last executing test programs: 51.016595961s ago: executing program 3 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)={0x34, r1, 0x205, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x0) 51.015130565s ago: executing program 3 (id=1857): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) 51.013974683s ago: executing program 3 (id=1866): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000008440)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e23, [0x3, 0xb16, 0xf, 0xc3], [0x4, 0x0, 0x4, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xecd6}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20040000) 50.534262804s ago: executing program 3 (id=1859): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 50.440773357s ago: executing program 3 (id=1861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 49.82561175s ago: executing program 3 (id=1870): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 49.283440139s ago: executing program 32 (id=1870): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 26.502685675s ago: executing program 5 (id=2198): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = getpgrp(0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 26.345464779s ago: executing program 5 (id=2201): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0xbe, 0x0, 0x5748}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 26.143699367s ago: executing program 5 (id=2206): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x4000000000006, 0xaf}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400}) 25.968526751s ago: executing program 5 (id=2210): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.917743586s ago: executing program 5 (id=2213): prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 25.588043918s ago: executing program 5 (id=2216): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfd, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0x8, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x40000000000006a, 0x10003, 0x0) 25.029431906s ago: executing program 33 (id=2216): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfd, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0x8, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x40000000000006a, 0x10003, 0x0) 3.359586309s ago: executing program 0 (id=2501): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x363, 0x4, 0x0, 0x0) 3.112295599s ago: executing program 0 (id=2506): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x2) 3.033463898s ago: executing program 0 (id=2509): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), 0x214004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.788589825s ago: executing program 0 (id=2514): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.255513162s ago: executing program 4 (id=2525): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = epoll_create(0x7f) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0xf}) 1.935761838s ago: executing program 4 (id=2531): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.756305957s ago: executing program 2 (id=2535): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x4, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.706653429s ago: executing program 4 (id=2537): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) 1.645560894s ago: executing program 6 (id=2538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 1.548493022s ago: executing program 4 (id=2540): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.467688969s ago: executing program 6 (id=2542): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) 1.324463879s ago: executing program 6 (id=2544): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 1.209704409s ago: executing program 6 (id=2546): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) 1.126283218s ago: executing program 6 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 989.664057ms ago: executing program 6 (id=2549): syz_usb_connect$cdc_ecm(0x3, 0x55, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "f4d0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0xcc4, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x8, 0x75}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xcd, 0x7, 0x3}}}}}]}}]}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 967.626107ms ago: executing program 4 (id=2550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 827.459548ms ago: executing program 2 (id=2553): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x82, &(0x7f0000000400)={0x0, 0x4}, 0x8) 783.746487ms ago: executing program 1 (id=2554): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a3100000000090001"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 661.127062ms ago: executing program 4 (id=2555): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}, 0x8}], 0x1, 0x102, 0x0) 660.872295ms ago: executing program 1 (id=2556): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = fanotify_init(0x0, 0x400) fanotify_mark(r1, 0x11, 0x8001003, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pread64(r2, &(0x7f0000000000)=""/17, 0x11, 0x3) 660.316553ms ago: executing program 2 (id=2557): unshare(0x20000000) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 563.911166ms ago: executing program 1 (id=2558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 516.600864ms ago: executing program 2 (id=2559): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24) 491.109394ms ago: executing program 2 (id=2560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 399.01151ms ago: executing program 0 (id=2561): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 301.18483ms ago: executing program 1 (id=2562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0x5, 0x9, 0xf8, 0x8, 0x5, 0x68, 0x2, 0xf7, 0x9c, 0xfd, 0xa6, 0x81, 0x1, 0x2, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000280)={0x0, 0xc70}) 298.581845ms ago: executing program 2 (id=2563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 164.462383ms ago: executing program 1 (id=2564): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r1, r0}, 0xc) 43.588976ms ago: executing program 1 (id=2565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) 0s ago: executing program 0 (id=2566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x117, 0x857}], 0x10}, 0x0) kernel console output (not intermixed with test programs): 295 subj=_ pid=6622 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c9772add9 code=0x7ffc0000 [ 130.913584][ T30] audit: type=1326 audit(1754568683.308:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c97785ba7 code=0x7ffc0000 [ 130.944093][ T30] audit: type=1326 audit(1754568683.308:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c9772add9 code=0x7ffc0000 [ 130.968415][ T30] audit: type=1326 audit(1754568683.308:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6622 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c97785ba7 code=0x7ffc0000 [ 131.873554][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 132.741716][ T6705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.123113][ T6721] process 'syz.0.331' launched './file0' with NULL argv: empty string added [ 133.759957][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.919999][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 133.960672][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 133.988187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.018854][ T9] usb 1-1: Product: syz [ 134.049387][ T9] usb 1-1: Manufacturer: syz [ 134.066676][ T9] usb 1-1: SerialNumber: syz [ 134.096253][ T9] usb 1-1: config 0 descriptor?? [ 134.137006][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.140554][ T6754] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.345'. [ 134.527878][ T6768] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6768 comm: syz.3.352) [ 134.636191][ T6775] serio: Serial port ttynull [ 134.760226][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.919982][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 134.935004][ T5917] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 134.944274][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.962607][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 134.969725][ T5917] pvrusb2: ********** [ 134.973817][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 134.984169][ T5917] pvrusb2: Important functionality might not be entirely working. [ 134.994228][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.008888][ T5917] pvrusb2: ********** [ 135.174375][ T2341] pvrusb2: Invalid write control endpoint [ 135.198162][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 135.217325][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.231824][ T9] gspca_stk1135: Sensor write failed [ 135.248682][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.261299][ T9] gspca_stk1135: Sensor write failed [ 135.272306][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.295743][ T9] gspca_stk1135: Sensor read failed [ 135.306222][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.312845][ T6787] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.360'. [ 135.316346][ T2341] pvrusb2: Invalid write control endpoint [ 135.344168][ T9] gspca_stk1135: Sensor read failed [ 135.349499][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 135.357744][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 135.373692][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.390408][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 135.398269][ T9] gspca_stk1135: Sensor read failed [ 135.411444][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.418397][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 135.433032][ T9] gspca_stk1135: Sensor read failed [ 135.438476][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.446260][ T2341] pvrusb2: Device being rendered inoperable [ 135.463023][ T9] gspca_stk1135: Sensor write failed [ 135.469706][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 135.479593][ T5943] usb 3-1: USB disconnect, device number 2 [ 135.499585][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 135.515942][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 135.536097][ T9] gspca_stk1135: Sensor write failed [ 135.543441][ T2341] pvrusb2: Attached sub-driver cx25840 [ 135.561847][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 135.562973][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 135.582230][ T9] usb 1-1: USB disconnect, device number 4 [ 135.622407][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 135.924223][ T6806] capability: warning: `syz.3.370' uses deprecated v2 capabilities in a way that may be insecure [ 135.945057][ T6806] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 135.959113][ T6806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.980482][ T6806] overlayfs: failed to get uuid (81/file1, err=-13); falling back to uuid=null. [ 136.230383][ T6817] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.374'. [ 136.795028][ T3092] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.812491][ T6840] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 137.010762][ T3092] usb 2-1: Using ep0 maxpacket: 32 [ 137.021679][ T3092] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 137.031114][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.039170][ T3092] usb 2-1: Product: syz [ 137.043528][ T3092] usb 2-1: Manufacturer: syz [ 137.048167][ T3092] usb 2-1: SerialNumber: syz [ 137.055519][ T3092] usb 2-1: config 0 descriptor?? [ 137.068605][ T3092] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 137.140227][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.190087][ T5943] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.290052][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 137.307406][ T9] usb 4-1: config 0 has no interfaces? [ 137.318327][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 137.327929][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.337921][ T9] usb 4-1: Product: syz [ 137.342560][ T9] usb 4-1: Manufacturer: syz [ 137.347218][ T9] usb 4-1: SerialNumber: syz [ 137.354226][ T5943] usb 1-1: config 0 has no interfaces? [ 137.359771][ T5943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.371543][ T9] usb 4-1: config 0 descriptor?? [ 137.376729][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.392804][ T5943] usb 1-1: config 0 descriptor?? [ 137.844366][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.861358][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.879458][ T6862] capability: warning: `syz.4.396' uses 32-bit capabilities (legacy support in use) [ 137.892155][ T5943] usb 1-1: USB disconnect, device number 5 [ 138.091568][ T3092] gspca_stk1135: reg_w 0x7 err -71 [ 138.103014][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.113531][ T3092] gspca_stk1135: Sensor write failed [ 138.118934][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.125977][ T3092] gspca_stk1135: Sensor write failed [ 138.131426][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.138205][ T3092] gspca_stk1135: Sensor read failed [ 138.143981][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.150687][ T3092] gspca_stk1135: Sensor read failed [ 138.155947][ T3092] gspca_stk1135: Detected sensor type unknown (0x0) [ 138.163044][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.169418][ T3092] gspca_stk1135: Sensor read failed [ 138.176922][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.189099][ T3092] gspca_stk1135: Sensor read failed [ 138.190337][ T5943] usb 4-1: USB disconnect, device number 3 [ 138.194507][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.239654][ T3092] gspca_stk1135: Sensor write failed [ 138.249781][ T3092] gspca_stk1135: serial bus timeout: status=0x00 [ 138.268607][ T3092] gspca_stk1135: Sensor write failed [ 138.283977][ T3092] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 138.298734][ T6871] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.399'. [ 138.317922][ T3092] usb 2-1: USB disconnect, device number 7 [ 138.970793][ T5943] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.995383][ T6870] geneve0: entered promiscuous mode [ 139.010853][ T6870] geneve0: entered allmulticast mode [ 139.101510][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 139.130032][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 139.141024][ T5943] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 139.160126][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189112][ T5943] usb 4-1: Product: syz [ 139.194822][ T5943] usb 4-1: Manufacturer: syz [ 139.211556][ T5943] usb 4-1: SerialNumber: syz [ 139.237195][ T5943] usb 4-1: config 0 descriptor?? [ 139.253430][ T5943] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 139.400629][ T6895] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.408039][ T5943] IPVS: starting estimator thread 0... [ 139.474790][ T5943] usb 4-1: USB disconnect, device number 4 [ 139.540379][ T6899] IPVS: using max 30 ests per chain, 72000 per kthread [ 140.019736][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.027486][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.290129][ T5943] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.365826][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 140.409696][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 140.500892][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.529127][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.553193][ T5943] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 140.573296][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.622248][ T5943] usb 3-1: config 0 descriptor?? [ 141.067344][ T5943] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 141.091387][ T5943] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 141.119148][ T5943] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input6 [ 141.173842][ T5943] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 141.274119][ T5943] usb 3-1: USB disconnect, device number 3 [ 141.408604][ T6968] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 141.773659][ T5943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.954895][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 141.968786][ T5943] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.997407][ T5943] usb 2-1: config 0 has no interface number 0 [ 142.012550][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.039400][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.051860][ T5943] usb 2-1: Product: syz [ 142.058988][ T5943] usb 2-1: Manufacturer: syz [ 142.065239][ T5943] usb 2-1: SerialNumber: syz [ 142.076970][ T5943] usb 2-1: config 0 descriptor?? [ 142.088736][ T5943] smsc95xx v2.0.0 [ 142.218565][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 142.218588][ T30] audit: type=1800 audit(1754568694.888:566): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.459" name="nullb0" dev="tmpfs" ino=444 res=0 errno=0 [ 142.511161][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.530760][ T3092] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.537754][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.611128][ T5917] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.714595][ T3092] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.726148][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.738486][ T3092] usb 1-1: config 0 descriptor?? [ 142.751498][ T3092] cp210x 1-1:0.0: cp210x converter detected [ 142.782198][ T5917] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.802979][ T5917] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.827639][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.846858][ T5917] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.876553][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.911339][ T5917] usb 3-1: config 0 descriptor?? [ 142.964313][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.994436][ T5943] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.025304][ T5943] usb 2-1: USB disconnect, device number 8 [ 143.160968][ T3092] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 143.196603][ T3092] usb 1-1: cp210x converter now attached to ttyUSB0 [ 143.400647][ T3092] usb 1-1: USB disconnect, device number 6 [ 143.427527][ T3092] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.505848][ T3092] cp210x 1-1:0.0: device disconnected [ 143.559168][ T5917] usb 3-1: string descriptor 0 read error: -22 [ 143.958130][ T5917] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 143.996027][ T5917] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 144.024698][ T5917] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 144.057369][ T5917] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 144.076390][ T5917] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 144.122030][ T5917] usb 3-1: USB disconnect, device number 4 [ 144.882345][ T7077] program syz.2.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.569992][ T5943] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.740205][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 145.750827][ T5943] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.770657][ T5943] usb 1-1: config 179 has no interface number 0 [ 145.777998][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.791401][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.803976][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.815589][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 145.828845][ T5943] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.865366][ T5943] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.908392][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.001598][ T7094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.299693][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.347478][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.800634][ T5928] usb 1-1: USB disconnect, device number 7 [ 146.800644][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.815972][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.550937][ T7147] ALSA: seq fatal error: cannot create timer (-22) [ 148.160213][ T7159] syzkaller1: entered promiscuous mode [ 148.187570][ T7159] syzkaller1: entered allmulticast mode [ 148.930085][ T976] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.120173][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 149.152649][ T976] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 149.197966][ T976] usb 1-1: config 0 has no interface number 0 [ 149.231980][ T976] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.279781][ T976] usb 1-1: config 0 interface 85 has no altsetting 0 [ 149.343976][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 149.404335][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.458331][ T976] usb 1-1: Product: syz [ 149.485946][ T976] usb 1-1: Manufacturer: syz [ 149.506399][ T976] usb 1-1: SerialNumber: syz [ 149.565443][ T976] usb 1-1: config 0 descriptor?? [ 150.245298][ T976] appletouch 1-1:0.85: Geyser mode initialized. [ 150.295247][ T976] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7 [ 150.447276][ T5917] usb 1-1: USB disconnect, device number 8 [ 150.481440][ T5917] appletouch 1-1:0.85: input: appletouch disconnected [ 151.127271][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 152.099416][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 152.491108][ T7277] loop7: detected capacity change from 0 to 7 [ 152.527465][ T7277] Dev loop7: unable to read RDB block 7 [ 152.554267][ T7277] loop7: unable to read partition table [ 152.591494][ T7277] loop7: partition table beyond EOD, truncated [ 152.597814][ T7277] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 152.800026][ T5943] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 152.998901][ T7301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.012230][ T5943] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 153.023790][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 153.025136][ T5943] usb 1-1: config 0 has no interface number 0 [ 153.048563][ T5943] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.070068][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.088448][ T5943] usb 1-1: Product: syz [ 153.097210][ T5943] usb 1-1: Manufacturer: syz [ 153.109994][ T5943] usb 1-1: SerialNumber: syz [ 153.122916][ T5943] usb 1-1: config 0 descriptor?? [ 153.130297][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.152351][ T7301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.295183][ T7301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.310446][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 153.342965][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.368087][ T5917] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 153.389122][ T5917] usb 3-1: config 4 has an invalid descriptor of length 115, skipping remainder of the config [ 153.412178][ T5917] usb 3-1: config 4 has no interface number 0 [ 153.429135][ T5917] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 153.443646][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.456057][ T5917] usb 3-1: Product: syz [ 153.475090][ T5917] usb 3-1: Manufacturer: syz [ 153.479772][ T5917] usb 3-1: SerialNumber: syz [ 153.497565][ T7301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.695819][ T7301] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.758460][ T5917] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 153.776483][ T5917] usb 3-1: No valid video chain found. [ 153.785167][ T7301] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.798341][ T5917] usb 3-1: USB disconnect, device number 5 [ 153.838077][ T7301] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.862698][ T7301] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.959500][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 153.973678][ T7327] netlink: 'syz.1.601': attribute type 18 has an invalid length. [ 153.987399][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 154.146483][ T5943] usb 1-1: Firmware version (0.0) predates our first public release. [ 154.166680][ T5943] usb 1-1: Please update to version 0.2 or newer [ 154.254007][ T5943] usb 1-1: USB disconnect, device number 9 [ 154.336083][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 155.060395][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.213127][ T7377] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.271668][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 155.294954][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.326403][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.375362][ T5917] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.416174][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.443935][ T5917] usb 3-1: config 0 descriptor?? [ 155.787728][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 155.820199][ T7397] netlink: 48 bytes leftover after parsing attributes in process `syz.0.632'. [ 155.955614][ T5917] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 156.014934][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.630'. [ 156.140474][ T7404] syz_tun: entered allmulticast mode [ 156.160114][ T7403] syz_tun: left allmulticast mode [ 156.204627][ T3092] usb 3-1: USB disconnect, device number 6 [ 156.282666][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 156.364529][ T7412] pimreg3: entered allmulticast mode [ 156.520238][ T5943] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.686380][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.705715][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.733828][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.790188][ T5943] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.799326][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.851561][ T5943] usb 2-1: config 0 descriptor?? [ 157.310265][ T5943] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 158.715188][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.893409][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 158.910609][ T5917] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 158.930018][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.938171][ T5917] usb 4-1: Product: syz [ 158.946241][ T5917] usb 4-1: Manufacturer: syz [ 158.953289][ T5917] usb 4-1: SerialNumber: syz [ 158.972706][ T5917] usb 4-1: config 0 descriptor?? [ 158.995183][ T5917] gspca_main: se401-2.14.0 probing 047d:5003 [ 159.080419][ T7496] bridge0: port 3(syz_tun) entered blocking state [ 159.100072][ T7496] bridge0: port 3(syz_tun) entered disabled state [ 159.123014][ T7496] syz_tun: entered allmulticast mode [ 159.153690][ T7496] syz_tun: entered promiscuous mode [ 159.171439][ T7496] bridge0: port 3(syz_tun) entered blocking state [ 159.179274][ T7496] bridge0: port 3(syz_tun) entered forwarding state [ 159.342456][ T976] usb 2-1: USB disconnect, device number 9 [ 159.442898][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 159.456219][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 159.464857][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 159.471224][ T5917] gspca_se401: Frame size: 1x0 bayer [ 159.477370][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 159.484043][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 159.652222][ T5917] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 159.672611][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.740214][ T5917] usb 4-1: USB disconnect, device number 5 [ 159.870827][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 159.897008][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.928370][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.954664][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.969018][ T5928] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 159.978239][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.996217][ T5928] usb 1-1: config 0 descriptor?? [ 160.265780][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.445714][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.461989][ T5928] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 160.479309][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 160.493528][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.548021][ T5917] usb 3-1: config 0 descriptor?? [ 160.580186][ T5928] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 160.594629][ T30] audit: type=1326 audit(1754568713.268:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.4.700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f114838ebe9 code=0x0 [ 160.595572][ T5928] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 160.693425][ T3092] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 160.711625][ T5928] usb 1-1: USB disconnect, device number 10 [ 160.717811][ T3092] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.759973][ T3092] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.776727][ T3092] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.983345][ T5917] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 161.006500][ T5917] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 161.024991][ T5917] lg-g15 0003:046D:C222.000A: item fetching failed at offset 2/7 [ 161.041109][ T5917] lg-g15 0003:046D:C222.000A: probe with driver lg-g15 failed with error -22 [ 161.188258][ T5903] usb 3-1: USB disconnect, device number 7 [ 161.207895][ T30] audit: type=1326 audit(1754568713.878:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63f18ebe9 code=0x7fc00000 [ 161.694624][ T7582] loop8: detected capacity change from 0 to 7 [ 161.717928][ T7582] Dev loop8: unable to read RDB block 7 [ 161.732209][ T7582] loop8: AHDI p3 [ 161.741758][ T7582] loop8: partition table partially beyond EOD, truncated [ 161.876576][ T30] audit: type=1326 audit(1754568714.538:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc63f18ebe9 code=0x7fc00000 [ 161.929782][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 162.044735][ T7593] syzkaller1: entered promiscuous mode [ 162.070178][ T7593] syzkaller1: entered allmulticast mode [ 162.123778][ T7598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.190320][ T7600] netlink: 80 bytes leftover after parsing attributes in process `syz.4.721'. [ 162.213164][ T7600] netlink: 80 bytes leftover after parsing attributes in process `syz.4.721'. [ 162.931771][ T7631] loop8: detected capacity change from 0 to 8 [ 162.966108][ T7631] Dev loop8: unable to read RDB block 8 [ 162.989011][ T7631] loop8: unable to read partition table [ 163.007015][ T7631] loop8: partition table beyond EOD, truncated [ 163.027687][ T7631] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 163.113169][ T7637] random: crng reseeded on system resumption [ 163.577163][ T5917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.770220][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 163.789058][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.810073][ T5917] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 163.828439][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.838436][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.850716][ T5917] usb 2-1: Product: syz [ 163.855042][ T5917] usb 2-1: Manufacturer: syz [ 163.863637][ T5917] usb 2-1: SerialNumber: syz [ 163.877022][ T5917] cdc_ncm 2-1:1.0: skipping garbage [ 164.111474][ T7648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.682732][ T3092] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 164.754609][ T7648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.845145][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 164.871675][ T7694] netlink: 'syz.3.760': attribute type 7 has an invalid length. [ 164.879477][ T7694] netlink: 'syz.3.760': attribute type 8 has an invalid length. [ 164.887951][ T3092] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 164.899976][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.916048][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 164.925250][ T3092] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.925284][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.925310][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.929767][ T3092] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 164.988018][ T7694] gretap0: entered promiscuous mode [ 164.992183][ T5917] cdc_ncm 2-1:1.0: bind() failure [ 165.005161][ T7694] batadv_slave_1: entered promiscuous mode [ 165.018385][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.030376][ T7694] gretap0: left promiscuous mode [ 165.030437][ T5917] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 165.054404][ T7694] batadv_slave_1: left promiscuous mode [ 165.069936][ T3092] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.090000][ T5917] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 165.099574][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.111255][ T5917] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 165.120086][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.138212][ T5917] usb 2-1: USB disconnect, device number 10 [ 165.155735][ T3092] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 165.165203][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.189999][ T3092] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.210857][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.236777][ T3092] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.269268][ T3092] usb 3-1: string descriptor 0 read error: -22 [ 165.276299][ T3092] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 165.302575][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.388542][ T3092] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 165.582880][ T5943] usb 3-1: USB disconnect, device number 8 [ 165.700143][ T3092] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.901062][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.951394][ T3092] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 165.980078][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.008384][ T3092] usb 1-1: config 0 descriptor?? [ 166.689659][ T5924] usb 1-1: USB disconnect, device number 11 [ 166.761789][ T3092] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.920959][ T3092] usb 3-1: Using ep0 maxpacket: 16 [ 166.945506][ T3092] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 166.950094][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.985209][ T3092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.030127][ T3092] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.044259][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.056105][ T3092] usb 3-1: Product: syz [ 167.060588][ T3092] usb 3-1: Manufacturer: syz [ 167.065401][ T3092] usb 3-1: SerialNumber: syz [ 167.076215][ T3092] usb 3-1: config 0 descriptor?? [ 167.093259][ T3092] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 167.105067][ T3092] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 167.122855][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 167.142631][ T5943] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 167.170263][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.205270][ T5943] usb 4-1: config 0 descriptor?? [ 167.440132][ T5943] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.478221][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.510587][ T5943] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.517825][ T5943] usb 4-1: media controller created [ 167.615340][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.709677][ T3092] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 167.718737][ T5943] az6027: usb out operation failed. (-71) [ 167.742404][ T5943] az6027: usb out operation failed. (-71) [ 167.749613][ T3092] em28xx 3-1:0.0: Config register raw data: 0x41 [ 167.759964][ T5943] stb0899_attach: Driver disabled by Kconfig [ 167.781492][ T5943] az6027: no front-end attached [ 167.781492][ T5943] [ 167.799329][ T5943] az6027: usb out operation failed. (-71) [ 167.829727][ T5943] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 167.865814][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 167.941236][ T5943] dvb-usb: schedule remote query interval to 400 msecs. [ 167.948707][ T3092] usb 3-1: USB disconnect, device number 9 [ 167.956319][ T3092] em28xx 3-1:0.0: Disconnecting em28xx [ 167.977291][ T5943] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 167.979224][ T3092] em28xx 3-1:0.0: Freeing device [ 168.019205][ T5943] usb 4-1: USB disconnect, device number 6 [ 168.183371][ T5943] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 168.929980][ T976] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 169.104039][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.114262][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 169.128068][ T976] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 169.138235][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.147479][ T976] usb 3-1: Product: syz [ 169.152067][ T976] usb 3-1: Manufacturer: syz [ 169.156785][ T976] usb 3-1: SerialNumber: syz [ 169.171847][ T976] usb 3-1: config 0 descriptor?? [ 169.177722][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.185111][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.271184][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.336974][ T5903] kernel read not supported for file /dsp (pid: 5903 comm: kworker/0:4) [ 169.406847][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.422442][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.436587][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.467769][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 169.484560][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.523836][ T9] usb 4-1: config 0 descriptor?? [ 169.859220][ T976] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 169.941234][ T9] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 169.948269][ T9] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 169.956035][ T9] lg-g15 0003:046D:C222.000C: item fetching failed at offset 2/7 [ 169.964768][ T9] lg-g15 0003:046D:C222.000C: probe with driver lg-g15 failed with error -22 [ 170.149425][ T5928] usb 4-1: USB disconnect, device number 7 [ 170.272866][ T976] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 170.285125][ T976] usb 3-1: USB disconnect, device number 10 [ 171.640187][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.825295][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.879985][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.943962][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.041490][ T5903] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.076752][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.121437][ T5903] usb 1-1: config 0 descriptor?? [ 172.636748][ T5903] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.870126][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.044041][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.060620][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 173.070106][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.084631][ T5928] usb 2-1: config 0 descriptor?? [ 173.519463][ T5928] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 173.539308][ T5928] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 173.562548][ T5928] lg-g15 0003:046D:C222.000E: item fetching failed at offset 2/7 [ 173.582233][ T5928] lg-g15 0003:046D:C222.000E: probe with driver lg-g15 failed with error -22 [ 173.798176][ T5924] usb 2-1: USB disconnect, device number 11 [ 174.317203][ T7865] pimreg3: entered allmulticast mode [ 174.646230][ T5917] usb 1-1: USB disconnect, device number 12 [ 174.706309][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 174.979934][ T5903] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.169948][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 175.192602][ T5903] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 175.222495][ T5903] usb 3-1: config 0 has no interface number 0 [ 175.243425][ T5903] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.284471][ T5903] usb 3-1: config 0 interface 85 has no altsetting 0 [ 175.323713][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 175.337623][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.354946][ T5903] usb 3-1: Product: syz [ 175.363864][ T5903] usb 3-1: Manufacturer: syz [ 175.374788][ T5903] usb 3-1: SerialNumber: syz [ 175.392915][ T5903] usb 3-1: config 0 descriptor?? [ 176.033065][ T5903] appletouch 3-1:0.85: Geyser mode initialized. [ 176.063570][ T5903] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 176.315322][ T9] usb 3-1: USB disconnect, device number 11 [ 176.393491][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 176.595096][ T7918] syz_tun: entered allmulticast mode [ 176.612818][ T7916] syz_tun: left allmulticast mode [ 177.194195][ T7946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.868'. [ 178.449450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.712312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.847102][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 178.870602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.403002][ T8021] overlayfs: upper fs does not support file handles, falling back to index=off. [ 179.412550][ T8021] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 179.423579][ T8021] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 179.661456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 180.198594][ T5924] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 180.320007][ T5943] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.388952][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.413603][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 180.437248][ T5924] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 180.447826][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.465132][ T5924] usb 1-1: config 0 descriptor?? [ 180.477443][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 180.486697][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 180.504546][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 180.514324][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.522155][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 180.542647][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.552978][ T5943] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 180.570143][ T5924] usb 1-1: media controller created [ 180.577265][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.577720][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.610488][ T5943] usb 4-1: config 0 descriptor?? [ 180.646661][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 180.662306][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 180.692434][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 180.749306][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 180.769168][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 180.919927][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 180.934096][ T5924] dvb-usb: error while querying for an remote control event. [ 181.027337][ T9] usb 1-1: USB disconnect, device number 13 [ 181.057153][ T5943] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 181.075769][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 181.084736][ T5943] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 181.097602][ T5943] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000F/input/input13 [ 181.123247][ T5943] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 181.272299][ T5924] usb 4-1: USB disconnect, device number 8 [ 181.311895][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 181.605423][ T8083] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.607410][ T5928] IPVS: starting estimator thread 0... [ 181.731121][ T8087] IPVS: using max 28 ests per chain, 67200 per kthread [ 182.240510][ T8113] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 182.263553][ T8113] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.290489][ T8113] overlayfs: failed to get uuid (158/file1, err=-13); falling back to uuid=null. [ 182.601414][ T30] audit: type=1326 audit(1754568735.278:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 182.710437][ T30] audit: type=1326 audit(1754568735.278:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 182.804373][ T30] audit: type=1326 audit(1754568735.308:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 182.875051][ T30] audit: type=1326 audit(1754568735.308:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 182.911121][ T30] audit: type=1326 audit(1754568735.308:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 184.575461][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.969'. [ 184.884513][ T8186] program syz.0.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.236122][ T8192] fuse: Bad value for 'fd' [ 185.247492][ T8192] fuse: Bad value for 'fd' [ 186.466903][ T8223] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 188.509976][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.730076][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 188.763103][ T5928] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.789885][ T5928] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.830221][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.864704][ T5928] usb 1-1: config 1 has no interface number 0 [ 188.903087][ T5928] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.950858][ T5928] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.019950][ T5928] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.029098][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.095631][ T5928] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 189.230934][ T5924] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.301564][ T5928] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 189.400415][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 189.447537][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.474424][ T5924] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 189.520340][ T5924] usb 4-1: config 4 has an invalid descriptor of length 115, skipping remainder of the config [ 189.593484][ T5924] usb 4-1: config 4 has no interface number 0 [ 189.641264][ T5924] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 189.700197][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.755066][ T5924] usb 4-1: Product: syz [ 189.759369][ T5924] usb 4-1: Manufacturer: syz [ 189.783560][ T9] usb 1-1: USB disconnect, device number 14 [ 189.808147][ T5924] usb 4-1: SerialNumber: syz [ 189.838398][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 190.093423][ T5924] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 190.123940][ T5924] usb 4-1: No valid video chain found. [ 190.164231][ T8290] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 190.180412][ T5924] usb 4-1: USB disconnect, device number 9 [ 192.952912][ T8323] geneve0: entered promiscuous mode [ 192.984791][ T8323] geneve0: entered allmulticast mode [ 193.945739][ T8362] netlink: 'syz.2.1048': attribute type 12 has an invalid length. [ 193.965004][ T8362] netlink: 'syz.2.1048': attribute type 29 has an invalid length. [ 194.000418][ T8362] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1048'. [ 194.027291][ T8362] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1048'. [ 194.390094][ T5903] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 194.586030][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 194.630593][ T5903] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 194.683327][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.720597][ T5903] usb 1-1: config 0 descriptor?? [ 194.727607][ T8377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.213417][ T5903] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 195.405965][ T5903] usb 1-1: USB disconnect, device number 15 [ 195.910093][ T5943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.133991][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.196324][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.240104][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.324774][ T5943] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 196.374907][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.436016][ T5943] usb 4-1: config 0 descriptor?? [ 196.566962][ T8428] 9pnet_fd: Insufficient options for proto=fd [ 196.625785][ T8430] bridge0: port 3(syz_tun) entered blocking state [ 196.660089][ T8430] bridge0: port 3(syz_tun) entered disabled state [ 196.675825][ T8430] syz_tun: entered allmulticast mode [ 196.697365][ T8430] syz_tun: entered promiscuous mode [ 196.710739][ T8430] bridge0: port 3(syz_tun) entered blocking state [ 196.717405][ T8430] bridge0: port 3(syz_tun) entered forwarding state [ 196.907038][ T5943] acrux 0003:1A34:0802.0011: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 196.919524][ T5943] acrux 0003:1A34:0802.0011: no inputs found [ 196.933523][ T5943] acrux 0003:1A34:0802.0011: Failed to enable force feedback support, error: -19 [ 196.990131][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 197.175051][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 197.197484][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.234273][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.251759][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 197.263918][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.278858][ T9] usb 1-1: config 0 descriptor?? [ 197.314708][ T30] audit: type=1400 audit(1754568749.988:575): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=8457 comm="syz.2.1091" name="address_bits" dev="sysfs" ino=1392 [ 197.724299][ T8479] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1101'. [ 198.065168][ T9] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 198.084792][ T9] usb 1-1: USB disconnect, device number 16 [ 198.652836][ T8514] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 198.842282][ T5943] usb 4-1: USB disconnect, device number 10 [ 199.034824][ T8528] loop8: detected capacity change from 0 to 8 [ 199.045988][ T8528] Dev loop8: unable to read RDB block 8 [ 199.058701][ T8528] loop8: unable to read partition table [ 199.075271][ T8528] loop8: partition table beyond EOD, truncated [ 199.089934][ T8528] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 199.389271][ T8542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1129'. [ 199.416635][ T8546] input: syz0 as /devices/virtual/input/input14 [ 199.425233][ T8546] input: failed to attach handler leds to device input14, error: -6 [ 199.612725][ T5928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 199.800123][ T5928] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.823479][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.845953][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'. [ 199.869106][ T5928] usb 1-1: config 0 descriptor?? [ 200.067773][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 200.110792][ T5928] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 200.339708][ T5928] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 200.370232][ T5928] [drm] Initialized udl on minor 2 [ 200.705750][ T5928] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 200.729120][ T5928] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 200.747676][ T5917] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 200.768494][ T5928] usb 1-1: USB disconnect, device number 17 [ 200.777421][ T5917] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 200.856455][ T8601] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1153'. [ 201.141046][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1159'. [ 201.163364][ T8613] netlink: 'syz.2.1159': attribute type 7 has an invalid length. [ 201.179978][ T8613] netlink: 'syz.2.1159': attribute type 8 has an invalid length. [ 201.188199][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 201.239250][ T8613] gretap0: entered promiscuous mode [ 201.260569][ T8613] batadv_slave_1: entered promiscuous mode [ 201.317990][ T8619] vlan2: entered allmulticast mode [ 201.327578][ T8619] team0: entered allmulticast mode [ 201.334718][ T8619] team_slave_0: entered allmulticast mode [ 201.346995][ T8619] team_slave_1: entered allmulticast mode [ 201.357620][ T8619] team0: Device vlan2 is already an upper device of the team interface [ 201.457872][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.464327][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.669985][ T5928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.850183][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 201.862500][ T5928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 201.881603][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.921090][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.957150][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.986178][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.004366][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.014946][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.251406][ T5928] usb 3-1: GET_CAPABILITIES returned 0 [ 202.257669][ T5928] usbtmc 3-1:16.0: can't read capabilities [ 202.430105][ T5903] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.468669][ T5928] usb 3-1: USB disconnect, device number 12 [ 202.604145][ T5903] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.622612][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.656351][ T5903] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.667704][ T5903] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.676295][ T5903] usb 1-1: Manufacturer: syz [ 202.684487][ T5903] usb 1-1: config 0 descriptor?? [ 202.840068][ T5903] rc_core: IR keymap rc-hauppauge not found [ 202.870294][ T5903] Registered IR keymap rc-empty [ 202.888232][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 202.923474][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 202.950686][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 202.969748][ T5903] usb 1-1: USB disconnect, device number 18 [ 203.496101][ T8716] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1205'. [ 203.610078][ T5903] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.779870][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 203.805563][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.867441][ T5903] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 203.909965][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.958947][ T5903] usb 3-1: Product: syz [ 203.979352][ T5903] usb 3-1: Manufacturer: syz [ 203.999699][ T5903] usb 3-1: SerialNumber: syz [ 204.032652][ T5903] usb 3-1: config 0 descriptor?? [ 204.480213][ T5903] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 204.907731][ T8757] bridge0: entered promiscuous mode [ 204.920288][ T8757] macvlan2: entered promiscuous mode [ 204.991301][ T8760] macvlan3: entered promiscuous mode [ 205.087455][ T9] usb 3-1: USB disconnect, device number 13 [ 205.501492][ T8774] overlayfs: failed to clone upperpath [ 205.552472][ T8774] overlayfs: failed to clone upperpath [ 206.111659][ T8791] sctp: [Deprecated]: syz.1.1236 (pid 8791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.111659][ T8791] Use struct sctp_sack_info instead [ 206.393320][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 206.444252][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 206.642928][ T8800] netlink: 'syz.3.1238': attribute type 18 has an invalid length. [ 206.683066][ T8800] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.692290][ T8800] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.701072][ T8800] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.709788][ T8800] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.788306][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 206.820444][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 206.875817][ T8800] netlink: 'syz.3.1238': attribute type 18 has an invalid length. [ 207.077321][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 208.644941][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 209.110339][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 209.144927][ T8868] netlink: 'syz.1.1269': attribute type 7 has an invalid length. [ 209.156122][ T8868] netlink: 'syz.1.1269': attribute type 8 has an invalid length. [ 209.168456][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 209.202789][ T8868] gretap0: entered promiscuous mode [ 209.247385][ T8868] batadv_slave_1: entered promiscuous mode [ 209.275894][ T8868] gretap0: left promiscuous mode [ 209.298632][ T8868] batadv_slave_1: left promiscuous mode [ 209.862896][ T8899] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 209.878705][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 209.899438][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 209.968503][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.848088][ T8936] input: syz0 as /devices/virtual/input/input16 [ 211.542431][ T8958] sctp: [Deprecated]: syz.4.1309 (pid 8958) Use of int in max_burst socket option deprecated. [ 211.542431][ T8958] Use struct sctp_assoc_value instead [ 211.600093][ T5928] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 211.777828][ T5928] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 211.802800][ T30] audit: type=1326 audit(1754568764.478:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 211.827716][ T5928] usb 4-1: config 0 has no interface number 0 [ 211.860740][ T30] audit: type=1326 audit(1754568764.478:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 211.899940][ T5928] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 211.909062][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.919890][ T5928] usb 4-1: Product: syz [ 211.924115][ T5928] usb 4-1: Manufacturer: syz [ 211.928766][ T5928] usb 4-1: SerialNumber: syz [ 211.939930][ T30] audit: type=1326 audit(1754568764.478:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 211.985489][ T5928] usb 4-1: config 0 descriptor?? [ 212.001598][ T30] audit: type=1326 audit(1754568764.478:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 212.060026][ T30] audit: type=1326 audit(1754568764.478:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 212.114473][ T30] audit: type=1326 audit(1754568764.478:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 212.169754][ T30] audit: type=1326 audit(1754568764.508:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 212.214769][ T30] audit: type=1326 audit(1754568764.508:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1148385ba7 code=0x7ffc0000 [ 212.241382][ T30] audit: type=1326 audit(1754568764.508:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f114832add9 code=0x7ffc0000 [ 212.273934][ T30] audit: type=1326 audit(1754568764.508:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8963 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f114838ebe9 code=0x7ffc0000 [ 212.429969][ T5928] usb 4-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 212.625683][ T5928] usb 4-1: Firmware: build [ 212.824409][ T5928] usb 4-1: failed to fetch extended address, random address set [ 212.859986][ T5928] usb 4-1: atusb_probe: initialization failed, error = -524 [ 212.898271][ T5928] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 212.949031][ T5928] usb 4-1: USB disconnect, device number 11 [ 212.974006][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 215.840071][ T5903] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 216.010169][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 216.033907][ T5903] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.043202][ T5903] usb 1-1: config 0 has no interface number 0 [ 216.053347][ T5903] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.062626][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.070842][ T5903] usb 1-1: Product: syz [ 216.075187][ T5903] usb 1-1: Manufacturer: syz [ 216.079965][ T5903] usb 1-1: SerialNumber: syz [ 216.088372][ T5903] usb 1-1: config 0 descriptor?? [ 216.107383][ T5903] smsc95xx v2.0.0 [ 216.529126][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 216.540271][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.958232][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 216.980379][ T5903] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 217.010324][ T5903] usb 1-1: USB disconnect, device number 19 [ 218.380473][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 218.899605][ T5155] Bluetooth: hci0: command 0x0406 tx timeout [ 218.899679][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 218.906654][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 218.912106][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 219.012647][ T9095] geneve0: entered promiscuous mode [ 219.019380][ T9095] geneve0: entered allmulticast mode [ 220.069021][ T9155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.159914][ T5903] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.323097][ T5903] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 220.347942][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.373169][ T5903] usb 4-1: config 0 descriptor?? [ 220.595831][ T5903] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.826002][ T5903] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 220.869999][ T5903] [drm] Initialized udl on minor 2 [ 221.205408][ T5903] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 221.238336][ T5903] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 221.273011][ T5943] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.302567][ T5903] usb 4-1: USB disconnect, device number 12 [ 221.315424][ T5943] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 222.023368][ T9216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1417'. [ 222.055432][ T9216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1417'. [ 222.299955][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 222.299978][ T30] audit: type=1400 audit(1754568774.968:598): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=9225 comm="syz.3.1421" name="address_bits" dev="sysfs" ino=1392 [ 222.465140][ T9233] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 222.850196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 224.220278][ T9276] bridge0: port 3(syz_tun) entered blocking state [ 224.228182][ T9276] bridge0: port 3(syz_tun) entered disabled state [ 224.245195][ T9276] syz_tun: entered allmulticast mode [ 224.256979][ T9276] syz_tun: entered promiscuous mode [ 224.262565][ T5903] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 224.282771][ T9276] bridge0: port 3(syz_tun) entered blocking state [ 224.289379][ T9276] bridge0: port 3(syz_tun) entered forwarding state [ 224.455395][ T5903] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.475601][ T5903] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 224.499062][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.520522][ T5903] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 224.538214][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.554580][ T5903] usb 4-1: config 0 descriptor?? [ 224.562244][ T9272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.839104][ T5928] IPVS: starting estimator thread 0... [ 224.845540][ T9295] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.954386][ T9297] IPVS: using max 27 ests per chain, 64800 per kthread [ 225.014562][ T5903] holtek_mouse 0003:04D9:A067.0013: item fetching failed at offset 7/8 [ 225.046045][ T5903] holtek_mouse 0003:04D9:A067.0013: hid parse failed: -22 [ 225.068103][ T5903] holtek_mouse 0003:04D9:A067.0013: probe with driver holtek_mouse failed with error -22 [ 225.229568][ T5917] usb 4-1: USB disconnect, device number 13 [ 225.661584][ T9332] vlan0: entered allmulticast mode [ 225.666949][ T9332] team0: entered allmulticast mode [ 225.672246][ T9332] team_slave_0: entered allmulticast mode [ 225.690848][ T9332] team_slave_1: entered allmulticast mode [ 225.699149][ T9332] team0: Device vlan0 is already an upper device of the team interface [ 226.139424][ T9356] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.671291][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1489'. [ 226.686162][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1489'. [ 227.096647][ T9398] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1497'. [ 227.155706][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1494'. [ 228.756442][ T30] audit: type=1326 audit(1754568781.428:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9452 comm="syz.3.1521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc63f18ebe9 code=0x0 [ 230.734878][ T9530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1551'. [ 230.979669][ T9539] all (unregistering): Released all slaves [ 231.252502][ T9552] Bluetooth: MGMT ver 1.23 [ 231.538008][ T9565] overlayfs: upper fs does not support tmpfile. [ 232.116804][ T9583] netlink: 520 bytes leftover after parsing attributes in process `syz.0.1574'. [ 232.213549][ T3092] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 232.293584][ T9591] input: syz1 as /devices/virtual/input/input17 [ 232.391906][ T3092] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.415614][ T3092] usb 4-1: config 0 has no interface number 0 [ 232.433811][ T3092] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 232.462151][ T3092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.495373][ T3092] usb 4-1: config 0 descriptor?? [ 232.519180][ T3092] usb 4-1: selecting invalid altsetting 1 [ 232.540542][ T3092] dvb_ttusb_budget: ttusb_init_controller: error [ 232.547041][ T3092] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 232.638354][ T3092] DVB: Unable to find symbol cx22700_attach() [ 232.768063][ T3092] DVB: Unable to find symbol tda10046_attach() [ 232.782295][ T3092] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 232.803034][ T3092] usb 4-1: USB disconnect, device number 14 [ 233.022184][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.049965][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.058999][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.073704][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.093362][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.106369][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.114044][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.134324][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.163470][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.188359][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.199584][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.209413][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.218744][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.226371][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.234699][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.242306][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.250393][ T3092] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 233.267663][ T3092] hid-generic 0002:0004:0009.0014: hidraw0: HID v0.04 Device [syz0] on syz0 [ 233.328001][ T9625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.231950][ T5903] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.413699][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.455582][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.475598][ T5903] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.487297][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.499017][ T5903] usb 4-1: config 0 descriptor?? [ 234.932411][ T5903] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 234.954360][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0015/input/input18 [ 235.115690][ T5903] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 235.165692][ T5903] usb 4-1: USB disconnect, device number 15 [ 235.370285][ T9694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1625'. [ 235.387029][ T9694] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1625'. [ 235.838916][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 235.850477][ T9714] nbd: couldn't find a device at index 65546 [ 236.829944][ T3092] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 236.978860][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 236.989502][ T9759] netlink: 'syz.4.1652': attribute type 18 has an invalid length. [ 236.997790][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 237.006946][ T3092] usb 1-1: Using ep0 maxpacket: 8 [ 237.027066][ T3092] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.055113][ T3092] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 237.084118][ T3092] usb 1-1: config 4 has an invalid descriptor of length 115, skipping remainder of the config [ 237.122269][ T3092] usb 1-1: config 4 has no interface number 0 [ 237.136959][ T3092] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 237.164464][ T3092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.188796][ T3092] usb 1-1: Product: syz [ 237.211536][ T3092] usb 1-1: Manufacturer: syz [ 237.227897][ T3092] usb 1-1: SerialNumber: syz [ 237.486942][ T3092] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 237.529144][ T3092] usb 1-1: No valid video chain found. [ 237.564163][ T3092] usb 1-1: USB disconnect, device number 20 [ 238.010032][ T976] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.180296][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 238.223120][ T976] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 238.253877][ T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.282922][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.293550][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.306767][ T976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.362234][ T976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.389911][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.631179][ T976] usb 3-1: usb_control_msg returned -32 [ 238.647308][ T976] usbtmc 3-1:16.0: can't read capabilities [ 238.840005][ T5917] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 238.954418][ T9839] input: syz0 as /devices/virtual/input/input19 [ 239.033695][ T5917] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 239.050162][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.074698][ T5917] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 239.089976][ T5917] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 239.108422][ T5917] usb 1-1: Manufacturer: syz [ 239.122949][ T5917] usb 1-1: config 0 descriptor?? [ 239.280540][ T5917] rc_core: IR keymap rc-hauppauge not found [ 239.287200][ T5917] Registered IR keymap rc-empty [ 239.305556][ T5917] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 239.325780][ T5917] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 239.355353][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 239.381572][ T5917] usb 1-1: USB disconnect, device number 21 [ 239.540447][ T9859] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.598904][ T9857] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.754630][ T9865] loop9: detected capacity change from 0 to 7 [ 239.764955][ T9865] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 239.777020][ T9865] loop9: partition table partially beyond EOD, truncated [ 239.784638][ T9865] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 240.051313][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1702'. [ 240.060568][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'. [ 240.555523][ T9903] kvm: user requested TSC rate below hardware speed [ 240.712258][ T9909] vivid-000: disconnect [ 240.731257][ T9905] vivid-000: reconnect [ 240.765126][ T3092] usb 3-1: USB disconnect, device number 14 [ 240.956099][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1717'. [ 240.970395][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1717'. [ 241.685975][ T9940] sctp: [Deprecated]: syz.1.1726 (pid 9940) Use of int in max_burst socket option deprecated. [ 241.685975][ T9940] Use struct sctp_assoc_value instead [ 242.358759][ T9960] mmap: syz.1.1733 (9960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.970187][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 242.970696][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 243.296225][ T9988] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 243.315839][ T9988] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 243.917142][T10009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.939678][T10009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.065611][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 244.118071][T10009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.128910][T10009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.301557][T10009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.324067][T10009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.503267][T10009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.514971][T10009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.589680][T10035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1764'. [ 244.602428][T10035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1764'. [ 244.738218][T10009] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.747276][T10009] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.773321][T10009] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.781846][T10009] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.803604][T10009] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.812717][T10009] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.833504][T10009] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.854775][T10009] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.076373][T10051] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 245.232936][T10059] syz.4.1773 (10059): attempted to duplicate a private mapping with mremap. This is not supported. [ 245.853652][T10075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1779'. [ 246.253643][T10083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.260037][ T5943] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 246.460759][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.495095][T10083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.499967][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.550415][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.570619][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.609972][ T5943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.619121][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.660806][ T5943] usb 1-1: config 0 descriptor?? [ 246.683181][T10083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.846415][T10083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.935976][T10103] 9pnet: p9_errstr2errno: server reported unknown error @ [ 246.998060][T10083] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.025696][T10083] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.049484][T10083] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.079350][T10083] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.111665][ T5943] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 247.422841][ T3092] usb 1-1: USB disconnect, device number 22 [ 247.611954][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 248.283037][T10146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.417227][T10146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.527797][T10146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.747721][T10146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.999271][T10146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.098242][T10146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.140998][T10146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.161534][T10146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.436127][ T5928] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 249.480348][ T5903] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 249.601504][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.632946][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.653378][ T5928] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 249.676960][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.687471][ T5903] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.713315][ T5928] usb 4-1: config 0 descriptor?? [ 249.722940][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.757853][ T5903] usb 1-1: config 0 descriptor?? [ 249.789669][ T5903] cp210x 1-1:0.0: cp210x converter detected [ 250.123843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 250.149823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.160006][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 250.225840][ T5903] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 250.388049][ T5928] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -71 [ 250.427247][ T5928] usb 4-1: USB disconnect, device number 16 [ 250.468575][ T5903] usb 1-1: cp210x converter now attached to ttyUSB0 [ 250.622138][T10193] netlink: 'syz.2.1828': attribute type 4 has an invalid length. [ 250.647353][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'. [ 250.667760][ T5903] usb 1-1: USB disconnect, device number 23 [ 250.691205][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.719427][ T5903] cp210x 1-1:0.0: device disconnected [ 252.517525][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 252.553599][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'. [ 252.630188][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1849'. [ 253.598698][ T5928] kernel write not supported for file bpf-prog (pid: 5928 comm: kworker/1:6) [ 255.483468][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.498986][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.510106][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.521710][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.530503][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.731993][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 255.758771][T10330] netlink: 'syz.2.1889': attribute type 7 has an invalid length. [ 255.773425][T10330] netlink: 'syz.2.1889': attribute type 8 has an invalid length. [ 255.783167][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 255.844859][T10317] chnl_net:caif_netlink_parms(): no params data found [ 256.140736][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.158172][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.180326][T10317] bridge_slave_0: entered allmulticast mode [ 256.188374][T10317] bridge_slave_0: entered promiscuous mode [ 256.203818][T10317] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.211640][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.219258][T10317] bridge_slave_1: entered allmulticast mode [ 256.227505][T10317] bridge_slave_1: entered promiscuous mode [ 256.323356][T10317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.351735][T10317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.454528][T10317] team0: Port device team_slave_0 added [ 256.470002][T10317] team0: Port device team_slave_1 added [ 256.554175][T10317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.580097][T10317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.612258][ T976] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 256.633200][T10317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.654726][T10317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.662758][T10317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.699574][T10317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.786106][T10317] hsr_slave_0: entered promiscuous mode [ 256.792673][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 256.802115][T10317] hsr_slave_1: entered promiscuous mode [ 256.810620][T10317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.818441][T10317] Cannot create hsr debugfs directory [ 256.822944][ T976] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 256.844080][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.859943][ T976] usb 1-1: Product: syz [ 256.864170][ T976] usb 1-1: Manufacturer: syz [ 256.868795][ T976] usb 1-1: SerialNumber: syz [ 256.898298][ T976] usb 1-1: config 0 descriptor?? [ 256.907534][ T976] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 257.077072][T10317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.089370][T10317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.102011][T10317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.113776][T10317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.222833][T10317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.286449][T10317] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.307605][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.314927][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.354968][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.362227][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.610890][ T5844] Bluetooth: hci4: command tx timeout [ 257.736590][ T976] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 257.773723][ T976] usb 1-1: USB disconnect, device number 24 [ 257.957757][T10317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.464289][T10414] 9pnet_fd: Insufficient options for proto=fd [ 258.775326][T10317] veth0_vlan: entered promiscuous mode [ 258.807919][T10317] veth1_vlan: entered promiscuous mode [ 258.899907][T10317] veth0_macvtap: entered promiscuous mode [ 258.912342][T10317] veth1_macvtap: entered promiscuous mode [ 258.939604][T10317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.993094][T10317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.037684][T10317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.047796][ T976] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.082329][T10317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.104289][T10317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.118837][T10317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.221998][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 259.273543][ T976] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 259.319283][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.370610][ T976] usb 3-1: Product: syz [ 259.374900][ T976] usb 3-1: Manufacturer: syz [ 259.379533][ T976] usb 3-1: SerialNumber: syz [ 259.436477][ T976] usb 3-1: config 0 descriptor?? [ 259.474901][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.485002][T10446] overlayfs: failed to clone upperpath [ 259.489903][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.510903][T10446] overlayfs: failed to clone upperpath [ 259.634054][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.658707][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.690305][ T5844] Bluetooth: hci4: command tx timeout [ 259.727097][ T976] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 259.816669][ T976] usb 3-1: USB disconnect, device number 15 [ 260.245549][T10466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.434703][ T30] audit: type=1326 audit(1754568814.108:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10505 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 261.526711][ T30] audit: type=1326 audit(1754568814.128:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10505 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 261.770555][ T5844] Bluetooth: hci4: command tx timeout [ 261.820323][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 261.979888][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 261.990889][ T5917] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 262.009899][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.020042][ T5917] usb 6-1: Product: syz [ 262.028246][ T5917] usb 6-1: Manufacturer: syz [ 262.038461][ T5917] usb 6-1: SerialNumber: syz [ 262.054838][ T5917] r8152-cfgselector 6-1: Unknown version 0x0000 [ 262.069867][ T5917] r8152-cfgselector 6-1: config 0 descriptor?? [ 262.262505][ T30] audit: type=1326 audit(1754568814.938:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 262.344687][ T30] audit: type=1326 audit(1754568814.938:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 262.446466][ T30] audit: type=1326 audit(1754568814.938:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 262.522330][ T9] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 262.551118][ T30] audit: type=1326 audit(1754568814.938:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 262.649875][ T30] audit: type=1326 audit(1754568814.938:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.0.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe4d8ebe9 code=0x7ffc0000 [ 262.897448][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.903927][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.068865][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.099973][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.143917][T10545] syz.0.1973 (10545) used greatest stack depth: 19504 bytes left [ 263.206247][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.237378][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.424335][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.479122][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.638498][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.677329][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.851821][ T5844] Bluetooth: hci4: command tx timeout [ 264.138697][ T36] bridge_slave_1: left allmulticast mode [ 264.148557][ T36] bridge_slave_1: left promiscuous mode [ 264.163434][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.198541][ T36] bridge_slave_0: left allmulticast mode [ 264.221927][ T36] bridge_slave_0: left promiscuous mode [ 264.243916][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.766340][T10597] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 264.775251][T10597] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1993'. [ 265.292424][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.317275][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.329864][ T36] bond0 (unregistering): Released all slaves [ 266.239367][ T36] hsr_slave_0: left promiscuous mode [ 266.246147][ T36] hsr_slave_1: left promiscuous mode [ 266.257937][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.270345][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.293988][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.306985][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.416507][ T36] veth1_macvtap: left promiscuous mode [ 266.423065][ T36] veth0_macvtap: left promiscuous mode [ 266.443203][ T36] veth1_vlan: left promiscuous mode [ 266.449269][ T36] veth0_vlan: left promiscuous mode [ 266.713728][ T36] pimreg3 (unregistering): left allmulticast mode [ 267.569545][ T36] team_slave_1 (unregistering): left allmulticast mode [ 267.582039][ T36] team0 (unregistering): Port device team_slave_1 removed [ 267.638959][ T36] team_slave_0 (unregistering): left allmulticast mode [ 267.652123][ T36] team0 (unregistering): Port device team_slave_0 removed [ 269.199968][ T976] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 269.359919][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 269.378031][ T976] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 269.397443][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.428978][ T976] usb 1-1: config 0 descriptor?? [ 269.528132][T10754] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2077'. [ 270.466683][ T976] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 270.487550][ T976] usb 1-1: USB disconnect, device number 25 [ 271.010644][T10814] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2095'. [ 271.165860][T10822] 9pnet: p9_errstr2errno: server reported unknown error @ [ 271.208442][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 271.308196][T10828] binder: 10827:10828 ioctl c0306201 200000000100 returned -14 [ 271.635570][ T976] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 271.775938][T10847] netlink: 520 bytes leftover after parsing attributes in process `syz.2.2111'. [ 271.800020][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 271.807457][ T976] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.840430][ T976] usb 1-1: config 0 has no interface number 0 [ 271.877154][ T976] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.893265][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.906384][T10849] overlayfs: failed to clone upperpath [ 271.910079][ T976] usb 1-1: Product: syz [ 271.916211][ T976] usb 1-1: Manufacturer: syz [ 271.922756][ T976] usb 1-1: SerialNumber: syz [ 271.937767][ T976] usb 1-1: config 0 descriptor?? [ 271.945594][ T976] smsc95xx v2.0.0 [ 272.170000][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.356464][ T5917] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 272.376170][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.397575][ T5917] usb 3-1: Product: syz [ 272.402282][ T5917] usb 3-1: Manufacturer: syz [ 272.407138][ T5917] usb 3-1: SerialNumber: syz [ 272.415539][ T5917] usb 3-1: config 0 descriptor?? [ 272.430471][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 272.726822][T10868] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.847296][T10870] sctp: [Deprecated]: syz.4.2120 (pid 10870) Use of int in max_burst socket option deprecated. [ 272.847296][T10870] Use struct sctp_assoc_value instead [ 272.962988][ T976] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 272.977293][ T976] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 272.987806][ T976] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 272.999061][ T976] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 273.011593][ T976] usb 1-1: USB disconnect, device number 26 [ 273.442895][ T5917] gspca_sunplus: reg_r err -71 [ 273.447943][ T5917] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 273.457787][ T5917] usb 3-1: USB disconnect, device number 16 [ 273.789613][T10889] 9pnet_fd: Insufficient options for proto=fd [ 274.362236][T10918] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 274.362236][T10918] The task syz.4.2141 (10918) triggered the difference, watch for misbehavior. [ 275.436283][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 276.260046][ T5917] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 276.440805][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 276.464922][ T5917] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.492034][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.522937][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.552591][ T5917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.572618][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.592068][ T5917] usb 1-1: Product: syz [ 276.599911][ T5917] usb 1-1: Manufacturer: syz [ 276.604588][ T5917] usb 1-1: SerialNumber: syz [ 276.935953][T11017] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 277.044561][ T5917] usb 1-1: 0:2 : does not exist [ 277.447497][T11033] all (unregistering): Released all slaves [ 277.752294][ T5917] usb 1-1: USB disconnect, device number 27 [ 277.841631][T11049] 9pnet_fd: Insufficient options for proto=fd [ 278.674346][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.872399][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.100318][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.306215][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.460120][ T5917] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 279.592766][ T13] bridge_slave_1: left allmulticast mode [ 279.604389][ T13] bridge_slave_1: left promiscuous mode [ 279.614888][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.631619][ T13] bridge_slave_0: left allmulticast mode [ 279.638571][ T13] bridge_slave_0: left promiscuous mode [ 279.644797][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 279.659033][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.683238][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.686632][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.704916][ T5917] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 279.706092][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.712995][ T5917] usb 3-1: can't read configurations, error -71 [ 279.729855][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.745939][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.754613][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.344831][ T30] audit: type=1326 audit(1754568833.018:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.409885][ T30] audit: type=1326 audit(1754568833.018:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.461603][ T30] audit: type=1326 audit(1754568833.048:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.495866][ T30] audit: type=1326 audit(1754568833.048:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.545076][ T30] audit: type=1326 audit(1754568833.048:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.589947][ T30] audit: type=1326 audit(1754568833.058:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.648555][ T30] audit: type=1326 audit(1754568833.058:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bb78ebe9 code=0x7ffc0000 [ 280.699249][ T30] audit: type=1326 audit(1754568833.058:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6bb785ba7 code=0x7ffc0000 [ 280.742961][ T30] audit: type=1326 audit(1754568833.058:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6bb72add9 code=0x7ffc0000 [ 280.786157][ T30] audit: type=1326 audit(1754568833.058:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11127 comm="syz.2.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6bb785ba7 code=0x7ffc0000 [ 280.943339][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.977354][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.993130][ T13] bond0 (unregistering): Released all slaves [ 281.390494][ T5917] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 281.582079][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 281.588571][T11149] openvswitch: netlink: IP tunnel TTL not specified. [ 281.601321][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.632977][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.651751][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.662247][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.673444][ T5917] usb 3-1: config 0 descriptor?? [ 281.706148][ T5917] hub 3-1:0.0: USB hub found [ 281.770035][ T5844] Bluetooth: hci4: command tx timeout [ 281.889276][ T13] hsr_slave_0: left promiscuous mode [ 281.904682][ T13] hsr_slave_1: left promiscuous mode [ 281.916927][ T5917] hub 3-1:0.0: 1 port detected [ 281.927530][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.943428][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.964815][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.985108][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.064623][ T13] veth1_macvtap: left promiscuous mode [ 282.084110][ T13] veth0_macvtap: left promiscuous mode [ 282.109447][ T13] veth1_vlan: left promiscuous mode [ 282.115088][ T13] veth0_vlan: left promiscuous mode [ 282.873325][ T13] team0 (unregistering): Port device team_slave_1 removed [ 282.923537][ T13] team0 (unregistering): Port device team_slave_0 removed [ 282.973690][ T5917] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 282.981000][ T5917] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 282.998793][ T5917] usbhid 3-1:0.0: can't add hid device: -32 [ 283.005410][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 283.061632][ T5917] usb 3-1: USB disconnect, device number 19 [ 283.718985][T11102] chnl_net:caif_netlink_parms(): no params data found [ 283.756918][T11169] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2251'. [ 283.850301][ T5844] Bluetooth: hci4: command tx timeout [ 284.034581][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 284.046019][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 284.158127][T11188] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.162410][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.198397][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.206229][T11102] bridge_slave_0: entered allmulticast mode [ 284.214220][T11102] bridge_slave_0: entered promiscuous mode [ 284.223259][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.269277][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.293259][T11102] bridge_slave_1: entered allmulticast mode [ 284.335910][T11102] bridge_slave_1: entered promiscuous mode [ 284.525793][T11102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.553643][T11102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.708479][T11102] team0: Port device team_slave_0 added [ 284.720309][T11102] team0: Port device team_slave_1 added [ 284.801470][T11102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.818790][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.850988][ T5943] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.864082][T11102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.905523][T11102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.912660][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.952179][T11102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.014090][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.022405][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.022448][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.022490][ T5943] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 285.022517][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.061694][ T5943] usb 3-1: config 0 descriptor?? [ 285.074246][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.147138][T11102] hsr_slave_0: entered promiscuous mode [ 285.174497][T11102] hsr_slave_1: entered promiscuous mode [ 285.521004][ T5943] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 285.538476][ T5943] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 285.555034][ T5943] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0018/input/input23 [ 285.608253][ T5943] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 285.753281][T11242] netlink: 'syz.1.2287': attribute type 11 has an invalid length. [ 285.796555][ T5917] usb 3-1: USB disconnect, device number 20 [ 285.853088][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2289'. [ 285.941186][ T5844] Bluetooth: hci4: command tx timeout [ 285.945195][T11102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.977575][T11102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.042247][T11102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.072808][T11102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.350813][T11102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.419025][T11266] kvm: kvm [11265]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 286.422021][T11102] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.432536][ T5917] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 286.462088][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.469365][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.499730][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.508165][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.601947][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.640820][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.671460][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.695727][ T5917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.708669][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.749024][ T5917] usb 1-1: config 0 descriptor?? [ 287.007700][T11102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.182377][ T5917] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 287.223327][ T5917] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 287.453663][ T5917] usb 1-1: USB disconnect, device number 28 [ 287.601220][T11102] veth0_vlan: entered promiscuous mode [ 287.632321][T11102] veth1_vlan: entered promiscuous mode [ 287.754072][T11102] veth0_macvtap: entered promiscuous mode [ 287.794559][T11102] veth1_macvtap: entered promiscuous mode [ 287.855892][T11102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.918657][T11102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.959479][T11102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.007213][T11102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.016397][ T5844] Bluetooth: hci4: command tx timeout [ 288.039838][T11102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.070763][T11102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.318021][T11317] overlayfs: failed to clone lowerpath [ 288.557242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.604462][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.770541][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.795855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.830355][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 290.847650][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 291.010269][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 291.211870][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.219918][T11427] 9pnet: p9_errstr2errno: server reported unknown error @΂(0x0000000000000003 [ 291.232712][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.252003][ T43] usb 7-1: config 1 has no interface number 0 [ 291.268587][ T43] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.297967][ T43] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 291.339343][ T43] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.375971][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.389911][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.404739][ T43] usb 7-1: Product: syz [ 291.408974][ T43] usb 7-1: Manufacturer: syz [ 291.413968][ T43] usb 7-1: SerialNumber: syz [ 291.610001][ T3092] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 291.770148][ T3092] usb 3-1: Using ep0 maxpacket: 8 [ 291.784888][ T3092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.800319][ T3092] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 291.814409][ T5924] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 291.822270][ T3092] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 291.845583][ T3092] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.857223][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.866502][ T3092] usb 3-1: Product: syz [ 291.870827][ T3092] usb 3-1: Manufacturer: syz [ 291.875632][ T3092] usb 3-1: SerialNumber: syz [ 291.993981][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.010310][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.024215][ T5924] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.033693][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.046784][ T5924] usb 1-1: SerialNumber: syz [ 292.249198][ T43] cdc_ncm 7-1:1.1: bind() failure [ 292.326162][ T5924] usb 1-1: 0:2 : does not exist [ 292.382185][ T5924] usb 1-1: USB disconnect, device number 29 [ 292.465509][ T43] usb 7-1: USB disconnect, device number 2 [ 292.909646][ T3092] cdc_ncm 3-1:1.0: bind() failure [ 292.944025][ T3092] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 292.965118][ T3092] usb 3-1: USB disconnect, device number 21 [ 293.580016][ T5903] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 293.686163][T11516] 9pnet_fd: Insufficient options for proto=fd [ 293.720302][T11514] syz.1.2394 (11514) used greatest stack depth: 16344 bytes left [ 293.752333][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.779853][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.801451][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.831608][ T5903] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.842966][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.857785][ T5903] usb 1-1: config 0 descriptor?? [ 294.278363][ T5903] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 294.320085][ T3092] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 294.482292][ T3092] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.491190][ T3092] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.503704][ T3092] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.512811][ T3092] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.523871][ T3092] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.537867][ T43] usb 1-1: USB disconnect, device number 30 [ 294.550902][ T3092] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.561524][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.570531][ T3092] usb 3-1: Product: syz [ 294.584413][ T3092] usb 3-1: Manufacturer: syz [ 294.597534][ T3092] cdc_wdm 3-1:1.0: skipping garbage [ 294.606790][ T3092] cdc_wdm 3-1:1.0: skipping garbage [ 294.617732][ T3092] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 294.635484][ T3092] cdc_wdm 3-1:1.0: Unknown control protocol [ 294.795624][T11545] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2408'. [ 294.845290][ T3092] usb 3-1: USB disconnect, device number 22 [ 295.165008][T11561] pimreg: entered allmulticast mode [ 295.197700][T11561] pimreg: left allmulticast mode [ 295.385781][T11574] overlay: filesystem on ./bus not supported as upperdir [ 295.919727][T11604] syzkaller1: entered promiscuous mode [ 295.927232][T11604] syzkaller1: entered allmulticast mode [ 297.214695][T11646] batadv_slave_1: entered promiscuous mode [ 297.223965][T11644] batadv_slave_1: left promiscuous mode [ 298.379373][T11682] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 298.413908][T11682] netlink: 'syz.2.2468': attribute type 2 has an invalid length. [ 298.451375][T11682] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 298.480018][T11682] netlink: 'syz.2.2468': attribute type 2 has an invalid length. [ 298.553112][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 298.553138][ T30] audit: type=1800 audit(1754568851.228:806): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2471" name="nullb0" dev="devtmpfs" ino=2980 res=0 errno=0 [ 298.947204][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 300.058727][T11729] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2489'. [ 300.208768][ T43] kernel write not supported for file /ppp (pid: 43 comm: kworker/1:1) [ 301.421381][T11789] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.2513'. [ 301.653323][ T5903] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 301.749702][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2521'. [ 301.841995][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 301.859129][T11810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2524'. [ 301.877617][ T5903] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 301.917500][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.963126][ T5903] usb 1-1: config 0 descriptor?? [ 301.986091][ T5903] gspca_main: sq930x-2.14.0 probing 041e:403c [ 303.006077][ T5903] gspca_sq930x: ucbus_write failed -71 [ 303.019342][ T5903] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 303.043454][ T5903] usb 1-1: USB disconnect, device number 31 [ 303.338494][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'. [ 303.351085][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'. [ 303.369922][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 303.556736][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 303.616374][T11890] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 303.622466][T11867] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2549'. [ 303.663503][T11890] dummy0: entered promiscuous mode [ 303.677159][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 303.693069][T11890] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.696984][ T43] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 303.735428][ T43] usb 7-1: can't read configurations, error -71 [ 304.083889][T11902] [ 304.086309][T11902] ===================================================== [ 304.093274][T11902] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 304.100895][T11902] 6.16.0-syzkaller #0 Not tainted [ 304.105971][T11902] ----------------------------------------------------- [ 304.112926][T11902] syz.1.2565/11902 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 304.120690][T11902] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 304.129461][T11902] [ 304.129461][T11902] and this task is already holding: [ 304.136866][T11902] ffff8880766aa720 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 304.145602][T11902] which would create a new lock dependency: [ 304.151496][T11902] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 304.159110][T11902] [ 304.159110][T11902] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 304.168603][T11902] (&dev->event_lock#2){..-.}-{3:3} [ 304.168642][T11902] [ 304.168642][T11902] ... which became SOFTIRQ-irq-safe at: [ 304.181553][T11902] lock_acquire+0x120/0x360 [ 304.186174][T11902] _raw_spin_lock_irqsave+0xa7/0xf0 [ 304.191489][T11902] input_event+0x7a/0xc0 [ 304.195839][T11902] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 304.201595][T11902] __usb_hcd_giveback_urb+0x417/0x690 [ 304.207100][T11902] dummy_timer+0x862/0x4550 [ 304.211719][T11902] __hrtimer_run_queues+0x52c/0xc60 [ 304.217035][T11902] hrtimer_run_softirq+0x187/0x2b0 [ 304.222254][T11902] handle_softirqs+0x283/0x870 [ 304.227128][T11902] __irq_exit_rcu+0xca/0x1f0 [ 304.231817][T11902] irq_exit_rcu+0x9/0x30 [ 304.236162][T11902] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 304.241935][T11902] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.248024][T11902] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 304.253852][T11902] dummy_urb_enqueue+0x58a/0x780 [ 304.258896][T11902] usb_hcd_submit_urb+0x322/0x1aa0 [ 304.264112][T11902] atp_open+0x63/0xc0 [ 304.268194][T11902] input_open_device+0x1c5/0x360 [ 304.273243][T11902] mousedev_open_device+0xcc/0x150 [ 304.278458][T11902] mousedev_open+0x2ef/0x4a0 [ 304.283152][T11902] chrdev_open+0x4c9/0x5e0 [ 304.287682][T11902] do_dentry_open+0xdf0/0x1970 [ 304.292549][T11902] vfs_open+0x3b/0x340 [ 304.296722][T11902] path_openat+0x2ee5/0x3830 [ 304.301424][T11902] do_filp_open+0x1fa/0x410 [ 304.306040][T11902] do_sys_openat2+0x121/0x1c0 [ 304.310821][T11902] __x64_sys_openat+0x138/0x170 [ 304.315780][T11902] do_syscall_64+0xfa/0x3b0 [ 304.320389][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.326384][T11902] [ 304.326384][T11902] to a SOFTIRQ-irq-unsafe lock: [ 304.333419][T11902] (tasklist_lock){.+.+}-{3:3} [ 304.333451][T11902] [ 304.333451][T11902] ... which became SOFTIRQ-irq-unsafe at: [ 304.346097][T11902] ... [ 304.346107][T11902] lock_acquire+0x120/0x360 [ 304.353294][T11902] _raw_read_lock+0x36/0x50 [ 304.357897][T11902] __do_wait+0xde/0x740 [ 304.362161][T11902] do_wait+0x1f8/0x520 [ 304.366330][T11902] kernel_wait+0xab/0x170 [ 304.370773][T11902] call_usermodehelper_exec_work+0xbe/0x230 [ 304.376766][T11902] process_scheduled_works+0xade/0x17b0 [ 304.382409][T11902] worker_thread+0x8a0/0xda0 [ 304.387095][T11902] kthread+0x70e/0x8a0 [ 304.391267][T11902] ret_from_fork+0x3fc/0x770 [ 304.396038][T11902] ret_from_fork_asm+0x1a/0x30 [ 304.400911][T11902] [ 304.400911][T11902] other info that might help us debug this: [ 304.400911][T11902] [ 304.411157][T11902] Chain exists of: [ 304.411157][T11902] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 304.411157][T11902] [ 304.424254][T11902] Possible interrupt unsafe locking scenario: [ 304.424254][T11902] [ 304.432594][T11902] CPU0 CPU1 [ 304.437977][T11902] ---- ---- [ 304.443350][T11902] lock(tasklist_lock); [ 304.447614][T11902] local_irq_disable(); [ 304.454374][T11902] lock(&dev->event_lock#2); [ 304.461589][T11902] lock(&f_owner->lock); [ 304.468452][T11902] [ 304.471957][T11902] lock(&dev->event_lock#2); [ 304.476859][T11902] [ 304.476859][T11902] *** DEADLOCK *** [ 304.476859][T11902] [ 304.485034][T11902] 2 locks held by syz.1.2565/11902: [ 304.490247][T11902] #0: ffff88802f8d0f00 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x187/0x5a0 [ 304.498851][T11902] #1: ffff8880766aa720 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 304.508045][T11902] [ 304.508045][T11902] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 304.518463][T11902] -> (&dev->event_lock#2){..-.}-{3:3} { [ 304.524253][T11902] IN-SOFTIRQ-W at: [ 304.528466][T11902] lock_acquire+0x120/0x360 [ 304.535048][T11902] _raw_spin_lock_irqsave+0xa7/0xf0 [ 304.542274][T11902] input_event+0x7a/0xc0 [ 304.548531][T11902] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 304.556208][T11902] __usb_hcd_giveback_urb+0x417/0x690 [ 304.563616][T11902] dummy_timer+0x862/0x4550 [ 304.570158][T11902] __hrtimer_run_queues+0x52c/0xc60 [ 304.577368][T11902] hrtimer_run_softirq+0x187/0x2b0 [ 304.584489][T11902] handle_softirqs+0x283/0x870 [ 304.591258][T11902] __irq_exit_rcu+0xca/0x1f0 [ 304.597855][T11902] irq_exit_rcu+0x9/0x30 [ 304.604132][T11902] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 304.611785][T11902] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.619774][T11902] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 304.627533][T11902] dummy_urb_enqueue+0x58a/0x780 [ 304.634486][T11902] usb_hcd_submit_urb+0x322/0x1aa0 [ 304.641620][T11902] atp_open+0x63/0xc0 [ 304.647610][T11902] input_open_device+0x1c5/0x360 [ 304.654556][T11902] mousedev_open_device+0xcc/0x150 [ 304.661678][T11902] mousedev_open+0x2ef/0x4a0 [ 304.668392][T11902] chrdev_open+0x4c9/0x5e0 [ 304.674834][T11902] do_dentry_open+0xdf0/0x1970 [ 304.681617][T11902] vfs_open+0x3b/0x340 [ 304.687710][T11902] path_openat+0x2ee5/0x3830 [ 304.694333][T11902] do_filp_open+0x1fa/0x410 [ 304.700874][T11902] do_sys_openat2+0x121/0x1c0 [ 304.707567][T11902] __x64_sys_openat+0x138/0x170 [ 304.714443][T11902] do_syscall_64+0xfa/0x3b0 [ 304.720968][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.728888][T11902] INITIAL USE at: [ 304.733006][T11902] lock_acquire+0x120/0x360 [ 304.739451][T11902] _raw_spin_lock_irqsave+0xa7/0xf0 [ 304.746615][T11902] input_inject_event+0xab/0x320 [ 304.753488][T11902] kbd_led_trigger_activate+0xbc/0x100 [ 304.760872][T11902] led_trigger_set+0x52d/0x950 [ 304.767567][T11902] led_trigger_set_default+0x260/0x2a0 [ 304.774962][T11902] led_classdev_register_ext+0x73d/0x930 [ 304.783304][T11902] input_leds_connect+0x517/0x790 [ 304.790256][T11902] input_register_device+0xceb/0x10b0 [ 304.797574][T11902] atkbd_connect+0x70e/0x9c0 [ 304.804133][T11902] serio_driver_probe+0x82/0xa0 [ 304.810920][T11902] really_probe+0x26a/0x9a0 [ 304.817355][T11902] __driver_probe_device+0x18c/0x2f0 [ 304.824571][T11902] driver_probe_device+0x4f/0x430 [ 304.831511][T11902] __driver_attach+0x452/0x700 [ 304.838208][T11902] bus_for_each_dev+0x230/0x2b0 [ 304.845001][T11902] serio_handle_event+0x1a2/0x860 [ 304.851977][T11902] process_scheduled_works+0xade/0x17b0 [ 304.859459][T11902] worker_thread+0x8a0/0xda0 [ 304.866005][T11902] kthread+0x70e/0x8a0 [ 304.872003][T11902] ret_from_fork+0x3fc/0x770 [ 304.878512][T11902] ret_from_fork_asm+0x1a/0x30 [ 304.885207][T11902] } [ 304.888667][T11902] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 304.897895][T11902] -> (&new->fa_lock){....}-{3:3} { [ 304.903146][T11902] INITIAL USE at: [ 304.907147][T11902] lock_acquire+0x120/0x360 [ 304.913422][T11902] _raw_write_lock_irq+0xa2/0xf0 [ 304.920135][T11902] fasync_insert_entry+0xc3/0x270 [ 304.926941][T11902] lease_setup+0x86/0x110 [ 304.933051][T11902] generic_setlease+0xd5d/0x1240 [ 304.939748][T11902] fcntl_setlease+0x3a2/0x4c0 [ 304.946187][T11902] do_fcntl+0x6a9/0x1910 [ 304.952186][T11902] __se_sys_fcntl+0xc8/0x150 [ 304.958551][T11902] do_syscall_64+0xfa/0x3b0 [ 304.964828][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.972495][T11902] INITIAL READ USE at: [ 304.976950][T11902] lock_acquire+0x120/0x360 [ 304.983644][T11902] _raw_read_lock_irqsave+0xaf/0x100 [ 304.991127][T11902] kill_fasync+0x199/0x4d0 [ 304.997822][T11902] lease_break_callback+0x26/0x30 [ 305.005046][T11902] __break_lease+0x6a5/0x1620 [ 305.011926][T11902] do_dentry_open+0xd62/0x1970 [ 305.018900][T11902] vfs_open+0x3b/0x340 [ 305.025230][T11902] path_openat+0x2ee5/0x3830 [ 305.032059][T11902] do_filp_open+0x1fa/0x410 [ 305.038761][T11902] do_sys_openat2+0x121/0x1c0 [ 305.045667][T11902] __x64_sys_openat+0x138/0x170 [ 305.052728][T11902] do_syscall_64+0xfa/0x3b0 [ 305.059425][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.067506][T11902] } [ 305.070099][T11902] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 305.078886][T11902] ... acquired at: [ 305.082778][T11902] lock_acquire+0x120/0x360 [ 305.087464][T11902] _raw_read_lock_irqsave+0xaf/0x100 [ 305.092931][T11902] kill_fasync+0x199/0x4d0 [ 305.097548][T11902] mousedev_notify_readers+0x6f1/0xc00 [ 305.103200][T11902] mousedev_event+0x602/0x1320 [ 305.108151][T11902] input_handle_events_default+0xd4/0x1a0 [ 305.114056][T11902] input_pass_values+0x285/0x890 [ 305.119186][T11902] input_event_dispose+0x330/0x6b0 [ 305.124486][T11902] input_inject_event+0x1fe/0x320 [ 305.129699][T11902] evdev_write+0x2fc/0x480 [ 305.134301][T11902] vfs_write+0x27e/0xa90 [ 305.138725][T11902] ksys_write+0x145/0x250 [ 305.143247][T11902] do_syscall_64+0xfa/0x3b0 [ 305.147940][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.154014][T11902] [ 305.156347][T11902] -> (&f_owner->lock){....}-{3:3} { [ 305.161580][T11902] INITIAL USE at: [ 305.165476][T11902] lock_acquire+0x120/0x360 [ 305.171547][T11902] _raw_write_lock_irq+0xa2/0xf0 [ 305.178055][T11902] __f_setown+0x67/0x370 [ 305.183874][T11902] generic_setlease+0xd5d/0x1240 [ 305.190407][T11902] fcntl_setlease+0x3a2/0x4c0 [ 305.196664][T11902] do_fcntl+0x6a9/0x1910 [ 305.202488][T11902] __se_sys_fcntl+0xc8/0x150 [ 305.208655][T11902] do_syscall_64+0xfa/0x3b0 [ 305.214740][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.222226][T11902] INITIAL READ USE at: [ 305.226567][T11902] lock_acquire+0x120/0x360 [ 305.233081][T11902] _raw_read_lock_irqsave+0xaf/0x100 [ 305.240496][T11902] send_sigio+0x38/0x370 [ 305.246867][T11902] kill_fasync+0x24d/0x4d0 [ 305.253307][T11902] lease_break_callback+0x26/0x30 [ 305.260369][T11902] __break_lease+0x6a5/0x1620 [ 305.267056][T11902] do_dentry_open+0xd62/0x1970 [ 305.273841][T11902] vfs_open+0x3b/0x340 [ 305.279938][T11902] path_openat+0x2ee5/0x3830 [ 305.286542][T11902] do_filp_open+0x1fa/0x410 [ 305.293062][T11902] do_sys_openat2+0x121/0x1c0 [ 305.299753][T11902] __x64_sys_openat+0x138/0x170 [ 305.306637][T11902] do_syscall_64+0xfa/0x3b0 [ 305.313171][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.321088][T11902] } [ 305.323625][T11902] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 305.332508][T11902] ... acquired at: [ 305.336327][T11902] lock_acquire+0x120/0x360 [ 305.341024][T11902] _raw_read_lock_irqsave+0xaf/0x100 [ 305.346500][T11902] send_sigio+0x38/0x370 [ 305.350934][T11902] kill_fasync+0x24d/0x4d0 [ 305.355537][T11902] lease_break_callback+0x26/0x30 [ 305.360757][T11902] __break_lease+0x6a5/0x1620 [ 305.365623][T11902] do_dentry_open+0xd62/0x1970 [ 305.370581][T11902] vfs_open+0x3b/0x340 [ 305.374837][T11902] path_openat+0x2ee5/0x3830 [ 305.379618][T11902] do_filp_open+0x1fa/0x410 [ 305.384310][T11902] do_sys_openat2+0x121/0x1c0 [ 305.389191][T11902] __x64_sys_openat+0x138/0x170 [ 305.394228][T11902] do_syscall_64+0xfa/0x3b0 [ 305.398941][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.405039][T11902] [ 305.407370][T11902] [ 305.407370][T11902] the dependencies between the lock to be acquired [ 305.407381][T11902] and SOFTIRQ-irq-unsafe lock: [ 305.420922][T11902] -> (tasklist_lock){.+.+}-{3:3} { [ 305.426076][T11902] HARDIRQ-ON-R at: [ 305.430072][T11902] lock_acquire+0x120/0x360 [ 305.436272][T11902] _raw_read_lock+0x36/0x50 [ 305.442449][T11902] __do_wait+0xde/0x740 [ 305.448282][T11902] do_wait+0x1f8/0x520 [ 305.454037][T11902] kernel_wait+0xab/0x170 [ 305.460039][T11902] call_usermodehelper_exec_work+0xbe/0x230 [ 305.467599][T11902] process_scheduled_works+0xade/0x17b0 [ 305.474814][T11902] worker_thread+0x8a0/0xda0 [ 305.481078][T11902] kthread+0x70e/0x8a0 [ 305.486836][T11902] ret_from_fork+0x3fc/0x770 [ 305.493108][T11902] ret_from_fork_asm+0x1a/0x30 [ 305.499561][T11902] SOFTIRQ-ON-R at: [ 305.503583][T11902] lock_acquire+0x120/0x360 [ 305.509746][T11902] _raw_read_lock+0x36/0x50 [ 305.515922][T11902] __do_wait+0xde/0x740 [ 305.521749][T11902] do_wait+0x1f8/0x520 [ 305.527484][T11902] kernel_wait+0xab/0x170 [ 305.533493][T11902] call_usermodehelper_exec_work+0xbe/0x230 [ 305.541055][T11902] process_scheduled_works+0xade/0x17b0 [ 305.548278][T11902] worker_thread+0x8a0/0xda0 [ 305.554532][T11902] kthread+0x70e/0x8a0 [ 305.560272][T11902] ret_from_fork+0x3fc/0x770 [ 305.566527][T11902] ret_from_fork_asm+0x1a/0x30 [ 305.572965][T11902] INITIAL USE at: [ 305.576885][T11902] lock_acquire+0x120/0x360 [ 305.582968][T11902] _raw_write_lock_irq+0xa2/0xf0 [ 305.589472][T11902] copy_process+0x21d5/0x3b80 [ 305.595725][T11902] kernel_clone+0x224/0x7f0 [ 305.601806][T11902] user_mode_thread+0xdd/0x140 [ 305.608141][T11902] rest_init+0x23/0x300 [ 305.613877][T11902] start_kernel+0x47d/0x500 [ 305.619978][T11902] x86_64_start_reservations+0x24/0x30 [ 305.627018][T11902] x86_64_start_kernel+0x143/0x1c0 [ 305.633722][T11902] common_startup_64+0x13e/0x147 [ 305.640247][T11902] INITIAL READ USE at: [ 305.644600][T11902] lock_acquire+0x120/0x360 [ 305.651116][T11902] _raw_read_lock+0x36/0x50 [ 305.657656][T11902] __do_wait+0xde/0x740 [ 305.663844][T11902] do_wait+0x1f8/0x520 [ 305.669944][T11902] kernel_wait+0xab/0x170 [ 305.676297][T11902] call_usermodehelper_exec_work+0xbe/0x230 [ 305.684215][T11902] process_scheduled_works+0xade/0x17b0 [ 305.691770][T11902] worker_thread+0x8a0/0xda0 [ 305.698368][T11902] kthread+0x70e/0x8a0 [ 305.704460][T11902] ret_from_fork+0x3fc/0x770 [ 305.711062][T11902] ret_from_fork_asm+0x1a/0x30 [ 305.718013][T11902] } [ 305.720517][T11902] ... key at: [] tasklist_lock+0x18/0x40 [ 305.728341][T11902] ... acquired at: [ 305.732149][T11902] lock_acquire+0x120/0x360 [ 305.736839][T11902] _raw_read_lock+0x36/0x50 [ 305.741535][T11902] send_sigurg+0x12b/0x420 [ 305.746142][T11902] sk_send_sigurg+0x6c/0x2e0 [ 305.750925][T11902] queue_oob+0x490/0x5a0 [ 305.755369][T11902] unix_stream_sendmsg+0xaf9/0xc90 [ 305.760669][T11902] __sock_sendmsg+0x21c/0x270 [ 305.765540][T11902] ____sys_sendmsg+0x52d/0x830 [ 305.770502][T11902] ___sys_sendmsg+0x21f/0x2a0 [ 305.775365][T11902] __sys_sendmmsg+0x227/0x430 [ 305.780236][T11902] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.785277][T11902] do_syscall_64+0xfa/0x3b0 [ 305.789965][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.796128][T11902] [ 305.798463][T11902] [ 305.798463][T11902] stack backtrace: [ 305.804384][T11902] CPU: 0 UID: 0 PID: 11902 Comm: syz.1.2565 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 305.804407][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.804428][T11902] Call Trace: [ 305.804448][T11902] [ 305.804461][T11902] dump_stack_lvl+0x189/0x250 [ 305.804489][T11902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.804513][T11902] ? __pfx__printk+0x10/0x10 [ 305.804540][T11902] validate_chain+0x1f05/0x2140 [ 305.804579][T11902] __lock_acquire+0xab9/0xd20 [ 305.804598][T11902] ? send_sigurg+0x12b/0x420 [ 305.804623][T11902] lock_acquire+0x120/0x360 [ 305.804638][T11902] ? send_sigurg+0x12b/0x420 [ 305.804661][T11902] ? _raw_read_lock_irqsave+0xbb/0x100 [ 305.804683][T11902] _raw_read_lock+0x36/0x50 [ 305.804698][T11902] ? send_sigurg+0x12b/0x420 [ 305.804719][T11902] send_sigurg+0x12b/0x420 [ 305.804745][T11902] sk_send_sigurg+0x6c/0x2e0 [ 305.804767][T11902] queue_oob+0x490/0x5a0 [ 305.804795][T11902] ? finish_task_switch+0x18b/0x950 [ 305.804824][T11902] ? __pfx_queue_oob+0x10/0x10 [ 305.804849][T11902] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 305.804885][T11902] unix_stream_sendmsg+0xaf9/0xc90 [ 305.804912][T11902] ? __schedule+0x16c8/0x4c90 [ 305.804931][T11902] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 305.804960][T11902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.804979][T11902] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 305.805003][T11902] __sock_sendmsg+0x21c/0x270 [ 305.805025][T11902] ____sys_sendmsg+0x52d/0x830 [ 305.805054][T11902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.805085][T11902] ? import_iovec+0x74/0xa0 [ 305.805112][T11902] ___sys_sendmsg+0x21f/0x2a0 [ 305.805140][T11902] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.805181][T11902] ? __fget_files+0x2a/0x420 [ 305.805201][T11902] ? __fget_files+0x3a0/0x420 [ 305.805224][T11902] __sys_sendmmsg+0x227/0x430 [ 305.805253][T11902] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.805278][T11902] ? do_futex+0x333/0x420 [ 305.805315][T11902] ? rcu_is_watching+0x15/0xb0 [ 305.805337][T11902] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.805365][T11902] do_syscall_64+0xfa/0x3b0 [ 305.805384][T11902] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.805402][T11902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.805418][T11902] ? clear_bhb_loop+0x60/0xb0 [ 305.805438][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.805456][T11902] RIP: 0033:0x7f2c9778ebe9 [ 305.805483][T11902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.805500][T11902] RSP: 002b:00007f2c985c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.805523][T11902] RAX: ffffffffffffffda RBX: 00007f2c979b5fa0 RCX: 00007f2c9778ebe9 [ 305.805536][T11902] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 305.805547][T11902] RBP: 00007f2c97811e19 R08: 0000000000000000 R09: 0000000000000000 [ 305.805558][T11902] R10: 0000000020040001 R11: 0000000000000246 R12: 0000000000000000 [ 305.805568][T11902] R13: 00007f2c979b6038 R14: 00007f2c979b5fa0 R15: 00007ffc004a3308 [ 305.805588][T11902] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.686498][ T7551] bridge0: port 3(syz_tun) entered disabled state [ 306.806029][ T7551] syz_tun (unregistering): left allmulticast mode [ 306.819860][ T7551] syz_tun (unregistering): left promiscuous mode [ 306.826341][ T7551] bridge0: port 3(syz_tun) entered disabled state [ 306.898543][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.948919][ T8261] bridge0: port 3(syz_tun) entered disabled state [ 306.971771][ T8261] syz_tun (unregistering): left allmulticast mode [ 306.978277][ T8261] syz_tun (unregistering): left promiscuous mode [ 306.992729][ T8261] bridge0: port 3(syz_tun) entered disabled state [ 307.021799][ T8484] bridge0: port 3(syz_tun) entered disabled state [ 307.043809][ T8484] syz_tun (unregistering): left allmulticast mode [ 307.051221][ T8484] syz_tun (unregistering): left promiscuous mode [ 307.057604][ T8484] bridge0: port 3(syz_tun) entered disabled state [ 307.103954][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.240658][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.317035][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.372128][ T36] bridge_slave_1: left allmulticast mode [ 307.377915][ T36] bridge_slave_1: left promiscuous mode [ 307.383817][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.392777][ T36] bridge_slave_0: left allmulticast mode [ 307.398472][ T36] bridge_slave_0: left promiscuous mode [ 307.404393][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.509088][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.519681][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.530273][ T36] bond0 (unregistering): Released all slaves [ 307.746675][ T36] hsr_slave_0: left promiscuous mode [ 307.753454][ T36] hsr_slave_1: left promiscuous mode [ 307.759154][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.766631][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.774304][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.782003][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.794623][ T36] veth1_macvtap: left promiscuous mode [ 307.801196][ T36] veth0_macvtap: left promiscuous mode [ 307.806751][ T36] veth1_vlan: left promiscuous mode [ 307.812138][ T36] veth0_vlan: left promiscuous mode [ 307.971250][ T36] team0 (unregistering): Port device team_slave_1 removed [ 308.001913][ T36] team0 (unregistering): Port device team_slave_0 removed [ 308.375470][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.414166][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.473309][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.515018][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.591315][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.662713][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.722707][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.763218][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.832257][ T36] bridge_slave_1: left allmulticast mode [ 308.837983][ T36] bridge_slave_1: left promiscuous mode [ 308.843859][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.852761][ T36] bridge_slave_0: left allmulticast mode [ 308.858433][ T36] bridge_slave_0: left promiscuous mode [ 308.864296][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.873474][ T36] bridge_slave_1: left allmulticast mode [ 308.879123][ T36] bridge_slave_1: left promiscuous mode [ 308.884920][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.893944][ T36] bridge_slave_0: left allmulticast mode [ 308.899599][ T36] bridge_slave_0: left promiscuous mode [ 308.905436][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.028785][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.039711][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.049338][ T36] bond0 (unregistering): Released all slaves [ 309.087463][ T36] gretap0 (unregistering): left promiscuous mode [ 309.217605][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.230879][ T36] bond_slave_0: left promiscuous mode [ 309.237710][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.246706][ T36] bond_slave_1: left promiscuous mode [ 309.255725][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 309.264389][ T36] dummy0: left promiscuous mode [ 309.270460][ T36] bond0 (unregistering): Released all slaves [ 309.586847][ T36] hsr_slave_0: left promiscuous mode [ 309.592819][ T36] hsr_slave_1: left promiscuous mode [ 309.598562][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.606167][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.616420][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.623990][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.631901][ T36] batadv_slave_1: left promiscuous mode [ 309.638953][ T36] hsr_slave_0: left promiscuous mode [ 309.644799][ T36] hsr_slave_1: left promiscuous mode [ 309.650614][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.658039][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.665756][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.673217][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.685434][ T36] veth1_macvtap: left promiscuous mode [ 309.691107][ T36] veth0_macvtap: left promiscuous mode [ 309.696661][ T36] veth1_vlan: left promiscuous mode [ 309.702006][ T36] veth0_vlan: left promiscuous mode [ 309.708109][ T36] veth1_macvtap: left promiscuous mode [ 309.713670][ T36] veth0_macvtap: left promiscuous mode [ 309.904545][ T36] team0 (unregistering): Port device team_slave_1 removed [ 309.930349][ T36] team0 (unregistering): Port device team_slave_0 removed [ 310.119478][ T36] team0 (unregistering): Port device team_slave_1 removed [ 310.151599][ T36] team0 (unregistering): Port device team_slave_0 removed [ 310.645754][ T36] IPVS: stop unused estimator thread 0...