16 [ 304.780883][T10354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.813919][T10354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.856745][T10356] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 304.893362][T10354] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.922980][T10354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.943253][T10354] usb 4-1: Product: syz [ 304.947443][ T6534] udevd[6534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 304.995198][T10354] usb 4-1: Manufacturer: syz [ 305.011982][T10354] usb 4-1: SerialNumber: syz [ 305.024781][ T1107] bridge_slave_1: left allmulticast mode [ 305.033995][ T1107] bridge_slave_1: left promiscuous mode [ 305.035027][T10354] usb 4-1: config 0 descriptor?? [ 305.046197][T10356] usb 5-1: Using ep0 maxpacket: 8 [ 305.046341][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.058558][T10356] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.070464][T10356] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.082545][ T1107] bridge_slave_0: left allmulticast mode [ 305.089665][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.092507][T10354] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.107329][T10356] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.118470][T10354] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 305.128477][T10356] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.149220][T10356] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.181642][T10356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.411514][T10356] usb 5-1: GET_CAPABILITIES returned 0 [ 305.426125][T10356] usbtmc 5-1:16.0: can't read capabilities [ 305.639981][ T5715] usb 5-1: USB disconnect, device number 46 [ 305.701299][T10354] em28xx 4-1:0.0: chip ID is em2860 [ 305.713895][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.734580][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.745554][ T1107] bond0 (unregistering): Released all slaves [ 305.762747][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 305.775310][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 305.907790][T10354] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 305.964020][T10354] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 305.983611][T10354] em28xx 4-1:0.0: No AC97 audio processor [ 306.008148][T10354] usb 4-1: USB disconnect, device number 48 [ 306.022989][T10354] em28xx 4-1:0.0: Disconnecting em28xx [ 306.118318][ T5643] Bluetooth: hci0: command tx timeout [ 306.120187][T10354] em28xx 4-1:0.0: Freeing device [ 306.178273][T13865] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.186142][T13865] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.224484][T13865] bridge_slave_0: entered allmulticast mode [ 306.261060][T13865] bridge_slave_0: entered promiscuous mode [ 306.298887][T13865] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.312700][T13865] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.320809][T13865] bridge_slave_1: entered allmulticast mode [ 306.353574][T13865] bridge_slave_1: entered promiscuous mode [ 306.676665][T13865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.714871][T13865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.880214][T13865] team0: Port device team_slave_0 added [ 306.909803][T13865] team0: Port device team_slave_1 added [ 307.094528][T13865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.121806][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.200055][T13865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.241431][T13865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.263960][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.333471][T13865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.460144][ T1107] hsr_slave_0: left promiscuous mode [ 307.507021][ T1107] hsr_slave_1: left promiscuous mode [ 307.514959][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.527690][T13950] loop9: detected capacity change from 0 to 8 [ 307.541858][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.571041][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.592566][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.607923][T13950] loop9: detected capacity change from 8 to 7 [ 307.630235][ T1107] veth1_macvtap: left promiscuous mode [ 307.635573][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.645161][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.647703][ T1107] veth0_macvtap: left promiscuous mode [ 307.654641][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.667730][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.677976][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.682815][ T1107] veth1_vlan: left promiscuous mode [ 307.688690][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.702328][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.712001][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.721597][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.730905][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.742239][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.751489][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.763261][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.772956][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.781706][T13950] ldm_validate_partition_table(): Disk read failed. [ 307.790165][ T1107] veth0_vlan: left promiscuous mode [ 307.796023][ T5715] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 307.830175][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.839753][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.850210][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.859658][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.868138][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.877573][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 307.888877][T13950] Dev loop9: unable to read RDB block 0 [ 307.895448][T13950] loop9: unable to read partition table [ 307.902084][T13950] loop9: partition table beyond EOD, truncated [ 307.911725][T13950] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 307.966277][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 307.971478][ T5001] ldm_validate_partition_table(): Disk read failed. [ 307.974049][ T5715] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 307.983425][ T5001] Dev loop9: unable to read RDB block 0 [ 307.997187][ T5001] loop9: unable to read partition table [ 308.003432][ T5001] loop9: partition table beyond EOD, truncated [ 308.009837][ T5715] usb 4-1: config 0 has no interface number 0 [ 308.012311][ T5715] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 308.041030][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.061631][ T5715] usb 4-1: Product: syz [ 308.076218][ T5715] usb 4-1: Manufacturer: syz [ 308.081458][ T1107] pim6reg9 (unregistering): left allmulticast mode [ 308.092562][ T5715] usb 4-1: SerialNumber: syz [ 308.134011][ T5715] usb 4-1: config 0 descriptor?? [ 308.152652][ T5715] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 308.200203][ T5643] Bluetooth: hci0: command tx timeout [ 308.370981][ T5715] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 308.406538][ T5715] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 308.418022][ T5754] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 308.501847][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 308.600748][ T5754] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.613867][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 308.614959][ T5754] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.632972][ T5754] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.661600][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.669132][ T5754] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 308.679950][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.703049][ T5754] usb 5-1: config 0 descriptor?? [ 308.796981][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 308.804261][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 308.854349][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.855619][T10354] usb 4-1: USB disconnect, device number 49 [ 308.917576][T10354] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 308.959525][T13865] hsr_slave_0: entered promiscuous mode [ 308.971459][T13865] hsr_slave_1: entered promiscuous mode [ 308.974443][T10354] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 308.991187][T13865] debugfs: 'hsr0' already exists in 'hsr' [ 309.001522][T10354] quatech2 4-1:0.51: device disconnected [ 309.006518][T13865] Cannot create hsr debugfs directory [ 309.152687][ T5754] holtek 0003:1241:5015.0051: ignoring exceeding usage max [ 309.195625][ T5754] holtek 0003:1241:5015.0051: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 309.212285][T10353] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 309.232496][ T5754] holtek 0003:1241:5015.0051: no inputs found [ 309.360115][ T1107] IPVS: stop unused estimator thread 0... [ 309.388969][T10353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.409376][T10353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.422567][ T5754] usb 5-1: USB disconnect, device number 47 [ 309.451467][T10353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.497780][T10353] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 309.517568][T10353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.525781][T10353] usb 3-1: Product: syz [ 309.541894][T10353] usb 3-1: Manufacturer: syz [ 309.570264][T10353] usb 3-1: SerialNumber: syz [ 309.857266][T10354] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 309.975009][T10353] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 310.008696][T10353] usb 3-1: USB disconnect, device number 46 [ 310.048081][T10354] usb 4-1: Using ep0 maxpacket: 16 [ 310.094267][T10354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.112726][T10354] usb 4-1: config 1 has an invalid interface number: 65 but max is 0 [ 310.122042][T10354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.132741][T10354] usb 4-1: config 1 has no interface number 0 [ 310.150787][ T6534] udevd[6534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.185017][T10354] usb 4-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=82.a8 [ 310.195235][T10354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.206541][T10354] usb 4-1: Product: syz [ 310.212307][T10354] usb 4-1: Manufacturer: syz [ 310.219536][T10354] usb 4-1: SerialNumber: syz [ 310.276353][ T5643] Bluetooth: hci0: command tx timeout [ 310.279691][T13997] netlink: 'syz.4.3575': attribute type 11 has an invalid length. [ 310.320667][T13997] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3575'. [ 310.477617][T10354] usb-storage 4-1:1.65: USB Mass Storage device detected [ 310.533922][T10354] usb-storage 4-1:1.65: Quirks match for vid 0781 pid 55e8: 800000 [ 310.608727][T10354] usb 4-1: USB disconnect, device number 50 [ 310.718202][ T5754] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 310.828323][T13865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.843469][T13865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.851540][T13865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.867022][T13865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.875141][T13865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.888617][T13865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.899391][ T5754] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.909560][ T5754] usb 2-1: config 0 has no interface number 0 [ 310.910052][T13865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.922838][ T5754] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 310.938055][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.938999][T13865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.948983][ T5754] usb 2-1: Product: syz [ 310.958681][ T5754] usb 2-1: Manufacturer: syz [ 310.977485][ T5754] usb 2-1: SerialNumber: syz [ 310.994363][ T5754] usb 2-1: config 0 descriptor?? [ 311.165795][T13865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.227154][T13865] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.234091][ T5754] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 311.255198][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.262574][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.298169][ T5754] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.310810][ T5754] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 311.321667][ T5754] usb 2-1: media controller created [ 311.335012][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.342286][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.344672][ T29] audit: type=1326 audit(1781270587.480:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.412166][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.449650][T14005] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 311.451134][ T29] audit: type=1326 audit(1781270587.520:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.580484][ T29] audit: type=1326 audit(1781270587.530:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.621441][T13865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.681011][ T5754] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 311.683034][ T29] audit: type=1326 audit(1781270587.540:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.801203][ T29] audit: type=1326 audit(1781270587.540:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.840323][T14058] sctp: [Deprecated]: syz.3.3590 (pid 14058) Use of int in max_burst socket option. [ 311.840323][T14058] Use struct sctp_assoc_value instead [ 311.858158][ T5754] usb 2-1: USB disconnect, device number 48 [ 311.861997][T13865] veth0_vlan: entered promiscuous mode [ 311.872657][ T29] audit: type=1326 audit(1781270587.540:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 311.929593][T13865] veth1_vlan: entered promiscuous mode [ 312.017159][ T29] audit: type=1326 audit(1781270587.540:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 312.076686][T13865] veth0_macvtap: entered promiscuous mode [ 312.100189][T13865] veth1_macvtap: entered promiscuous mode [ 312.124412][ T29] audit: type=1326 audit(1781270587.540:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 312.225449][ T29] audit: type=1326 audit(1781270587.540:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 312.232330][T13865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.302052][ T29] audit: type=1326 audit(1781270587.660:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.2.3586" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b239ce59 code=0x7ffc0000 [ 312.367614][ T5643] Bluetooth: hci0: command tx timeout [ 312.431835][T13865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.483745][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.502972][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.529660][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.554885][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.736508][T10354] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 312.817307][ T3406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.847283][ T3406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.897774][T10354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.939677][T10354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.954565][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.975573][T10354] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.991421][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.013042][T10354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.041307][T10354] usb 2-1: SerialNumber: syz [ 313.291258][T10354] usb 2-1: 0:2 : does not exist [ 313.443921][T10354] usb 2-1: USB disconnect, device number 49 [ 313.537042][ T6534] udevd[6534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.918825][T14127] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 313.977144][ T5796] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 314.162974][ T5796] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 314.187676][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.244381][ T5796] usb 5-1: config 0 descriptor?? [ 314.277034][ T5796] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 314.466013][T10356] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 314.478181][ T5796] gp8psk: usb in 128 operation failed. [ 314.635947][T10356] usb 2-1: Using ep0 maxpacket: 16 [ 314.643213][T10356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.665582][T10356] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 314.696000][T10356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.703501][ T5796] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 314.712115][T10356] usb 2-1: config 0 descriptor?? [ 314.913697][ T5796] gp8psk: usb in 149 operation failed. [ 314.939900][ T5796] gp8psk: failed to get FPGA version [ 314.959703][ T5796] gp8psk: usb in 138 operation failed. [ 314.985991][ T5796] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 315.003892][ T5796] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 315.036311][ T5796] usb 5-1: USB disconnect, device number 49 [ 315.155708][T10356] mcp2221 0003:04D8:00DD.0052: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 315.506272][ T5796] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 315.568690][T10356] usb 2-1: USB disconnect, device number 50 [ 315.678077][ T5796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.712983][ T5796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.738065][ T5796] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.777273][ T5796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 315.796594][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 315.816125][ T5796] usb 4-1: Product: syz [ 315.820612][ T5796] usb 4-1: Manufacturer: syz [ 315.825777][ T5796] usb 4-1: SerialNumber: syz [ 315.867673][T14190] vivid-000: disconnect [ 315.889033][T14188] vivid-000: reconnect [ 315.986038][ T5735] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 316.042922][ T5796] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 316.129241][ T5715] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 316.136767][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 316.147237][ T5735] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 316.165479][ T5735] usb 3-1: config 0 has no interface number 0 [ 316.177625][ T5735] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.189013][ T5735] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.199746][ T5735] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 316.206407][T10351] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 316.214325][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.227459][ T5735] usb 3-1: config 0 descriptor?? [ 316.243847][ T5796] usb 4-1: USB disconnect, device number 51 [ 316.264957][ T5796] usblp0: removed [ 316.307186][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 316.314603][ T5715] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.330118][ T5715] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.337422][ T5715] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 316.347381][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.361764][ T5715] usb 1-1: config 0 descriptor?? [ 316.368570][T10351] usb 5-1: Using ep0 maxpacket: 16 [ 316.380578][T10351] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.403602][T10351] usb 5-1: config 0 has no interface number 0 [ 316.413154][T10351] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.425185][T10351] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.435726][T10351] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 316.448280][T10351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.471712][T10351] usb 5-1: config 0 descriptor?? [ 316.658594][ T5735] mcp2221 0003:04D8:00DD.0053: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 316.809335][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.830180][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.849613][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.864296][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.884698][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.891526][ T5735] usb 3-1: USB disconnect, device number 47 [ 316.896118][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.907565][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.917128][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.924649][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x4 [ 316.934006][ T5715] lenovo 0003:17EF:60B5.0054: unknown main item tag 0x0 [ 316.945111][ T5715] lenovo 0003:17EF:60B5.0054: hidraw0: USB HID v0.02 Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 317.043266][T10356] usb 1-1: USB disconnect, device number 44 [ 317.078314][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.086602][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.094818][T10351] uclogic 0003:28BD:0071.0055: pen parameters not found [ 317.110513][T14207] fido_id[14207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 317.125795][T10351] uclogic 0003:28BD:0071.0055: interface is invalid, ignoring [ 317.164273][T10351] usb 5-1: USB disconnect, device number 50 [ 317.820539][T14236] overlayfs: missing 'lowerdir' [ 317.865621][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 318.056355][ T5715] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 318.216829][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 318.235093][ T5715] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 318.251528][ T5715] usb 3-1: config 0 has no interface number 0 [ 318.271309][ T5715] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.281049][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.304447][ T5715] usb 3-1: Product: syz [ 318.320271][ T5715] usb 3-1: Manufacturer: syz [ 318.339301][ T5715] usb 3-1: SerialNumber: syz [ 318.352754][ T5715] usb 3-1: config 0 descriptor?? [ 318.372052][ T5715] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 318.587675][ T5715] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 318.617242][ T5715] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 318.751890][T14276] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3671'. [ 318.779553][T10356] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 318.946275][T10356] usb 4-1: Using ep0 maxpacket: 8 [ 318.959583][T10356] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 318.976765][T10356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.994090][T10356] usb 4-1: Product: syz [ 318.997328][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 318.999886][T10356] usb 4-1: Manufacturer: syz [ 319.010356][ T5715] usb 3-1: USB disconnect, device number 48 [ 319.011367][T10356] usb 4-1: SerialNumber: syz [ 319.039492][T10356] usb 4-1: config 0 descriptor?? [ 319.040917][ T5715] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 319.067533][T10356] pegasus 4-1:0.0: Missing or invalid endpoints [ 319.070996][ T5715] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 319.128756][ T5715] quatech2 3-1:0.51: device disconnected [ 319.218300][T14298] netlink: 'syz.4.3680': attribute type 16 has an invalid length. [ 319.272423][T10356] usb 4-1: USB disconnect, device number 52 [ 319.484437][T14313] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 319.496584][T14313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.714247][T14319] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 319.720707][T14319] syzkaller1: group set to 0 [ 320.146994][ T5715] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 320.296009][ T5754] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 320.316687][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 320.325902][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.337242][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.349298][ T5715] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 320.359800][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.371141][ T5715] usb 3-1: config 0 descriptor?? [ 320.476526][T10356] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 320.486516][T10351] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 320.494732][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 320.502107][ T5754] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.513699][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.520890][ T5754] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 320.530453][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.541811][ T5754] usb 4-1: config 0 descriptor?? [ 320.606123][ T5735] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 320.625961][T10356] usb 2-1: Using ep0 maxpacket: 16 [ 320.632998][T10356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.645183][T10356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.656830][T10356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.656964][T10351] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 320.669999][T10356] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.670126][T10356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.680558][T10356] usb 2-1: config 0 descriptor?? [ 320.717763][T10351] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.727539][T10351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.736350][T10351] usb 5-1: Product: syz [ 320.740847][T10351] usb 5-1: Manufacturer: syz [ 320.745761][T10351] usb 5-1: SerialNumber: syz [ 320.762584][ T5735] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 320.776815][ T5735] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 320.787090][ T5735] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 320.793842][ T5715] koneplus 0003:1E7D:2D51.0056: item fetching failed at offset 2/5 [ 320.804902][ T5735] usb 1-1: config 220 has no interface number 2 [ 320.810642][ T5715] koneplus 0003:1E7D:2D51.0056: parse failed [ 320.816131][ T5735] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 320.821525][ T5715] koneplus 0003:1E7D:2D51.0056: probe with driver koneplus failed with error -22 [ 320.844383][ T5735] usb 1-1: config 220 interface 0 has no altsetting 0 [ 320.860731][ T5735] usb 1-1: config 220 interface 76 has no altsetting 0 [ 320.868038][ T5735] usb 1-1: config 220 interface 1 has no altsetting 0 [ 320.877193][ T5735] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 320.886808][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.894842][ T5735] usb 1-1: Product: syz [ 320.899420][ T5735] usb 1-1: Manufacturer: syz [ 320.904078][ T5735] usb 1-1: SerialNumber: syz [ 320.960984][ T5754] usbhid 4-1:0.0: can't add hid device: -71 [ 320.968422][ T5754] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 320.987679][ T5754] usb 4-1: USB disconnect, device number 53 [ 321.027885][T10351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 321.044753][T10351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 321.056699][T10351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.068701][T10351] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 321.092949][ T5715] usb 3-1: USB disconnect, device number 49 [ 321.110058][T10351] usb 5-1: USB disconnect, device number 51 [ 321.123177][T14340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.144170][T14340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.185376][ T5735] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 321.196050][ T5735] uvcvideo 1-1:220.0: No valid video chain found. [ 321.202861][ T5735] usb 1-1: selecting invalid altsetting 0 [ 321.231180][T10356] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0057/input/input58 [ 321.250994][ T5735] usb 1-1: selecting invalid altsetting 0 [ 321.257161][ T5735] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 321.268839][T10356] microsoft 0003:045E:07DA.0057: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 321.294639][ T5735] usb 1-1: USB disconnect, device number 45 [ 321.430389][T10353] usb 2-1: USB disconnect, device number 51 [ 321.548976][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 322.392575][T14370] dvmrp0: entered allmulticast mode [ 322.910414][ T47] dvmrp0: left allmulticast mode [ 323.066761][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 323.066777][ T29] audit: type=1326 audit(1781270599.210:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655db9ce59 code=0x0 [ 325.243402][T14501] netlink: 'syz.0.3771': attribute type 4 has an invalid length. [ 325.273006][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3771'. [ 325.765392][ T5715] IPVS: starting estimator thread 0... [ 325.771370][T14517] IPVS: nq: FWM 3 0x00000003 - no destination available [ 325.882990][T14518] IPVS: using max 33 ests per chain, 79200 per kthread [ 326.587777][ T5754] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 326.766665][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 326.801135][ T5754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.850418][ T5754] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 326.881802][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.905422][ T5754] usb 1-1: config 0 descriptor?? [ 327.345232][ T5754] hid_parser_main: 15 callbacks suppressed [ 327.345251][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.392340][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.410791][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.428576][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.447883][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.468601][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.484083][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.503381][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.517933][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.545678][ T5754] isku 0003:1E7D:319C.0058: unknown main item tag 0x0 [ 327.567492][ T5754] isku 0003:1E7D:319C.0058: hidraw0: USB HID vff.fd Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 327.598195][ T5754] usb 1-1: USB disconnect, device number 46 [ 327.696336][ T5715] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 327.765649][T14578] fido_id[14578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 327.877436][ T5715] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 327.913275][ T5715] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.940647][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.977394][ T5715] usb 4-1: Product: syz [ 327.988859][ T5715] usb 4-1: Manufacturer: syz [ 328.015996][ T5715] usb 4-1: SerialNumber: syz [ 328.349118][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 328.387181][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 328.411105][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 328.438464][ T5715] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 328.473650][ T5715] usb 4-1: USB disconnect, device number 54 [ 328.824084][T14596] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 329.751262][T14635] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 329.770931][T14635] dvmrp1: ignored: set checksum disabled [ 329.994053][T14649] netlink: 'syz.1.3835': attribute type 1 has an invalid length. [ 330.041243][T14649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.124000][ T29] audit: type=1400 audit(1781270606.260:684): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A742F73797A2E644C5755736E202864656C65746564290A53697A653A20202020202020202020202020202034303936206B420A4B65726E656C5061676553697A653A202020202020202034206B420A4D4D555061676553697A653A202020202020202020202034206B420A5273733A2020202020202020202020202020202020203634206B420A5073733A2020202020202020202020202020202020203332206B420A5073735F44697274793A2020202020202020202020202036206B420A5368617265645F436C65616E3A2020202020202020203532206B420A5368617265645F44697274793A pid=14654 comm="syz.2.3837" [ 330.225180][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3838'. [ 330.876176][ T5715] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 330.905240][T14693] netlink: 'syz.3.3855': attribute type 16 has an invalid length. [ 330.919143][T14693] netlink: 'syz.3.3855': attribute type 3 has an invalid length. [ 330.936223][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 330.936724][T14693] netlink: 'syz.3.3855': attribute type 1 has an invalid length. [ 330.962146][T14693] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3855'. [ 331.056298][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 331.070406][ T5715] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 331.082593][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.100378][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 331.127985][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.138104][ T5715] usb 2-1: config 0 descriptor?? [ 331.147105][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.174922][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.185089][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.194032][ T10] usb 1-1: Product: syz [ 331.198735][ T10] usb 1-1: Manufacturer: syz [ 331.203481][ T10] usb 1-1: SerialNumber: syz [ 331.231909][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 331.238169][ T10] usb 1-1: selecting invalid altsetting 1 [ 331.296109][T10353] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 331.375376][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 331.403045][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.422211][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 331.453001][ T5715] usb 2-1: media controller created [ 331.456192][T10353] usb 3-1: Using ep0 maxpacket: 32 [ 331.472985][T10353] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 331.485676][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.494814][T10353] usb 3-1: config 0 has no interface number 0 [ 331.512014][T10353] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 331.529975][T10353] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.557500][T10353] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 331.581124][T10353] usb 3-1: config 0 interface 196 has no altsetting 0 [ 331.603042][T10353] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 331.615991][T10353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.633565][T10353] usb 3-1: Product: syz [ 331.649357][T10353] usb 3-1: Manufacturer: syz [ 331.659489][T10353] usb 3-1: SerialNumber: syz [ 331.672137][T10353] usb 3-1: config 0 descriptor?? [ 331.681300][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 331.684288][T14696] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 331.986336][ T5715] az6027: usb out operation failed. (-71) [ 331.993689][ T5715] stb0899_attach: Driver disabled by Kconfig [ 332.000312][ T5715] az6027: no front-end attached [ 332.000312][ T5715] [ 332.010457][ T5715] az6027: usb out operation failed. (-71) [ 332.016692][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 332.028833][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 332.053413][ T10] cdc_mbim 1-1:1.0: SET_NTB_FORMAT failed [ 332.059772][ T5715] dvb-usb: schedule remote query interval to 400 msecs. [ 332.080224][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 332.088409][ T10] usb 1-1: selecting invalid altsetting 1 [ 332.094318][ T10] cdc_mbim 1-1:1.0: bind() failure [ 332.103434][ T5715] usb 2-1: USB disconnect, device number 52 [ 332.114769][ T10] usb 1-1: USB disconnect, device number 47 [ 332.180489][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 332.319660][T10353] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 332.334163][T10353] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 332.583505][T10353] usb 3-1: USB disconnect, device number 50 [ 332.793417][T10353] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 333.731926][T14769] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 334.146450][T14780] netlink: 'syz.4.3881': attribute type 14 has an invalid length. [ 335.436371][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3903'. [ 335.455614][ C1] blk_print_req_error: 66 callbacks suppressed [ 335.455633][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.471372][ C1] buffer_io_error: 65 callbacks suppressed [ 335.471391][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.485276][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.494493][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 335.502447][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.512472][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 335.520571][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.529940][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 335.538656][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.547942][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 335.555875][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.565032][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 335.573109][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.582461][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 335.604569][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.613837][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.621887][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.631641][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 335.639772][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.649333][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 335.660820][T14843] overlay: Unknown parameter 'Wz!?V1|G* [ 359.116878][T15581] tipc: Resetting bearer [ 359.124697][T15581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.135091][T15581] batadv_slave_1: left promiscuous mode [ 359.150681][T15581] batman_adv: batadv0: Interface activated: vlan2 [ 359.157810][T15581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.173659][T15581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.196047][T15581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.223169][T15581] tipc: Resetting bearer [ 359.232248][T15581] tipc: Resetting bearer [ 359.239023][T15581] tipc: Resetting bearer [ 359.250561][T15581] veth1_vlan: left promiscuous mode [ 359.257623][T15581] veth0_vlan: left promiscuous mode [ 359.276418][T15581] veth0_vlan: entered promiscuous mode [ 359.299660][T15581] veth1_vlan: entered promiscuous mode [ 359.305418][T15581] macvlan0: left promiscuous mode [ 359.334547][T15581] veth1_macvtap: left promiscuous mode [ 359.341672][T15581] veth0_macvtap: left promiscuous mode [ 359.350059][T15581] veth0_macvtap: entered promiscuous mode [ 359.358134][T15581] veth1_macvtap: entered promiscuous mode [ 359.372699][T15581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.381396][T15581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.390924][T15581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.399934][T15581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.420146][T15581] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 359.446681][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.453892][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.464010][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.471281][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.532589][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.541940][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.560274][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.592029][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.616192][ T5715] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 359.626661][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 359.647585][T15608] netem: unknown loss type 0 [ 359.661440][T15608] netem: change failed [ 359.672535][T15609] : renamed from vlan0 (while UP) [ 359.799881][ T5715] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 359.820059][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.845959][ T5715] usb 5-1: Product: syz [ 359.861936][ T5715] usb 5-1: Manufacturer: syz [ 359.888100][ T5715] usb 5-1: SerialNumber: syz [ 360.131350][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 360.171958][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 360.200556][ T5715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 360.226205][T10356] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 360.236821][ T5715] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 360.261368][ T5715] usb 5-1: USB disconnect, device number 57 [ 360.375956][T10356] usb 1-1: Using ep0 maxpacket: 16 [ 360.387769][T10356] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 360.398078][T10356] usb 1-1: config 0 has no interface number 0 [ 360.414670][T10356] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.449445][T10356] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 360.464307][T10356] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 360.485988][T10356] usb 1-1: Product: syz [ 360.494755][T10356] usb 1-1: SerialNumber: syz [ 360.513184][T10356] usb 1-1: config 0 descriptor?? [ 360.534419][T10356] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 360.936919][T15653] : renamed from vlan0 (while UP) [ 361.266956][T10355] usb 1-1: USB disconnect, device number 52 [ 361.873067][T15688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4265'. [ 362.396177][ T5715] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 362.553187][T15714] tipc: Started in network mode [ 362.560231][T15714] tipc: Node identity ac14140f, cluster identity 4711 [ 362.567824][T15714] tipc: New replicast peer: 255.255.255.255 [ 362.574490][T15714] tipc: Enabled bearer , priority 10 [ 362.592130][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4276'. [ 362.594002][ T5715] usb 4-1: config 0 has no interfaces? [ 362.655958][ T5715] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 362.671591][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.683260][ T5715] usb 4-1: config 0 descriptor?? [ 362.933169][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4271'. [ 362.959700][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4271'. [ 363.005704][T10346] usb 4-1: USB disconnect, device number 56 [ 363.325957][ T5715] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 363.491798][ T5715] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.510741][ T5715] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.546477][ T5715] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.567338][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.603314][T15735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.640798][ T5715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.705156][T10355] tipc: Node number set to 2886997007 [ 363.806266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.877282][T10355] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 364.053329][ T5715] usb 3-1: USB disconnect, device number 55 [ 364.063092][T10355] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 364.096772][T10355] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 364.127021][T10355] usb 5-1: config 220 has an invalid descriptor of length 157, skipping remainder of the config [ 364.139742][T15767] sock: sock_set_timeout: `syz.1.4300' (pid 15767) tries to set negative timeout [ 364.168048][T10355] usb 5-1: config 220 has no interface number 2 [ 364.184876][T10355] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 364.216294][T10355] usb 5-1: config 220 interface 0 has no altsetting 0 [ 364.238156][T10355] usb 5-1: config 220 interface 76 has no altsetting 0 [ 364.263901][T10355] usb 5-1: config 220 interface 1 has no altsetting 0 [ 364.282078][T10355] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 364.295889][T10355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.304598][T10355] usb 5-1: Product: syz [ 364.310730][T10355] usb 5-1: Manufacturer: syz [ 364.315508][T10355] usb 5-1: SerialNumber: syz [ 364.538030][T10355] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 364.566075][T10355] uvcvideo 5-1:220.0: No valid video chain found. [ 364.585251][T10355] usb 5-1: selecting invalid altsetting 0 [ 364.614440][T10355] usb 5-1: selecting invalid altsetting 0 [ 364.636618][T10355] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 364.677395][T10355] usb 5-1: USB disconnect, device number 58 [ 365.408875][ T5643] Bluetooth: hci0: connection err: -111 [ 365.653962][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4323'. [ 367.244396][T15894] netlink: 488 bytes leftover after parsing attributes in process `syz.1.4353'. [ 367.271049][T15894] netlink: 488 bytes leftover after parsing attributes in process `syz.1.4353'. [ 367.422374][T15903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.136192][T10355] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 368.255412][T15937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.299286][T10355] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 368.323081][T10355] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 368.337381][T10355] usb 1-1: config 246 has no interface number 0 [ 368.343990][T10355] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 368.355750][T10355] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.369833][T10355] usb 1-1: config 246 interface 166 has no altsetting 0 [ 368.407429][T10355] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 368.420006][T10355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.439259][T10355] usb 1-1: Product: syz [ 368.453137][T10355] usb 1-1: Manufacturer: syz [ 368.470686][T10355] usb 1-1: SerialNumber: syz [ 368.631757][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4381'. [ 369.110179][T10355] usb 1-1: Limiting number of CPorts to U8_MAX [ 369.158242][T10355] usb 1-1: Not enough endpoints found in device, aborting! [ 369.351151][T10355] usb 1-1: USB disconnect, device number 53 [ 369.474492][T15981] ALSA: mixer_oss: invalid OSS volume '' [ 369.496674][T15981] ALSA: mixer_oss: invalid OSS volume '' [ 369.675933][T10356] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 369.687105][T10351] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.815971][T10351] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 369.835521][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.844211][T10356] usb 5-1: Using ep0 maxpacket: 32 [ 369.861189][T10356] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 369.876248][T10356] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 369.896542][T10356] usb 5-1: config 1 interface 0 has no altsetting 0 [ 369.905610][T10356] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 369.918389][T10356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.928021][T10356] usb 5-1: Product: syz [ 369.932249][T10356] usb 5-1: Manufacturer: syz [ 369.938829][T10356] usb 5-1: SerialNumber: syz [ 369.950181][T15979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 369.973850][T15979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 370.007524][T10351] usb 4-1: Using ep0 maxpacket: 16 [ 370.030022][T10351] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 370.047833][T10351] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 370.066853][T10351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.087480][T10351] usb 4-1: config 0 has no interface number 0 [ 370.110641][T10351] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 370.141782][T10351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.159595][T10351] usb 4-1: Product: syz [ 370.173438][T10351] usb 4-1: Manufacturer: syz [ 370.179537][T10351] usb 4-1: SerialNumber: syz [ 370.227400][T10351] usb 4-1: config 0 descriptor?? [ 370.237305][T10356] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 370.254856][T10356] usb 5-1: USB disconnect, device number 59 [ 370.255558][T10351] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 370.274808][T10356] usblp0: removed [ 370.288030][T10351] uvcvideo 4-1:0.105: No valid video chain found. [ 370.539888][T10351] usb 4-1: USB disconnect, device number 57 [ 370.756100][T10355] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 370.926800][T10355] usb 1-1: Using ep0 maxpacket: 8 [ 370.940197][T10355] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 370.959805][T10355] usb 1-1: config 0 has no interface number 0 [ 370.980344][T10355] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.017619][T10355] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.032790][T10355] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 371.047091][T10355] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 371.058649][T10355] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 371.071321][T10355] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.073345][T16039] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 371.124446][T10355] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 371.141192][T10355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.170418][T10355] usb 1-1: Product: syz [ 371.180890][T10355] usb 1-1: Manufacturer: syz [ 371.190613][T10355] usb 1-1: SerialNumber: syz [ 371.213450][T10355] usb 1-1: config 0 descriptor?? [ 371.349550][T16050] binder: 16049:16050 ioctl c018620c 0 returned -14 [ 371.460698][T10355] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 371.646253][T10351] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 371.740472][ C1] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 371.768175][T10355] usb 1-1: USB disconnect, device number 54 [ 371.817849][T10351] usb 5-1: Using ep0 maxpacket: 8 [ 371.844415][T10351] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 371.867219][T10351] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.913371][T10351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.954930][T10351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.989496][T10351] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.012314][T10351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.024251][T10351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.074857][T16074] netlink: 'syz.3.4435': attribute type 1 has an invalid length. [ 372.191291][T16077] batman_adv: batadv0: Adding interface: gretap1 [ 372.198212][T16077] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.234222][T16077] batman_adv: batadv0: Interface activated: gretap1 [ 372.261615][T10351] usb 5-1: GET_CAPABILITIES returned 0 [ 372.271170][T10351] usbtmc 5-1:16.0: can't read capabilities [ 372.482317][T10351] usb 5-1: USB disconnect, device number 60 [ 372.770035][ T5735] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 372.842934][T16110] kvm: kvm [16109]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xcd [ 372.927032][ T5735] usb 2-1: Using ep0 maxpacket: 32 [ 372.938510][ T5735] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 372.958775][ T5735] usb 2-1: config 0 has no interface number 0 [ 372.969439][ T5735] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 372.981591][ T5735] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 372.998738][ T5735] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 373.017024][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.045410][ T5735] usb 2-1: Product: syz [ 373.055172][ T5735] usb 2-1: Manufacturer: syz [ 373.072029][ T5735] usb 2-1: SerialNumber: syz [ 373.088527][ T5735] usb 2-1: config 0 descriptor?? [ 373.228188][T16126] netlink: 'syz.3.4460': attribute type 3 has an invalid length. [ 373.236861][T16126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'. [ 373.524550][ T5735] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 373.538406][ T5735] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 373.733206][ T5735] radio-si470x 2-1:0.35: software version 146, hardware version 66 [ 373.755431][ T5735] radio-si470x 2-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 373.775571][T16148] gretap0: entered promiscuous mode [ 373.795161][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4470'. [ 373.827680][T16148] gretap0: left promiscuous mode [ 373.879577][T10355] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 373.933715][ T5735] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 373.964928][ T5735] radio-si470x 2-1:0.35: submitting int urb failed (-90) [ 373.984289][ T5735] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 374.004959][ T5735] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -22 [ 374.047577][T10355] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 374.059014][ T5735] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 374.076594][T10355] usb 4-1: config 0 has no interfaces? [ 374.093208][T10355] usb 4-1: config 0 has no interfaces? [ 374.106729][ T5735] usb 2-1: USB disconnect, device number 59 [ 374.124165][T10355] usb 4-1: config 0 has no interfaces? [ 374.151731][T10355] usb 4-1: config 0 has no interfaces? [ 374.174724][T10355] usb 4-1: config 0 has no interfaces? [ 374.192697][T10355] usb 4-1: config 0 has no interfaces? [ 374.205582][T10355] usb 4-1: config 0 has no interfaces? [ 374.214751][T10355] usb 4-1: config 0 has no interfaces? [ 374.228604][T10355] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 374.243745][T10355] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 374.259723][T10355] usb 4-1: Product: syz [ 374.274880][T10355] usb 4-1: Manufacturer: syz [ 374.280200][T10355] usb 4-1: SerialNumber: syz [ 374.301600][T10355] usb 4-1: config 0 descriptor?? [ 374.504043][T16166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.769597][ C0] blk_print_req_error: 272 callbacks suppressed [ 374.769619][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.789951][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.799998][ C0] buffer_io_error: 12 callbacks suppressed [ 374.800095][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.814034][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.823276][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 374.831320][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.840542][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 374.848545][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.857755][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 374.865702][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.874892][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 374.882812][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.892017][ C0] Buffer I/O error on dev loop9, logical block 5, async page read [ 374.900122][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.909313][ C0] Buffer I/O error on dev loop9, logical block 6, async page read [ 374.924593][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.933798][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.941738][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.950929][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 374.958867][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 375.044483][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4488'. [ 375.096593][T10351] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 375.195041][T10356] usb 4-1: USB disconnect, device number 58 [ 375.267526][T10351] usb 5-1: Using ep0 maxpacket: 16 [ 375.291680][T10351] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 375.319307][T10351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.335931][T10351] usb 5-1: Product: syz [ 375.343661][T10351] usb 5-1: Manufacturer: syz [ 375.357835][T10351] usb 5-1: SerialNumber: syz [ 375.366943][T16195] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 375.376939][T10351] r8152-cfgselector 5-1: Unknown version 0x0000 [ 375.388989][T10351] r8152-cfgselector 5-1: config 0 descriptor?? [ 375.397150][T16195] pim6reg0: linktype set to 6 [ 375.647747][T10351] r8152-cfgselector 5-1: Needed 2 retries to read version [ 375.676887][T10351] r8152-cfgselector 5-1: Unknown version 0x0000 [ 375.703572][T10351] r8152-cfgselector 5-1: No union descriptors [ 375.868354][T10351] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 375.956840][ T5715] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 376.080598][T16217] bond2: option fail_over_mac: invalid value (102) [ 376.099176][T16217] bond2 (unregistering): Released all slaves [ 376.126042][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 376.138592][ T5715] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 376.158214][ T5715] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 376.186405][ T5715] usb 4-1: config 166 has no interface number 0 [ 376.195605][ T5715] usb 4-1: config 166 has no interface number 1 [ 376.206058][ T5715] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 376.218216][ T5715] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 376.229798][ T5715] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 376.258730][ T5715] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 376.278427][ T5715] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 376.295226][ T5715] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 376.306225][ T5715] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 376.317982][ T5715] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 376.328875][ T5715] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 376.342389][ T5715] usb 4-1: config 166 interface 177 has no altsetting 0 [ 376.349852][ T5715] usb 4-1: config 166 interface 34 has no altsetting 0 [ 376.360664][ T5715] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 376.374231][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.382797][ T5715] usb 4-1: Product: syz [ 376.387357][ T5715] usb 4-1: Manufacturer: syz [ 376.392073][ T5715] usb 4-1: SerialNumber: syz [ 376.615036][ T5715] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 376.817643][ T5715] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 377.056803][T10355] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 377.090007][ T5715] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 377.223095][ T5715] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 377.226180][T10355] usb 5-1: Using ep0 maxpacket: 8 [ 377.242576][ T5715] uvcvideo 4-1:166.34: No valid video chain found. [ 377.261217][T10355] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 377.283591][T10355] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.286212][ T5715] usb 4-1: USB disconnect, device number 59 [ 377.317080][T10355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.349800][T10355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.380212][T10355] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.424516][T10355] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.442784][T10355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.661684][T10355] usb 5-1: GET_CAPABILITIES returned 0 [ 377.667951][T10355] usbtmc 5-1:16.0: can't read capabilities [ 377.879930][ T10] usb 5-1: USB disconnect, device number 62 [ 378.266000][T10355] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 378.437967][T10355] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 378.457833][T10355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.469675][T10355] usb 4-1: Product: syz [ 378.475522][T10355] usb 4-1: Manufacturer: syz [ 378.490064][T10355] usb 4-1: SerialNumber: syz [ 378.515085][T10355] usb 4-1: config 0 descriptor?? [ 378.528266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.552083][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558544][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.782834][T10355] usb 4-1: ignoring: probably an ADSL modem [ 379.193783][T10355] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 379.424176][ T5735] usb 4-1: USB disconnect, device number 60 [ 379.876991][T16339] [ 379.879354][T16339] ===================================================== [ 379.886338][T16339] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 379.893875][T16339] syzkaller #0 Tainted: G L [ 379.899844][T16339] ----------------------------------------------------- [ 379.906816][T16339] syz.4.4554/16339 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 379.914560][T16339] ffff888079120ca0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 379.923282][T16339] [ 379.923282][T16339] and this task is already holding: [ 379.930642][T16339] ffff88802b1cd018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 379.939347][T16339] which would create a new lock dependency: [ 379.945241][T16339] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 379.952891][T16339] [ 379.952891][T16339] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 379.962391][T16339] (&client->buffer_lock){..-.}-{3:3} [ 379.962419][T16339] [ 379.962419][T16339] ... which became SOFTIRQ-irq-safe at: [ 379.975550][T16339] lock_acquire+0x106/0x350 [ 379.980183][T16339] _raw_spin_lock+0x2e/0x40 [ 379.984868][T16339] evdev_pass_values+0xb9/0xbd0 [ 379.989909][T16339] evdev_events+0x1e6/0x340 [ 379.994499][T16339] input_pass_values+0x288/0x890 [ 379.999600][T16339] input_event_dispose+0x330/0x6b0 [ 380.004850][T16339] input_event+0x84/0xc0 [ 380.009168][T16339] xpad360_process_packet+0x641/0xdc0 [ 380.014690][T16339] xpad_irq_in+0x14e/0x2540 [ 380.019270][T16339] __usb_hcd_giveback_urb+0x376/0x540 [ 380.024789][T16339] dummy_timer+0xbc0/0x4650 [ 380.029438][T16339] __hrtimer_run_queues+0x3c0/0xa20 [ 380.034824][T16339] hrtimer_run_softirq+0x17a/0x240 [ 380.040030][T16339] handle_softirqs+0x22a/0x840 [ 380.045541][T16339] __irq_exit_rcu+0xca/0x220 [ 380.050216][T16339] irq_exit_rcu+0x9/0x30 [ 380.055158][T16339] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 380.060997][T16339] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.067108][T16339] _raw_spin_unlock_irqrestore+0x47/0x80 [ 380.072853][T16339] debug_check_no_obj_freed+0x52e/0x550 [ 380.078653][T16339] kmem_cache_free+0xfd/0x650 [ 380.083523][T16339] vfs_fstatat+0x13d/0x170 [ 380.088014][T16339] __x64_sys_newfstatat+0x151/0x200 [ 380.093286][T16339] do_syscall_64+0x174/0x580 [ 380.098021][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.104110][T16339] [ 380.104110][T16339] to a SOFTIRQ-irq-unsafe lock: [ 380.111184][T16339] (tasklist_lock){.+.+}-{3:3} [ 380.111208][T16339] [ 380.111208][T16339] ... which became SOFTIRQ-irq-unsafe at: [ 380.123817][T16339] ... [ 380.123886][T16339] lock_acquire+0x106/0x350 [ 380.131035][T16339] _raw_read_lock+0x36/0x50 [ 380.135635][T16339] __do_wait+0xde/0x740 [ 380.139870][T16339] do_wait+0x1e7/0x510 [ 380.144361][T16339] kernel_wait+0xd6/0x1c0 [ 380.148773][T16339] call_usermodehelper_exec_work+0xbe/0x230 [ 380.154919][T16339] process_scheduled_works+0xb5d/0x1860 [ 380.160654][T16339] worker_thread+0xa53/0xfc0 [ 380.165411][T16339] kthread+0x389/0x470 [ 380.169642][T16339] ret_from_fork+0x514/0xb70 [ 380.174339][T16339] ret_from_fork_asm+0x1a/0x30 [ 380.179281][T16339] [ 380.179281][T16339] other info that might help us debug this: [ 380.179281][T16339] [ 380.189764][T16339] Chain exists of: [ 380.189764][T16339] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 380.189764][T16339] [ 380.203074][T16339] Possible interrupt unsafe locking scenario: [ 380.203074][T16339] [ 380.211468][T16339] CPU0 CPU1 [ 380.216822][T16339] ---- ---- [ 380.222200][T16339] lock(tasklist_lock); [ 380.226434][T16339] local_irq_disable(); [ 380.233195][T16339] lock(&client->buffer_lock); [ 380.240630][T16339] lock(&new->fa_lock); [ 380.247377][T16339] [ 380.250876][T16339] lock(&client->buffer_lock); [ 380.255885][T16339] [ 380.255885][T16339] *** DEADLOCK *** [ 380.255885][T16339] [ 380.264054][T16339] 4 locks held by syz.4.4554/16339: [ 380.269236][T16339] #0: ffffffff8eb03f30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 380.278474][T16339] #1: ffff888032e51438 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 380.287947][T16339] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 380.296983][T16339] #3: ffff88802b1cd018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 380.306107][T16339] [ 380.306107][T16339] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 380.316703][T16339] -> (&client->buffer_lock){..-.}-{3:3} { [ 380.322695][T16339] IN-SOFTIRQ-W at: [ 380.326891][T16339] lock_acquire+0x106/0x350 [ 380.333215][T16339] _raw_spin_lock+0x2e/0x40 [ 380.339533][T16339] evdev_pass_values+0xb9/0xbd0 [ 380.346196][T16339] evdev_events+0x1e6/0x340 [ 380.352504][T16339] input_pass_values+0x288/0x890 [ 380.359250][T16339] input_event_dispose+0x330/0x6b0 [ 380.366179][T16339] input_event+0x84/0xc0 [ 380.372250][T16339] xpad360_process_packet+0x641/0xdc0 [ 380.379435][T16339] xpad_irq_in+0x14e/0x2540 [ 380.385752][T16339] __usb_hcd_giveback_urb+0x376/0x540 [ 380.392935][T16339] dummy_timer+0xbc0/0x4650 [ 380.399273][T16339] __hrtimer_run_queues+0x3c0/0xa20 [ 380.406373][T16339] hrtimer_run_softirq+0x17a/0x240 [ 380.414514][T16339] handle_softirqs+0x22a/0x840 [ 380.421090][T16339] __irq_exit_rcu+0xca/0x220 [ 380.427577][T16339] irq_exit_rcu+0x9/0x30 [ 380.433633][T16339] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 380.441087][T16339] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.448943][T16339] _raw_spin_unlock_irqrestore+0x47/0x80 [ 380.456418][T16339] debug_check_no_obj_freed+0x52e/0x550 [ 380.463781][T16339] kmem_cache_free+0xfd/0x650 [ 380.470278][T16339] vfs_fstatat+0x13d/0x170 [ 380.476507][T16339] __x64_sys_newfstatat+0x151/0x200 [ 380.483532][T16339] do_syscall_64+0x174/0x580 [ 380.490086][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.497807][T16339] INITIAL USE at: [ 380.501782][T16339] lock_acquire+0x106/0x350 [ 380.508007][T16339] _raw_spin_lock_irqsave+0x40/0x60 [ 380.514933][T16339] evdev_ioctl_handler+0x10fb/0x1fe0 [ 380.521939][T16339] __se_sys_ioctl+0xfc/0x170 [ 380.528258][T16339] do_syscall_64+0x174/0x580 [ 380.534572][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.542190][T16339] } [ 380.544759][T16339] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 380.553123][T16339] -> (&new->fa_lock){....}-{3:3} { [ 380.558237][T16339] INITIAL USE at: [ 380.562113][T16339] lock_acquire+0x106/0x350 [ 380.568251][T16339] _raw_write_lock_irq+0x3d/0x50 [ 380.574737][T16339] fasync_remove_entry+0xf1/0x1c0 [ 380.581310][T16339] pipe_fasync+0xff/0x1e0 [ 380.587274][T16339] __fput+0x890/0xa60 [ 380.592801][T16339] task_work_run+0x1d9/0x270 [ 380.598943][T16339] exit_to_user_mode_loop+0x193/0x680 [ 380.605865][T16339] do_syscall_64+0x353/0x580 [ 380.612007][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.619451][T16339] INITIAL READ USE at: [ 380.623766][T16339] lock_acquire+0x106/0x350 [ 380.630254][T16339] _raw_read_lock_irqsave+0x48/0x60 [ 380.637466][T16339] kill_fasync+0x199/0x4d0 [ 380.643876][T16339] mousedev_write+0x8f9/0x950 [ 380.650545][T16339] vfs_write+0x29a/0xb90 [ 380.657390][T16339] ksys_write+0x150/0x270 [ 380.663808][T16339] do_syscall_64+0x174/0x580 [ 380.670381][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.678365][T16339] } [ 380.680857][T16339] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 380.689564][T16339] ... acquired at: [ 380.693352][T16339] _raw_read_lock_irqsave+0x48/0x60 [ 380.698717][T16339] kill_fasync+0x199/0x4d0 [ 380.703294][T16339] evdev_pass_values+0x627/0xbd0 [ 380.708390][T16339] evdev_events+0x1e6/0x340 [ 380.713049][T16339] input_pass_values+0x288/0x890 [ 380.718147][T16339] input_event_dispose+0x330/0x6b0 [ 380.723425][T16339] input_inject_event+0x1dc/0x330 [ 380.728975][T16339] evdev_write+0x325/0x4c0 [ 380.733584][T16339] vfs_write+0x29a/0xb90 [ 380.737994][T16339] ksys_write+0x150/0x270 [ 380.742663][T16339] do_syscall_64+0x174/0x580 [ 380.747550][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.754144][T16339] [ 380.756557][T16339] [ 380.756557][T16339] the dependencies between the lock to be acquired [ 380.756566][T16339] and SOFTIRQ-irq-unsafe lock: [ 380.770173][T16339] -> (tasklist_lock){.+.+}-{3:3} { [ 380.775560][T16339] HARDIRQ-ON-R at: [ 380.779619][T16339] lock_acquire+0x106/0x350 [ 380.785935][T16339] _raw_read_lock+0x36/0x50 [ 380.792269][T16339] __do_wait+0xde/0x740 [ 380.798270][T16339] do_wait+0x1e7/0x510 [ 380.804172][T16339] kernel_wait+0xd6/0x1c0 [ 380.810315][T16339] call_usermodehelper_exec_work+0xbe/0x230 [ 380.818023][T16339] process_scheduled_works+0xb5d/0x1860 [ 380.825380][T16339] worker_thread+0xa53/0xfc0 [ 380.831886][T16339] kthread+0x389/0x470 [ 380.837783][T16339] ret_from_fork+0x514/0xb70 [ 380.844189][T16339] ret_from_fork_asm+0x1a/0x30 [ 380.850776][T16339] SOFTIRQ-ON-R at: [ 380.854881][T16339] lock_acquire+0x106/0x350 [ 380.861202][T16339] _raw_read_lock+0x36/0x50 [ 380.867961][T16339] __do_wait+0xde/0x740 [ 380.873935][T16339] do_wait+0x1e7/0x510 [ 380.879814][T16339] kernel_wait+0xd6/0x1c0 [ 380.885958][T16339] call_usermodehelper_exec_work+0xbe/0x230 [ 380.893671][T16339] process_scheduled_works+0xb5d/0x1860 [ 380.901115][T16339] worker_thread+0xa53/0xfc0 [ 380.907515][T16339] kthread+0x389/0x470 [ 380.913396][T16339] ret_from_fork+0x514/0xb70 [ 380.919798][T16339] ret_from_fork_asm+0x1a/0x30 [ 380.926725][T16339] INITIAL USE at: [ 380.930697][T16339] lock_acquire+0x106/0x350 [ 380.936933][T16339] _raw_write_lock_irq+0x3d/0x50 [ 380.943607][T16339] copy_process+0x2b4c/0x4440 [ 380.950101][T16339] kernel_clone+0x2d7/0x940 [ 380.956551][T16339] user_mode_thread+0x110/0x180 [ 380.963222][T16339] rest_init+0x23/0x300 [ 380.969364][T16339] start_kernel+0x38a/0x3e0 [ 380.975809][T16339] x86_64_start_reservations+0x24/0x30 [ 380.983125][T16339] x86_64_start_kernel+0x143/0x1c0 [ 380.990134][T16339] common_startup_64+0x13e/0x147 [ 380.996802][T16339] INITIAL READ USE at: [ 381.001207][T16339] lock_acquire+0x106/0x350 [ 381.008073][T16339] _raw_read_lock+0x36/0x50 [ 381.015024][T16339] __do_wait+0xde/0x740 [ 381.021514][T16339] do_wait+0x1e7/0x510 [ 381.027745][T16339] kernel_wait+0xd6/0x1c0 [ 381.034233][T16339] call_usermodehelper_exec_work+0xbe/0x230 [ 381.042291][T16339] process_scheduled_works+0xb5d/0x1860 [ 381.049994][T16339] worker_thread+0xa53/0xfc0 [ 381.056740][T16339] kthread+0x389/0x470 [ 381.063051][T16339] ret_from_fork+0x514/0xb70 [ 381.069801][T16339] ret_from_fork_asm+0x1a/0x30 [ 381.076723][T16339] } [ 381.079294][T16339] ... key at: [] tasklist_lock+0x18/0x40 [ 381.087210][T16339] ... acquired at: [ 381.091086][T16339] _raw_read_lock+0x36/0x50 [ 381.095754][T16339] send_sigurg+0x12b/0x420 [ 381.100331][T16339] sk_send_sigurg+0x6c/0x2e0 [ 381.105168][T16339] queue_oob+0x42c/0x4f0 [ 381.109675][T16339] unix_stream_sendmsg+0xcb1/0xe80 [ 381.115039][T16339] ____sys_sendmsg+0x972/0x9f0 [ 381.120004][T16339] ___sys_sendmsg+0x2a5/0x360 [ 381.124978][T16339] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.130075][T16339] do_syscall_64+0x174/0x580 [ 381.134829][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.140879][T16339] [ 381.143187][T16339] -> (&f_owner->lock){....}-{3:3} { [ 381.148383][T16339] INITIAL USE at: [ 381.152260][T16339] lock_acquire+0x106/0x350 [ 381.158313][T16339] _raw_write_lock_irq+0x3d/0x50 [ 381.164800][T16339] __f_setown+0x67/0x370 [ 381.170595][T16339] f_setown+0x23a/0x300 [ 381.176299][T16339] do_fcntl+0x6cd/0x1a20 [ 381.182094][T16339] __se_sys_fcntl+0xc8/0x150 [ 381.188236][T16339] do_syscall_64+0x174/0x580 [ 381.194374][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.201917][T16339] INITIAL READ USE at: [ 381.206231][T16339] lock_acquire+0x106/0x350 [ 381.212717][T16339] _raw_read_lock_irqsave+0x48/0x60 [ 381.219900][T16339] send_sigio+0x38/0x370 [ 381.226141][T16339] dnotify_handle_event+0x169/0x440 [ 381.233349][T16339] fsnotify+0x1831/0x1ae0 [ 381.239670][T16339] fsnotify_access+0x22b/0x2a0 [ 381.246418][T16339] iterate_dir+0x3ea/0x570 [ 381.252816][T16339] __se_sys_getdents64+0xf1/0x280 [ 381.259832][T16339] do_syscall_64+0x174/0x580 [ 381.266407][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.274375][T16339] } [ 381.276865][T16339] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 381.285702][T16339] ... acquired at: [ 381.289485][T16339] _raw_read_lock_irqsave+0x48/0x60 [ 381.294857][T16339] send_sigio+0x38/0x370 [ 381.299271][T16339] kill_fasync+0x24d/0x4d0 [ 381.303851][T16339] lease_break_callback+0x26/0x30 [ 381.309037][T16339] __break_lease+0x81f/0x1ea0 [ 381.313875][T16339] do_dentry_open+0xf23/0x13a0 [ 381.318798][T16339] vfs_open+0x3b/0x340 [ 381.323031][T16339] path_openat+0x2e08/0x3860 [ 381.327792][T16339] do_file_open+0x23e/0x4a0 [ 381.332459][T16339] do_sys_openat2+0x113/0x200 [ 381.337292][T16339] __x64_sys_openat+0x138/0x170 [ 381.342326][T16339] do_syscall_64+0x174/0x580 [ 381.347076][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.353132][T16339] [ 381.355453][T16339] [ 381.355453][T16339] stack backtrace: [ 381.361406][T16339] CPU: 0 UID: 0 PID: 16339 Comm: syz.4.4554 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.361425][T16339] Tainted: [L]=SOFTLOCKUP [ 381.361431][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.361445][T16339] Call Trace: [ 381.361495][T16339] [ 381.361533][T16339] dump_stack_lvl+0xe8/0x150 [ 381.361559][T16339] __lock_acquire+0x2a94/0x2cf0 [ 381.361580][T16339] ? send_sigio+0x38/0x370 [ 381.361627][T16339] lock_acquire+0x106/0x350 [ 381.361640][T16339] ? send_sigio+0x38/0x370 [ 381.361656][T16339] ? kill_fasync+0x199/0x4d0 [ 381.361672][T16339] ? lock_acquire+0x106/0x350 [ 381.361684][T16339] ? kill_fasync+0x199/0x4d0 [ 381.361702][T16339] _raw_read_lock_irqsave+0x48/0x60 [ 381.361721][T16339] ? send_sigio+0x38/0x370 [ 381.361736][T16339] send_sigio+0x38/0x370 [ 381.361753][T16339] kill_fasync+0x24d/0x4d0 [ 381.361769][T16339] ? kill_fasync+0x53/0x4d0 [ 381.361785][T16339] lease_break_callback+0x26/0x30 [ 381.361804][T16339] __break_lease+0x81f/0x1ea0 [ 381.361824][T16339] ? __pfx___break_lease+0x10/0x10 [ 381.361840][T16339] ? __pfx_apparmor_file_open+0x10/0x10 [ 381.361924][T16339] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 381.361944][T16339] do_dentry_open+0xf23/0x13a0 [ 381.361961][T16339] vfs_open+0x3b/0x340 [ 381.361974][T16339] ? path_openat+0x2df0/0x3860 [ 381.361992][T16339] path_openat+0x2e08/0x3860 [ 381.362011][T16339] ? __pfx_stack_trace_save+0x10/0x10 [ 381.362030][T16339] ? stack_depot_save_flags+0x33/0x810 [ 381.362085][T16339] ? __pfx_path_openat+0x10/0x10 [ 381.362101][T16339] ? __x64_sys_openat+0x138/0x170 [ 381.362117][T16339] ? __lock_acquire+0x6b5/0x2cf0 [ 381.362133][T16339] do_file_open+0x23e/0x4a0 [ 381.362151][T16339] ? __pfx_do_file_open+0x10/0x10 [ 381.362173][T16339] ? _raw_spin_unlock+0x28/0x50 [ 381.362189][T16339] ? alloc_fd+0x64b/0x6c0 [ 381.362205][T16339] do_sys_openat2+0x113/0x200 [ 381.362219][T16339] ? __se_sys_futex+0x3a8/0x450 [ 381.362247][T16339] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.362262][T16339] ? rcu_is_watching+0x15/0xb0 [ 381.362282][T16339] __x64_sys_openat+0x138/0x170 [ 381.362297][T16339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.362310][T16339] do_syscall_64+0x174/0x580 [ 381.362324][T16339] ? trace_irq_disable+0x3b/0x140 [ 381.362345][T16339] ? clear_bhb_loop+0x40/0x90 [ 381.362360][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.362372][T16339] RIP: 0033:0x7f120979ce59 [ 381.362419][T16339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.362455][T16339] RSP: 002b:00007f120a674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.362470][T16339] RAX: ffffffffffffffda RBX: 00007f1209a15fa0 RCX: 00007f120979ce59 [ 381.362480][T16339] RDX: 0000000000001842 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 381.362489][T16339] RBP: 00007f1209832d6f R08: 0000000000000000 R09: 0000000000000000 [ 381.362497][T16339] R10: 0000000000000267 R11: 0000000000000246 R12: 0000000000000000 [ 381.362506][T16339] R13: 00007f1209a16038 R14: 00007f1209a15fa0 R15: 00007f1209b3fa48 [ 381.362520][T16339] [ 381.727536][ T5643] Bluetooth: hci2: command 0x0406 tx timeout