last executing test programs: 2m9.174681513s ago: executing program 4 (id=9170): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80001001, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m9.049017159s ago: executing program 4 (id=9172): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2m8.938616319s ago: executing program 4 (id=9173): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x2) 2m8.566780077s ago: executing program 4 (id=9176): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m7.536144271s ago: executing program 4 (id=9184): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x418a, 0x35) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x2, 0x4) sendmmsg(r0, &(0x7f000000bb00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x45833af92e4a39fd, 0x0) 2m7.215180018s ago: executing program 4 (id=9189): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806032465580600000401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2m6.737261878s ago: executing program 32 (id=9189): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806032465580600000401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 30.078184749s ago: executing program 3 (id=10145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) close(0x4) 29.841051858s ago: executing program 3 (id=10147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x4}]}}}}}}}, 0x0) 29.732576691s ago: executing program 3 (id=10148): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x8) 29.547080179s ago: executing program 3 (id=10149): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 28.608820645s ago: executing program 3 (id=10161): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x200002, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x621}], 0x20}) 28.258598016s ago: executing program 3 (id=10163): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 27.98055686s ago: executing program 33 (id=10163): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 6.448644304s ago: executing program 2 (id=10343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) 6.183530202s ago: executing program 2 (id=10345): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0x200, 0x3, 0x3, 0x27, 0x7fff}) 4.821799744s ago: executing program 0 (id=10359): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 3.353171752s ago: executing program 2 (id=10376): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) writev(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)="b647", 0x2}], 0x2) syz_usb_disconnect(r0) 3.269664845s ago: executing program 5 (id=10378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000580001c0"]) 2.975959239s ago: executing program 5 (id=10381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 2.917313818s ago: executing program 1 (id=10382): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x9, 0x201, 0x1, 0x8001, 0xfffffffb, 0x5e, 0x10001, r2}, &(0x7f0000000040)=0x20) 2.906343608s ago: executing program 5 (id=10383): unshare(0x2040400) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsmount(r0, 0x0, 0x0) 2.751480908s ago: executing program 5 (id=10385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.691749989s ago: executing program 1 (id=10386): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/239, 0xef}, 0x2}], 0xa, 0x10162, 0x0) 2.642578671s ago: executing program 1 (id=10387): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4622}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 2.490952496s ago: executing program 1 (id=10389): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, &(0x7f0000000800)) 2.095730391s ago: executing program 6 (id=10391): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.020260628s ago: executing program 6 (id=10392): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x4, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000000)={0x14}, 0x14) 1.741186112s ago: executing program 0 (id=10393): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.572034469s ago: executing program 0 (id=10394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 1.026744434s ago: executing program 2 (id=10395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007780)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="95ecf1507decee5fc0a6e293d6eee6c86564758f06ce1410e747c8659b28d626fbf665368d38617d6078f01c86d3ed3b3112696211d905da5badda65a17d57c5d7a62edc5d31ef02ad0a13c4799074f545d6ef4cedcd3f050633973d943e7f37fe1bfd643f1e9bd0a006fb6164db534ebdb04b474d54e8e729559e54f5414bbe1e04065846e4585d63712069e338e32791b88a12ac887babe10a4b56a65307fb740b43770cb6dbdc1bf8d8cd389553bd83039c7f87b8147e3758cdfc30507312f08c7c3488bb7c04b0190789ae5985d9ca05453aaeb8e52850874c8b0c9f", 0xde}, {&(0x7f0000000140)="1412", 0x2}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x2000c000) 961.898417ms ago: executing program 6 (id=10396): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) 836.052169ms ago: executing program 2 (id=10397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x4008890) 783.128079ms ago: executing program 5 (id=10398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x1, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 748.864388ms ago: executing program 6 (id=10399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001a40)={0x8, 0x0, 0x0, r2, 0x4}) 666.533776ms ago: executing program 0 (id=10400): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) 572.439286ms ago: executing program 1 (id=10401): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="ce7b", 0x2}], 0x1}, 0x44044) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) 559.057635ms ago: executing program 5 (id=10402): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 535.830322ms ago: executing program 0 (id=10403): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x60, 0x0, r3, 0x0, &(0x7f0000000380), 0x0, 0x10001, 0x1}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 367.965331ms ago: executing program 1 (id=10404): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 367.635646ms ago: executing program 6 (id=10405): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000082000040"]) 272.494375ms ago: executing program 2 (id=10406): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 134.282865ms ago: executing program 0 (id=10407): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 6 (id=10408): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) kernel console output (not intermixed with test programs): 4-1: new full-speed USB device number 89 using dummy_hcd [ 696.384771][T26031] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.429209][T26031] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.443742][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 696.458769][T26031] bridge_slave_0: entered allmulticast mode [ 696.469559][T26031] bridge_slave_0: entered promiscuous mode [ 696.478753][T26031] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.486168][ T5841] Bluetooth: hci0: command tx timeout [ 696.492550][ T5893] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 696.502063][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.514352][ T5893] usb 4-1: config 0 descriptor?? [ 696.520562][T26063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 696.575626][T26031] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.610668][T26031] bridge_slave_1: entered allmulticast mode [ 696.644177][T26031] bridge_slave_1: entered promiscuous mode [ 696.770299][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.852272][T26088] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 696.980829][ T5893] elan 0003:04F3:0755.0096: unknown main item tag 0x2 [ 697.038057][ T5893] elan 0003:04F3:0755.0096: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 697.165521][T26097] input: syz0 as /devices/virtual/input/input67 [ 697.188012][T26031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.188779][ T5893] usb 4-1: USB disconnect, device number 89 [ 697.253397][T26031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.300684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 697.330507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 697.339378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 697.349392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 697.823602][T26031] team0: Port device team_slave_0 added [ 697.992309][T26031] team0: Port device team_slave_1 added [ 698.417803][T26031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.449797][T26031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.501951][T26031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.529655][ T5852] Bluetooth: hci0: command tx timeout [ 698.662999][ T1000] hsr_slave_0: left promiscuous mode [ 698.683162][ T1000] hsr_slave_1: left promiscuous mode [ 698.697628][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.725224][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.744726][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.818825][ T1000] veth1_vlan: left promiscuous mode [ 698.850913][ T1000] veth0_vlan: left promiscuous mode [ 699.496652][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 699.541077][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 700.023144][T26031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.030858][T26031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.061970][T26031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.163301][T26114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.179635][T26114] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 700.255140][T26114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.281556][T26031] hsr_slave_0: entered promiscuous mode [ 700.285464][T26114] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 700.288439][T26031] hsr_slave_1: entered promiscuous mode [ 700.306988][T26031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.317218][T26031] Cannot create hsr debugfs directory [ 700.356220][T26114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.366044][T26114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 700.411394][T26114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.429760][T26114] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 700.482286][T26114] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 701.225283][T26031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 701.275855][T26031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 701.316806][T26031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 701.357136][T26031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 701.382530][ T5893] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 701.555213][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.578660][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 701.630406][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.658646][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.710306][ T5893] usb 2-1: config 0 descriptor?? [ 701.755960][T26031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.873444][T26031] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.915073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.922383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.928783][ T5893] usb 2-1: USB disconnect, device number 82 [ 702.024646][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.031913][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.203639][T26031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.227196][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 702.282782][T26031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.302930][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 702.337954][T26031] veth0_vlan: entered promiscuous mode [ 702.351326][T26031] veth1_vlan: entered promiscuous mode [ 702.369519][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 702.422623][T26031] veth0_macvtap: entered promiscuous mode [ 702.445595][T26031] veth1_macvtap: entered promiscuous mode [ 702.453966][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 702.475314][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.486145][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.496105][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.507149][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.518876][T26031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.530095][ T3485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.582638][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.631416][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.662587][T26031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.713604][T26031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.740149][T26031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.758217][T26031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.777208][T26031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.160788][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.202353][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.281119][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.309344][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.295198][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 704.369688][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 704.449406][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 704.529243][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 705.683495][T26287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9266'. [ 705.717390][T26286] syzkaller1: entered promiscuous mode [ 705.719895][ T5897] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 705.740769][T26286] syzkaller1: entered allmulticast mode [ 705.907613][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.945950][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.993068][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 706.018193][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.267058][ T5897] usb 4-1: usb_control_msg returned -32 [ 706.277657][ T30] audit: type=1326 audit(1744822700.534:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.309311][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 706.401456][ T30] audit: type=1326 audit(1744822700.534:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.497281][ T30] audit: type=1326 audit(1744822700.534:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.542917][ T30] audit: type=1326 audit(1744822700.544:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.610340][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 706.693210][ T30] audit: type=1326 audit(1744822700.544:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.742120][ T30] audit: type=1326 audit(1744822700.544:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.775167][ T30] audit: type=1326 audit(1744822700.544:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.825024][ T30] audit: type=1326 audit(1744822700.544:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.891143][ T30] audit: type=1326 audit(1744822700.544:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 706.954839][ T30] audit: type=1326 audit(1744822700.544:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26300 comm="syz.5.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x7ffc0000 [ 707.518651][ T5840] IPVS: starting estimator thread 0... [ 707.619223][ T5897] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 707.625273][T26342] IPVS: using max 26 ests per chain, 62400 per kthread [ 707.801433][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 707.831526][ T5897] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 707.861496][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.882249][ T5897] usb 2-1: config 0 descriptor?? [ 707.888868][T26336] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 708.290679][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.331459][ T5897] elan 0003:04F3:0755.0097: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 708.520362][ T5894] usb 4-1: USB disconnect, device number 90 [ 708.566675][ T5897] usb 2-1: USB disconnect, device number 83 [ 708.689555][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 709.429562][ T5894] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 709.612382][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 709.637660][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 709.665095][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 709.693464][ T5894] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 709.708288][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.728791][ T5894] usb 3-1: Product: syz [ 709.752239][ T5894] usb 3-1: Manufacturer: syz [ 709.762646][ T5894] usb 3-1: SerialNumber: syz [ 709.779316][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 709.786839][ T5894] usb 3-1: config 0 descriptor?? [ 709.788930][T26395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.820793][T26395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.850203][ T5894] usb 3-1: ucan: probing device on interface #0 [ 709.959819][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 709.980207][ T5897] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 709.998014][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.025647][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.057418][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.076516][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.086048][ T5897] usb 6-1: Product: syz [ 710.094505][ T5897] usb 6-1: Manufacturer: syz [ 710.113699][ T5897] usb 6-1: SerialNumber: syz [ 710.495812][ T5894] ucan 3-1:0.0 can0: registered device [ 710.524235][T25886] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 710.550399][ T5897] usb 6-1: 0:2 : does not exist [ 710.682838][ T5894] ucan 3-1:0.0 can0: firmware string: unknown [ 710.713391][T25886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.723794][ T5894] usb 3-1: USB disconnect, device number 89 [ 710.738327][T25886] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 710.769545][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 710.788081][T25886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.804742][T25886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.825816][T25886] usb 2-1: Product: syz [ 710.853420][T25886] usb 2-1: Manufacturer: syz [ 710.866330][T25886] usb 2-1: SerialNumber: syz [ 711.107021][T26428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.126759][T26428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.145302][T25886] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 711.168779][T25886] usb 2-1: USB disconnect, device number 84 [ 711.194307][ T5897] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 711.241003][ T5897] usb 6-1: USB disconnect, device number 2 [ 711.441965][T25865] udevd[25865]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.689708][T25886] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 711.849515][T25886] usb 2-1: Using ep0 maxpacket: 8 [ 711.858638][T25886] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 711.860159][T26467] syz.2.9319 (26467): attempted to duplicate a private mapping with mremap. This is not supported. [ 711.874771][T25886] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 711.894716][T25886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.923234][T25886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.949182][T25886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 711.965077][T25886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.980154][T25886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 711.992886][T25886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.081512][T26472] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 712.229739][T25886] usb 2-1: usb_control_msg returned -32 [ 712.235583][T25886] usbtmc 2-1:16.0: can't read capabilities [ 712.269552][T25886] usb 2-1: USB disconnect, device number 85 [ 713.193018][T26508] syzkaller1: entered promiscuous mode [ 713.198894][T26508] syzkaller1: entered allmulticast mode [ 713.359528][T25886] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 713.546873][T25886] usb 2-1: Using ep0 maxpacket: 32 [ 713.554655][T25886] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 713.569382][T25886] usb 2-1: config 0 has no interface number 0 [ 713.593052][T25886] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 713.602681][T25886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.612120][T25886] usb 2-1: Product: syz [ 713.616438][T25886] usb 2-1: Manufacturer: syz [ 713.627449][T25886] usb 2-1: SerialNumber: syz [ 713.642700][T25886] usb 2-1: config 0 descriptor?? [ 713.658097][T25886] smsc95xx v2.0.0 [ 714.051985][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.149873][ T5840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 714.171113][ T30] audit: type=1326 audit(1744822708.434:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb809f8e169 code=0x7ffc0000 [ 714.222059][ T30] audit: type=1326 audit(1744822708.444:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.269793][ T30] audit: type=1326 audit(1744822708.444:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.295371][ T30] audit: type=1326 audit(1744822708.444:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.319541][ T30] audit: type=1326 audit(1744822708.444:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.349880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 714.359686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 714.370023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 714.373343][ T5840] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 714.389568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 714.400663][ T30] audit: type=1326 audit(1744822708.444:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.423630][ T5840] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 714.466791][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 714.488922][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 714.510145][ T30] audit: type=1326 audit(1744822708.444:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.553355][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 714.620216][ T5840] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 714.638722][ T30] audit: type=1326 audit(1744822708.444:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.668693][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 714.677131][ T5840] usb 6-1: Product: syz [ 714.687274][ T5840] usb 6-1: Manufacturer: syz [ 714.696179][ T30] audit: type=1326 audit(1744822708.444:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.727029][ T30] audit: type=1326 audit(1744822708.444:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26528 comm="syz.0.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb809f2a359 code=0x7ffc0000 [ 714.755386][T25886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 714.768497][ T5840] cdc_wdm 6-1:1.0: skipping garbage [ 714.786460][ T5840] cdc_wdm 6-1:1.0: skipping garbage [ 714.803241][ T5840] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 714.819448][ T5840] cdc_wdm 6-1:1.0: Unknown control protocol [ 714.865310][T25886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 714.932041][T25886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 714.953917][T25886] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 715.003139][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.009780][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.016138][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.022825][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.029396][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.036034][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.042356][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.048953][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.055419][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.062017][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.068364][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.074960][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.081246][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.087836][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.094273][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.100964][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.107215][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.113806][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.120275][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 715.126866][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 715.133233][ T5840] usb 6-1: USB disconnect, device number 3 [ 715.139179][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 715.187542][T25886] usb 2-1: USB disconnect, device number 86 [ 715.603470][T26555] netlink: 'syz.3.9352': attribute type 29 has an invalid length. [ 715.769915][T25886] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 715.859597][T26544] bridge0: entered promiscuous mode [ 715.938322][T25886] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 715.952759][T25886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.962776][T25886] usb 3-1: Product: syz [ 715.981247][T25886] usb 3-1: Manufacturer: syz [ 715.998276][T25886] usb 3-1: SerialNumber: syz [ 716.042136][T25886] usb 3-1: config 0 descriptor?? [ 716.458945][T25886] usb 3-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 716.544010][T26579] loop8: detected capacity change from 0 to 1 [ 716.554576][T26579] Dev loop8: unable to read RDB block 1 [ 716.562504][T26579] loop8: unable to read partition table [ 716.568554][T26579] loop8: partition table beyond EOD, truncated [ 716.578435][T26579] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 716.681486][T25886] usb 3-1: failed to fetch extended address, random address set [ 716.710971][T25886] usb 3-1: atusb_probe: initialization failed, error = -524 [ 716.747008][T25886] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 716.800441][T25886] usb 3-1: USB disconnect, device number 90 [ 717.088707][T26594] input: syz0 as /devices/virtual/input/input68 [ 717.209830][T26597] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9363'. [ 717.702986][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9370'. [ 718.755388][T26660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9382'. [ 718.966322][T26667] fuse: Bad value for 'fd' [ 719.030164][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9383'. [ 719.382140][ T5842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 719.409854][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 719.415317][T25886] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 719.439457][T25886] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 719.565145][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.615457][ T5842] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 719.655445][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.712277][ T5842] usb 6-1: config 0 descriptor?? [ 719.748042][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 719.816156][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.152260][ T5842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 720.160962][ T5842] pwc: recv_control_msg error -32 req 02 val 2700 [ 720.332270][ T5840] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 720.369635][ T5842] pwc: recv_control_msg error -71 req 04 val 1000 [ 720.379234][ T5897] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 720.385180][ T5842] pwc: recv_control_msg error -71 req 04 val 1300 [ 720.416056][ T5842] pwc: recv_control_msg error -71 req 04 val 1400 [ 720.431567][ T5842] pwc: recv_control_msg error -71 req 02 val 2000 [ 720.438766][ T5842] pwc: recv_control_msg error -71 req 02 val 2100 [ 720.465635][ T5842] pwc: recv_control_msg error -71 req 04 val 1500 [ 720.481608][ T5842] pwc: recv_control_msg error -71 req 02 val 2500 [ 720.491446][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.494675][ T5842] pwc: recv_control_msg error -71 req 02 val 2400 [ 720.517245][ T5842] pwc: recv_control_msg error -71 req 02 val 2600 [ 720.519325][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.525043][ T5842] pwc: recv_control_msg error -71 req 02 val 2900 [ 720.546622][ T5842] pwc: recv_control_msg error -71 req 02 val 2800 [ 720.554410][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 720.560319][ T5840] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 720.568682][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 720.582917][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.593234][ T5842] pwc: Registered as video103. [ 720.604131][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.610508][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input70 [ 720.621534][ T5897] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 720.641225][ T5840] usb 4-1: config 0 descriptor?? [ 720.646441][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.670030][ T5842] usb 6-1: USB disconnect, device number 4 [ 720.714417][ T5897] usb 3-1: config 0 descriptor?? [ 721.007105][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 721.029911][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 721.081830][ T5840] cm6533_jd 0003:0D8C:0022.0098: unknown main item tag 0x0 [ 721.102501][ T5897] usb 3-1: USB disconnect, device number 91 [ 721.112143][ T5840] cm6533_jd 0003:0D8C:0022.0098: unknown main item tag 0x0 [ 721.151022][ T5840] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0098/input/input71 [ 721.230348][ T5840] cm6533_jd 0003:0D8C:0022.0098: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 721.305586][ T5840] usb 4-1: USB disconnect, device number 91 [ 721.489956][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 721.491800][T25886] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 721.529499][T25886] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 721.551242][ T5897] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 721.744454][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 721.753434][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.803536][ T5897] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 721.839176][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.912820][ T5897] usb 3-1: config 0 descriptor?? [ 722.127418][ T5897] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 722.162801][ T5897] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 722.613506][ C0] powermate: config urb returned -71 [ 722.614820][ T5842] usb 3-1: USB disconnect, device number 92 [ 722.618843][ C0] powermate: usb_submit_urb(config) failed [ 722.625704][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 722.679518][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 722.679539][ T30] audit: type=1326 audit(1744822716.954:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26776 comm="syz.3.9410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efca2b8e169 code=0x0 [ 723.269627][T26799] loop2: detected capacity change from 0 to 7 [ 723.315288][ T5855] Dev loop2: unable to read RDB block 7 [ 723.341488][ T5855] loop2: unable to read partition table [ 723.361718][ T5855] loop2: partition table beyond EOD, truncated [ 723.384435][T26799] Dev loop2: unable to read RDB block 7 [ 723.391847][T26799] loop2: unable to read partition table [ 723.419556][T26799] loop2: partition table beyond EOD, truncated [ 723.433324][T26799] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 723.488068][ T5209] Dev loop2: unable to read RDB block 7 [ 723.503729][ T5209] loop2: unable to read partition table [ 723.532097][ T5209] loop2: partition table beyond EOD, truncated [ 723.650515][T25886] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 723.651983][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 723.661355][T25886] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 724.559744][T26851] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9434'. [ 724.589818][T26851] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9434'. [ 725.447303][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 725.540361][T26901] input: syz0 as /devices/virtual/input/input73 [ 725.573036][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.609187][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 725.618566][ T5897] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 725.632938][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.660472][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.685466][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.710589][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.746727][ T5897] usb 6-1: Product: syz [ 725.763590][ T5897] usb 6-1: Manufacturer: syz [ 725.783561][ T5897] usb 6-1: SerialNumber: syz [ 725.885727][T26908] syzkaller1: entered promiscuous mode [ 725.899345][T26908] syzkaller1: entered allmulticast mode [ 726.129600][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 726.139435][T25886] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 726.145566][T25886] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 726.220771][ T5897] usb 6-1: 0:2 : does not exist [ 726.333107][T26914] syzkaller1: entered promiscuous mode [ 726.353310][T26914] syzkaller1: entered allmulticast mode [ 726.522727][ T5896] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 726.699250][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 726.715038][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.733430][ T5896] usb 2-1: config 0 has no interface number 0 [ 726.753024][ T5896] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 726.767187][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.778385][ T5896] usb 2-1: Product: syz [ 726.790271][ T5896] usb 2-1: Manufacturer: syz [ 726.794960][ T5896] usb 2-1: SerialNumber: syz [ 726.823880][ T5896] usb 2-1: config 0 descriptor?? [ 726.845442][ T5897] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 726.875353][ T5896] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 726.965634][ T5897] usb 6-1: USB disconnect, device number 5 [ 727.212014][T26729] udevd[26729]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.677827][T26970] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.900964][ T5896] gspca_spca1528: reg_w err -71 [ 727.905970][ T5896] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 727.978569][ T5896] usb 2-1: USB disconnect, device number 87 [ 728.575233][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 728.753137][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 728.799757][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.841848][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.894479][ T5896] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 728.932593][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.963524][ T5896] usb 6-1: config 0 descriptor?? [ 728.993621][ T5896] hub 6-1:0.0: USB hub found [ 729.195267][ T5896] hub 6-1:0.0: 1 port detected [ 729.395700][ T5896] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 729.407058][ T5896] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 729.448367][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 729.468935][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 729.527931][ T5896] usb 6-1: USB disconnect, device number 6 [ 730.659683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 730.694327][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.358772][T27161] sctp: [Deprecated]: syz.1.9519 (pid 27161) Use of int in maxseg socket option. [ 733.358772][T27161] Use struct sctp_assoc_value instead [ 733.710488][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9526'. [ 734.459982][ T5896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 734.619623][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 734.630308][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.649333][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.665415][T25886] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 734.676889][ T5896] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 734.701797][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.740945][ T5896] usb 6-1: config 0 descriptor?? [ 734.846607][T25886] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 734.868674][T25886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.877394][T25886] usb 3-1: Product: syz [ 734.886430][T25886] usb 3-1: Manufacturer: syz [ 734.893427][T25886] usb 3-1: SerialNumber: syz [ 734.906614][T25886] usb 3-1: config 0 descriptor?? [ 735.180431][ T5896] savu 0003:1E7D:2D5A.0099: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 735.463026][ T5896] usb 6-1: USB disconnect, device number 7 [ 735.950024][T25886] usb 3-1: Firmware version (0.0) predates our first public release. [ 735.958222][T25886] usb 3-1: Please update to version 0.2 or newer [ 736.047014][T25886] usb 3-1: USB disconnect, device number 93 [ 736.236756][T27255] veth1_to_bond: entered allmulticast mode [ 736.248268][T27255] veth1_to_bond: entered promiscuous mode [ 736.255382][T27254] veth1_to_bond: left promiscuous mode [ 736.265146][T27254] veth1_to_bond: left allmulticast mode [ 736.421858][T27264] input: syz1 as /devices/virtual/input/input74 [ 736.449768][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.536656][T27266] loop2: detected capacity change from 0 to 524287999 [ 737.169532][T27282] xt_CT: No such helper "pptp" [ 737.439447][T25886] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 737.552881][T27301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.609219][T25886] usb 4-1: Using ep0 maxpacket: 32 [ 737.623259][T25886] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 737.640787][T25886] usb 4-1: config 0 has no interface number 0 [ 737.662317][T25886] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 737.709442][T25886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.717508][T25886] usb 4-1: Product: syz [ 737.774003][T25886] usb 4-1: Manufacturer: syz [ 737.778675][T25886] usb 4-1: SerialNumber: syz [ 737.790542][T27305] vivid-000: disconnect [ 737.805615][T25886] usb 4-1: config 0 descriptor?? [ 737.827006][T27305] vivid-000: reconnect [ 737.881326][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9584'. [ 737.892218][T25886] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 737.921322][T27310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9584'. [ 738.025525][T27312] syzkaller1: entered promiscuous mode [ 738.049537][T27312] syzkaller1: entered allmulticast mode [ 738.051872][T25886] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 738.168455][T25886] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 738.510283][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 738.520035][T25886] usb 4-1: USB disconnect, device number 92 [ 738.537036][T25886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 738.578453][T25886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 738.619698][T25886] quatech2 4-1:0.51: device disconnected [ 738.773283][T27331] loop0: detected capacity change from 0 to 7 [ 738.788379][T27331] Dev loop0: unable to read RDB block 7 [ 738.797819][T27331] loop0: AHDI p4 [ 738.802871][T27331] loop0: partition table partially beyond EOD, truncated [ 739.057318][T27339] bridge0: entered promiscuous mode [ 739.098545][T27338] bridge0: left promiscuous mode [ 739.209229][ T5896] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 739.372238][ T5896] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 739.380808][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.399295][ T5893] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 739.407085][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.431743][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.455163][T27348] input: syz1 as /devices/virtual/input/input75 [ 739.477035][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.500913][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.512344][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.534220][ T5896] usb 2-1: config 0 descriptor?? [ 739.561309][T27335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 739.572295][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 739.586208][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 739.609463][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 739.636746][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.650067][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.663346][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.677186][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.926966][ T5893] usb 4-1: GET_CAPABILITIES returned 0 [ 739.936281][ T5893] usbtmc 4-1:16.0: can't read capabilities [ 740.018940][ T5896] plantronics 0003:047F:FFFF.009A: reserved main item tag 0xd [ 740.064565][ T5896] plantronics 0003:047F:FFFF.009A: No inputs registered, leaving [ 740.090993][ T5896] plantronics 0003:047F:FFFF.009A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 740.136113][T25886] usb 4-1: USB disconnect, device number 93 [ 740.233972][ T47] usb 2-1: USB disconnect, device number 88 [ 742.211430][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.595220][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9643'. [ 742.619284][T27445] netlink: 'syz.2.9643': attribute type 7 has an invalid length. [ 742.639256][T27445] netlink: 'syz.2.9643': attribute type 8 has an invalid length. [ 742.679273][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9643'. [ 743.015062][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9647'. [ 743.113439][T27458] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.122424][T27458] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.131432][T27458] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.140521][T27458] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.158621][T27458] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.167837][T27458] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.177504][T27458] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.186571][T27458] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.376612][T27467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9652'. [ 744.056883][ T30] audit: type=1326 audit(1744822738.324:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.5.9664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086618e169 code=0x0 [ 744.066959][T27498] netlink: 'syz.1.9665': attribute type 10 has an invalid length. [ 744.095593][T27498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9665'. [ 744.106572][T27498] geneve0: left allmulticast mode [ 744.114187][T27498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.125174][T27498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.137111][T27498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.146574][T27498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.164795][T27498] team0: Port device geneve0 added [ 744.335412][T27507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9668'. [ 744.481612][ T5896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.580201][T25886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.701454][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.799661][ T5896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.849425][ T5896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.039480][ T5840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.089958][ T5840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.139537][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.200183][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.262973][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 745.279743][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.423915][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 745.432838][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.458984][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.469955][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.483235][ T5896] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 745.493022][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.525403][ T5896] usb 6-1: config 0 descriptor?? [ 745.599607][ T47] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 745.761860][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.772383][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.800858][ T47] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 140, setting to 64 [ 745.832959][ T47] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.895464][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.908753][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.930852][ T47] usb 4-1: Product: syz [ 745.935088][ T47] usb 4-1: Manufacturer: syz [ 745.949589][ T47] usb 4-1: SerialNumber: syz [ 745.978026][ T5896] HID 045e:07da: Invalid code 65791 type 1 [ 746.006419][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.009B/input/input79 [ 746.043398][ T5896] microsoft 0003:045E:07DA.009B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 746.227378][ T5896] usb 6-1: USB disconnect, device number 8 [ 746.638852][ T30] audit: type=1326 audit(1744822740.904:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27568 comm="syz.2.9697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed8e169 code=0x0 [ 746.991468][T27576] syzkaller1: entered promiscuous mode [ 746.997187][T27576] syzkaller1: entered allmulticast mode [ 747.011123][ T47] cdc_ncm 4-1:1.0: bind() failure [ 747.051135][ T47] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 747.064295][ T47] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 747.074137][ T47] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 747.106591][ T47] usb 4-1: USB disconnect, device number 94 [ 747.334376][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.341475][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.710933][T27597] input: syz0 as /devices/virtual/input/input80 [ 748.204993][T27613] input: syz0 as /devices/virtual/input/input81 [ 748.259581][T26729] udevd[26729]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 748.409400][T25886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 748.579896][T25886] usb 6-1: Using ep0 maxpacket: 16 [ 748.588510][T25886] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 748.598114][T25886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.606901][T25886] usb 6-1: Product: syz [ 748.612038][T25886] usb 6-1: Manufacturer: syz [ 748.616681][T25886] usb 6-1: SerialNumber: syz [ 748.629854][T25886] usb 6-1: config 0 descriptor?? [ 748.640659][T25886] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 748.651415][T25886] usb 6-1: Detected FT232H [ 748.844902][T25886] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 748.989458][ T5840] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 749.163289][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 749.257933][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 749.278336][ T5840] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 749.297162][ T5840] usb 4-1: can't read configurations, error -71 [ 749.297605][T25886] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 749.518119][T25886] usb 6-1: USB disconnect, device number 9 [ 749.559962][T25886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 749.593929][T25886] ftdi_sio 6-1:0.0: device disconnected [ 750.115434][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9737'. [ 750.298026][T27673] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9739'. [ 750.310602][T27673] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9739'. [ 750.460766][T27676] netlink: 'syz.0.9742': attribute type 2 has an invalid length. [ 750.509412][T27676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9742'. [ 750.720615][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9745'. [ 751.079509][T27700] netlink: 'syz.5.9749': attribute type 11 has an invalid length. [ 752.332194][ T30] audit: type=1326 audit(1744822746.604:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 752.388343][ T30] audit: type=1326 audit(1744822746.604:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 752.422018][ T30] audit: type=1326 audit(1744822746.604:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942df8e169 code=0x7ffc0000 [ 752.536193][ T30] audit: type=1326 audit(1744822746.604:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 752.558551][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.654807][ T30] audit: type=1326 audit(1744822746.604:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942df8e169 code=0x7ffc0000 [ 752.749278][ T30] audit: type=1326 audit(1744822746.624:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942df8e169 code=0x7ffc0000 [ 752.806502][ T30] audit: type=1326 audit(1744822746.624:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 752.869229][ T30] audit: type=1326 audit(1744822746.624:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 752.918692][ T30] audit: type=1326 audit(1744822746.624:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942df8e169 code=0x7ffc0000 [ 752.951946][ T30] audit: type=1326 audit(1744822746.634:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27738 comm="syz.1.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942df2a359 code=0x7ffc0000 [ 753.109163][ T47] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 753.270985][ T47] usb 2-1: config 0 has no interfaces? [ 753.276559][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 753.289271][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.308618][ T47] usb 2-1: config 0 descriptor?? [ 753.532646][T27748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.551512][T27748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.593623][T27748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.631417][T27748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.666931][ T47] usb 2-1: USB disconnect, device number 89 [ 753.874225][T27777] veth0_vlan: entered allmulticast mode [ 754.109776][ T47] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 754.259356][ T5840] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 754.261088][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.288010][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 754.311381][ T47] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 754.327494][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.336183][ T47] usb 2-1: Product: syz [ 754.346311][ T47] usb 2-1: Manufacturer: syz [ 754.351503][ T47] usb 2-1: SerialNumber: syz [ 754.366828][ T47] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 754.389188][ T47] cdc_ncm 2-1:1.0: bind() failure [ 754.409954][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 754.421714][ T5840] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 754.439018][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 754.453242][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 754.465779][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 754.498211][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.520929][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 754.536666][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.599501][ T5893] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 754.647415][ T47] usb 2-1: USB disconnect, device number 90 [ 754.748536][T27791] loop2: detected capacity change from 0 to 7 [ 754.753089][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.766391][T27791] Dev loop2: unable to read RDB block 7 [ 754.777634][ T5840] usb 6-1: usb_control_msg returned -32 [ 754.783504][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.789322][T27791] loop2: AHDI p1 [ 754.795182][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 754.805900][T27791] loop2: partition table partially beyond EOD, truncated [ 754.807549][ T5893] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 754.846030][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.880193][ T5893] usb 3-1: config 0 descriptor?? [ 755.036974][T27795] syzkaller1: entered promiscuous mode [ 755.048424][T27795] syzkaller1: entered allmulticast mode [ 755.100951][T27797] input: syz0 as /devices/virtual/input/input82 [ 755.121586][T27797] input: failed to attach handler leds to device input82, error: -6 [ 755.179254][T27798] usbtmc 6-1:16.0: control status returned 5 [ 755.330699][ T5893] playstation 0003:054C:0DF2.009C: unknown main item tag 0x0 [ 755.364831][ T5893] playstation 0003:054C:0DF2.009C: unknown main item tag 0x0 [ 755.381527][ T47] usb 6-1: USB disconnect, device number 10 [ 755.384569][ T5893] playstation 0003:054C:0DF2.009C: unknown main item tag 0x0 [ 755.415795][ T5893] playstation 0003:054C:0DF2.009C: unknown main item tag 0x0 [ 755.439619][ T5893] playstation 0003:054C:0DF2.009C: unknown main item tag 0x0 [ 755.487815][ T5893] playstation 0003:054C:0DF2.009C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 756.073103][T27820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.219728][ T5893] playstation 0003:054C:0DF2.009C: Failed to retrieve feature with reportID 5: -71 [ 756.239149][ T5893] playstation 0003:054C:0DF2.009C: Failed to retrieve DualSense calibration info: -71 [ 756.248829][ T5893] playstation 0003:054C:0DF2.009C: Failed to get calibration data from DualSense [ 756.279450][ T5893] playstation 0003:054C:0DF2.009C: Failed to create dualsense. [ 756.301844][ T5893] playstation 0003:054C:0DF2.009C: probe with driver playstation failed with error -71 [ 756.324554][ T5893] usb 3-1: USB disconnect, device number 94 [ 756.569318][ T5894] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 756.760188][ T5894] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 756.778853][ T5894] usb 6-1: config 150 has no interface number 0 [ 756.785357][ T5894] usb 6-1: config 150 interface 204 has no altsetting 0 [ 756.802948][ T5894] usb 6-1: config 150 interface 1 has no altsetting 0 [ 756.831587][ T5894] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 756.849810][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.857996][ T5894] usb 6-1: Product: syz [ 756.873006][ T5894] usb 6-1: Manufacturer: syz [ 756.877669][ T5894] usb 6-1: SerialNumber: syz [ 757.131071][ T5894] xr_serial 6-1:150.204: xr_serial converter detected [ 757.251177][ T5893] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 757.412419][ T5893] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 757.420867][ T5893] usb 4-1: config 0 has no interface number 0 [ 757.427020][ T5893] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 757.478915][ T5893] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 757.548674][ T5893] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 757.559592][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.567652][ T5893] usb 4-1: Product: syz [ 757.606645][ T5893] usb 4-1: Manufacturer: syz [ 757.618852][ T5893] usb 4-1: SerialNumber: syz [ 757.642472][ T5893] usb 4-1: config 0 descriptor?? [ 757.656935][ T5893] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 757.930609][ T5894] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 757.937185][ T5894] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 757.981034][ T5894] usb 6-1: USB disconnect, device number 11 [ 758.015553][ T5894] xr_serial 6-1:150.204: device disconnected [ 758.202129][T27868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.312371][T27870] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9824'. [ 758.350819][T27870] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9824'. [ 758.546704][ T5893] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input83 [ 758.768476][ T47] usb 4-1: USB disconnect, device number 97 [ 759.989597][ T47] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 760.161336][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.178417][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.190540][ T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 760.200589][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 760.208737][ T47] usb 2-1: SerialNumber: syz [ 760.434938][ T47] usb 2-1: 0:2 : does not exist [ 760.492047][ T47] usb 2-1: USB disconnect, device number 91 [ 760.700900][T26729] udevd[26729]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.875009][T27934] loop2: detected capacity change from 0 to 7 [ 760.884979][T27934] Dev loop2: unable to read RDB block 7 [ 760.893157][T27934] loop2: unable to read partition table [ 760.900910][T27934] loop2: partition table beyond EOD, truncated [ 760.907145][T27934] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 761.116848][T27944] input: syz0 as /devices/virtual/input/input84 [ 761.127963][ T5896] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 761.136289][T27944] input: failed to attach handler leds to device input84, error: -6 [ 761.255524][ T47] IPVS: starting estimator thread 0... [ 761.264040][T27949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.299677][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 761.312245][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.332888][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.359970][T27950] IPVS: using max 26 ests per chain, 62400 per kthread [ 761.362029][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 761.386224][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.402433][ T5896] usb 3-1: config 0 descriptor?? [ 761.410725][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.862277][ T5896] savu 0003:1E7D:2D5A.009D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 762.134998][ T47] usb 3-1: USB disconnect, device number 95 [ 763.278666][T28000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.407478][T28004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.559517][ T47] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 764.659474][ T5896] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 764.726040][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.742570][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 764.756983][ T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.766716][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.781058][ T47] usb 3-1: config 0 descriptor?? [ 764.792021][ T47] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 764.819358][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 764.839755][ T5896] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.874702][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.893692][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 764.914784][ T5896] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.946930][ T5896] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 764.969191][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.096701][T28053] syzkaller1: entered promiscuous mode [ 765.113127][T28053] syzkaller1: entered allmulticast mode [ 765.210715][ T47] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 765.248138][T25886] usb 3-1: USB disconnect, device number 96 [ 765.261307][ T5896] usb 2-1: usb_control_msg returned -32 [ 765.277169][ T5896] usbtmc 2-1:16.0: can't read capabilities [ 765.359818][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9901'. [ 765.413300][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 765.430680][ T47] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 765.445772][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.466741][ T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 765.484135][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.498028][ T47] usb 6-1: Product: syz [ 765.504912][ T47] usb 6-1: Manufacturer: syz [ 765.512338][ T47] usb 6-1: SerialNumber: syz [ 765.627742][T28058] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 765.679640][T25886] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 765.742774][ T47] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 765.849631][T25886] usb 4-1: Using ep0 maxpacket: 16 [ 765.863812][T25886] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 765.884281][T25886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.901445][T25886] usb 4-1: Product: syz [ 765.906799][T25886] usb 4-1: Manufacturer: syz [ 765.913996][T25886] usb 4-1: SerialNumber: syz [ 765.926678][T25886] usb 4-1: config 0 descriptor?? [ 765.937500][T25886] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 765.970532][T25886] usb 4-1: Detected FT232H [ 766.014381][ T5840] usb 6-1: USB disconnect, device number 12 [ 766.028651][ T5840] usblp1: removed [ 766.142049][T25886] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 766.530057][T23060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.563666][T25886] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 766.794776][ T47] usb 4-1: USB disconnect, device number 98 [ 766.866566][ T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 766.899859][ T47] ftdi_sio 4-1:0.0: device disconnected [ 767.203985][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9907'. [ 767.457665][T25886] usb 2-1: USB disconnect, device number 92 [ 767.622624][ T47] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 767.811517][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.860023][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.909609][ T47] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 767.918721][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.956430][ T47] usb 6-1: config 0 descriptor?? [ 768.300239][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 768.300260][ T30] audit: type=1326 audit(1744822762.574:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca2b8e169 code=0x7ffc0000 [ 768.339310][ T30] audit: type=1326 audit(1744822762.604:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7efca2b8e169 code=0x7ffc0000 [ 768.426386][ T30] audit: type=1326 audit(1744822762.604:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca2b8e169 code=0x7ffc0000 [ 768.996596][ T5840] usb 6-1: USB disconnect, device number 13 [ 770.200198][T28159] tipc: Started in network mode [ 770.209013][T28159] tipc: Node identity ac1414aa, cluster identity 4711 [ 770.255919][T28159] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.306278][T28159] tipc: Enabled bearer , priority 0 [ 770.399724][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.539451][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.679560][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.819456][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.959182][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.099334][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.239455][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.369432][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 771.379235][T25886] tipc: Node number set to 2886997162 [ 771.519457][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.559469][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 771.579766][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.595194][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 771.605262][ T47] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 771.631607][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.653056][ T47] usb 4-1: config 0 descriptor?? [ 771.732102][T28190] syzkaller1: entered promiscuous mode [ 771.742516][T28190] syzkaller1: entered allmulticast mode [ 771.789272][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 772.072689][ T47] elecom 0003:056E:010D.009F: unknown main item tag 0x0 [ 772.116839][ T47] elecom 0003:056E:010D.009F: unknown main item tag 0x0 [ 772.150037][ T47] elecom 0003:056E:010D.009F: unexpected long global item [ 772.176750][ T47] elecom 0003:056E:010D.009F: probe with driver elecom failed with error -22 [ 772.291477][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.311571][ T47] usb 4-1: USB disconnect, device number 99 [ 772.594551][T28212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9969'. [ 773.429826][ T5896] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 773.592684][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 773.605099][ T5896] usb 2-1: config 0 has no interfaces? [ 773.616635][ T5896] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 773.637606][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.654602][ T5896] usb 2-1: Product: syz [ 773.665895][ T5896] usb 2-1: Manufacturer: syz [ 773.671146][ T5896] usb 2-1: SerialNumber: syz [ 773.682446][ T5896] usb 2-1: config 0 descriptor?? [ 773.932810][ T5894] usb 2-1: USB disconnect, device number 93 [ 774.879233][ T5840] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 775.045844][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.068198][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.100567][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 775.118163][ T5840] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.127808][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.147039][ T5840] usb 4-1: config 0 descriptor?? [ 775.177622][T28282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10001'. [ 775.208361][T28282] netlink: 'syz.2.10001': attribute type 30 has an invalid length. [ 775.409205][ C1] net_ratelimit: 4 callbacks suppressed [ 775.409227][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 775.597732][ T5840] plantronics 0003:047F:FFFF.00A0: No inputs registered, leaving [ 775.642212][ T5840] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 775.866742][ T5840] usb 4-1: USB disconnect, device number 100 [ 776.162199][T28314] syzkaller1: entered promiscuous mode [ 776.167755][T28314] syzkaller1: entered allmulticast mode [ 776.236552][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10018'. [ 776.246962][T28318] netlink: 'syz.5.10018': attribute type 30 has an invalid length. [ 776.264242][T28318] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.273726][T28318] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.282924][T28318] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.291782][T28318] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.449644][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 776.829605][ T5894] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 776.989905][ T47] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 777.000730][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.011929][ T5894] usb 4-1: config 0 has no interfaces? [ 777.017455][ T5894] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 777.046349][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.060085][ T5894] usb 4-1: config 0 descriptor?? [ 777.157414][ T47] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 777.168600][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.187993][ T47] usb 3-1: config 0 descriptor?? [ 777.279984][ T5894] usb 4-1: USB disconnect, device number 101 [ 777.379269][ T5840] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 777.489671][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 777.547480][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.557848][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.570180][ T5840] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.581208][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.593445][ T5840] usb 2-1: SerialNumber: syz [ 777.818081][ T5840] usb 2-1: 0:2 : does not exist [ 777.827625][ T5840] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 777.842685][ T5840] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 777.859950][ T5840] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 777.891745][ T5840] usb 2-1: USB disconnect, device number 94 [ 778.066620][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.070829][T25865] udevd[25865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.208264][ T47] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 778.223291][ T47] usb 3-1: USB disconnect, device number 97 [ 778.289296][ T5896] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 778.408808][T28350] Invalid logical block size (13) [ 778.455951][ T5896] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 778.465584][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.473974][ T5896] usb 4-1: Product: syz [ 778.478413][ T5896] usb 4-1: Manufacturer: syz [ 778.484001][ T5896] usb 4-1: SerialNumber: syz [ 778.496326][ T5896] usb 4-1: config 0 descriptor?? [ 778.504978][ T5896] ch341 4-1:0.0: ch341-uart converter detected [ 778.529517][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 778.900768][ T5840] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 779.061594][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.099147][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.136759][ T5840] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 779.157632][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 779.182253][ T5840] usb 6-1: SerialNumber: syz [ 779.438181][ T5840] usb 6-1: 0:2 : does not exist [ 779.512182][ T5840] usb 6-1: USB disconnect, device number 14 [ 779.569152][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 779.602133][ T5896] usb 4-1: failed to send control message: -71 [ 779.608446][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 779.671173][ T5896] usb 4-1: USB disconnect, device number 102 [ 779.717370][ T5896] ch341 4-1:0.0: device disconnected [ 779.797067][T25865] udevd[25865]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.529252][ T5840] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 780.609500][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 780.699223][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 780.710631][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.722333][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.733138][ T5840] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 780.742953][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.763584][ T5840] usb 4-1: config 0 descriptor?? [ 781.007895][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 781.023203][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 781.051121][ T5840] usb 4-1: USB disconnect, device number 103 [ 781.197891][T28424] syzkaller1: entered promiscuous mode [ 781.204289][T28424] syzkaller1: entered allmulticast mode [ 781.238188][T28426] netlink: 'syz.5.10065': attribute type 64 has an invalid length. [ 781.247977][T28426] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10065'. [ 781.275305][T28426] netlink: 'syz.5.10065': attribute type 64 has an invalid length. [ 781.283492][T28426] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10065'. [ 781.610756][T28434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10069'. [ 781.649132][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 781.707165][T28442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10073'. [ 782.689486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 783.626180][ T5897] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 783.729174][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 783.772535][ T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 783.801429][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.812327][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.819604][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.823595][ T5897] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 783.867944][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 783.888216][ T5897] usb 3-1: SerialNumber: syz [ 783.942576][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 783.980922][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 784.004458][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 784.039801][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.070980][T28495] syzkaller1: entered promiscuous mode [ 784.086897][T28495] syzkaller1: entered allmulticast mode [ 784.092089][ T47] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 784.109332][ T47] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 784.136698][ T5897] usb 3-1: 0:2 : does not exist [ 784.139111][ T47] usb 6-1: Product: syz [ 784.152709][ T47] usb 6-1: Manufacturer: syz [ 784.157366][ T47] usb 6-1: SerialNumber: syz [ 784.187003][ T5897] usb 3-1: USB disconnect, device number 98 [ 784.229640][ T47] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input86 [ 784.434659][T26729] udevd[26729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.504444][ T5897] usb 6-1: USB disconnect, device number 15 [ 784.585582][ T5897] appletouch 6-1:1.0: input: appletouch disconnected [ 784.769648][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 785.765301][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 785.809129][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 785.816961][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 785.826019][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 785.842256][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 785.853680][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.878833][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 785.886707][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 785.899465][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 785.911877][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 785.919889][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.999542][ T5893] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 786.169281][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 786.181226][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.204014][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.243842][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 786.280769][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 786.291337][T28536] chnl_net:caif_netlink_parms(): no params data found [ 786.312021][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.348518][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 786.386126][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.628768][ T5893] usb 3-1: GET_CAPABILITIES returned 0 [ 786.637161][T28536] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.644492][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 786.660479][T28536] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.687648][T28536] bridge_slave_0: entered allmulticast mode [ 786.701789][T28536] bridge_slave_0: entered promiscuous mode [ 786.720274][T28536] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.727541][T28536] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.745217][T28536] bridge_slave_1: entered allmulticast mode [ 786.755162][T28536] bridge_slave_1: entered promiscuous mode [ 786.849584][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 786.863424][T28536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.866785][T28561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10120'. [ 786.883768][ T5840] usb 3-1: USB disconnect, device number 99 [ 786.894633][T28536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.919536][T28561] netlink: 'syz.3.10120': attribute type 7 has an invalid length. [ 786.931135][T28561] netlink: 'syz.3.10120': attribute type 8 has an invalid length. [ 786.942014][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10120'. [ 786.996076][T28536] team0: Port device team_slave_0 added [ 787.016967][T28536] team0: Port device team_slave_1 added [ 787.128392][T28536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.144706][T28536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.170682][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.185427][T28536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.215002][T28536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.222847][T28536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.249960][T28536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.333493][T28536] hsr_slave_0: entered promiscuous mode [ 787.342227][T28536] hsr_slave_1: entered promiscuous mode [ 787.348678][T28536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.357952][T28536] Cannot create hsr debugfs directory [ 787.634766][T28536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.718471][T28536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.835025][T28536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.904372][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 787.923669][T28536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.971213][ T5852] Bluetooth: hci4: command tx timeout [ 788.098390][T28536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.168228][T28536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.245239][T28536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.267390][T28536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.438010][T28594] input: syz0 as /devices/virtual/input/input87 [ 788.470086][T28594] input: failed to attach handler leds to device input87, error: -6 [ 788.574751][T28536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.636231][T28536] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.653807][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.661002][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.669989][ T47] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 788.733721][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.742308][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.844597][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.874789][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.907089][ T47] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 788.929931][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 788.931909][T23060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.948069][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.994057][ T47] usb 3-1: config 0 descriptor?? [ 789.007498][T28536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.175657][T28536] veth0_vlan: entered promiscuous mode [ 789.244932][T28536] veth1_vlan: entered promiscuous mode [ 789.429074][T28536] veth0_macvtap: entered promiscuous mode [ 789.474916][T28536] veth1_macvtap: entered promiscuous mode [ 789.485009][ T47] hid-led 0003:0FC5:B080.00A1: unknown main item tag 0x0 [ 789.549665][ T5842] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 789.611604][T28536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.627561][T28536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.652272][T28536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.664772][T28536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.674892][ T47] hid-led 0003:0FC5:B080.00A1: probe with driver hid-led failed with error -71 [ 789.690725][ T47] usb 3-1: USB disconnect, device number 100 [ 789.692593][T28536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.714378][T28536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.727967][T28536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.741993][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 789.756043][ T5842] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.786951][T28536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.787956][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.828075][T28536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.838886][ T5842] usb 6-1: Product: syz [ 789.843761][ T5842] usb 6-1: Manufacturer: syz [ 789.859701][ T5842] usb 6-1: SerialNumber: syz [ 789.878609][ T5842] r8152-cfgselector 6-1: Unknown version 0x0000 [ 789.879020][T28536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.886343][ T5842] r8152-cfgselector 6-1: config 0 descriptor?? [ 789.922874][T28536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.945216][T28536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.969125][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 790.003414][T28536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.016711][T28536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.037467][T28618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10144'. [ 790.048084][T28536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.060314][ T5852] Bluetooth: hci4: command tx timeout [ 790.072864][T28536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.145143][ T5842] r8152-cfgselector 6-1: Unknown version 0x0000 [ 790.169727][ T5842] r8152-cfgselector 6-1: bad CDC descriptors [ 790.184420][ T5842] r8152-cfgselector 6-1: USB disconnect, device number 16 [ 790.598496][T23060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.619386][T23060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.656473][T23060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.673605][T23060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.787980][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10142'. [ 790.813567][T28615] geneve0: entered promiscuous mode [ 790.833333][T28615] geneve0: entered allmulticast mode [ 791.010087][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 791.275048][T28650] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 791.594433][T28662] input: syz1 as /devices/virtual/input/input88 [ 792.059303][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 792.130072][ T5841] Bluetooth: hci4: command tx timeout [ 793.089497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 793.183437][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 793.193889][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 793.203885][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 793.223124][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 793.231809][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 793.884703][T28698] chnl_net:caif_netlink_parms(): no params data found [ 794.129126][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 794.209689][ T5852] Bluetooth: hci4: command tx timeout [ 794.252057][T28698] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.269784][T28698] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.288091][T28698] bridge_slave_0: entered allmulticast mode [ 794.309706][T28698] bridge_slave_0: entered promiscuous mode [ 794.443098][T28698] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.451268][T28698] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.458646][T28698] bridge_slave_1: entered allmulticast mode [ 794.467484][T28698] bridge_slave_1: entered promiscuous mode [ 794.616711][T28611] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 794.617790][T28698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.643546][T28698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.700220][T23060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.758550][T28698] team0: Port device team_slave_0 added [ 794.824686][T28698] team0: Port device team_slave_1 added [ 794.843978][T28611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.889818][T28611] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.911439][T28611] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 794.927947][T28611] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 794.946552][T28611] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.970509][T28611] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.988216][T28611] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 794.996715][T28611] usb 2-1: Product: syz [ 795.007936][T28611] usb 2-1: Manufacturer: syz [ 795.034629][T28611] usb 2-1: SerialNumber: syz [ 795.057660][T28611] cdc_mbim 2-1:1.0: skipping garbage [ 795.071471][T28698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.078559][T28698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.116867][T28698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.137198][T28698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.145227][T28698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.172850][T28698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.180090][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 795.242971][T28698] hsr_slave_0: entered promiscuous mode [ 795.272184][T28726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.289615][T28698] hsr_slave_1: entered promiscuous mode [ 795.296200][T28698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.321884][T28698] Cannot create hsr debugfs directory [ 795.329431][ T5852] Bluetooth: hci2: command tx timeout [ 795.706336][T28698] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 795.724045][T28698] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 795.765863][T28698] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 795.868700][T28698] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 795.890583][T28726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 796.099007][T28611] cdc_mbim 2-1:1.0: bind() failure [ 796.125362][T28611] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 796.139880][T28611] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 796.159220][T28611] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 796.199655][T28611] usb 2-1: USB disconnect, device number 95 [ 796.209186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 796.285123][T28698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.348889][T28698] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.381946][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.389433][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.427505][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.434801][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.513623][T28698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.550620][ T5840] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 796.558548][T28698] veth0_vlan: entered promiscuous mode [ 796.574685][T28698] veth1_vlan: entered promiscuous mode [ 796.617590][T28698] veth0_macvtap: entered promiscuous mode [ 796.635560][T28698] veth1_macvtap: entered promiscuous mode [ 796.661407][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.673247][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.683817][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.695559][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.716063][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.728218][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.738817][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.751649][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.752316][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 796.771392][T28698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.774367][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 796.797988][T28769] pimreg: entered allmulticast mode [ 796.819748][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.828055][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.839779][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.839810][ T5840] usb 3-1: Product: syz [ 796.839828][ T5840] usb 3-1: Manufacturer: syz [ 796.839845][ T5840] usb 3-1: SerialNumber: syz [ 796.865599][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.879558][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.891355][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.901791][T28698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.912401][T28698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.926436][T28698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.951602][T28698] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.965599][T28698] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.975374][T28698] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.985298][T28698] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.163437][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.183241][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.249744][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 797.273220][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.287347][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.412416][ T5852] Bluetooth: hci2: command tx timeout [ 797.918859][ T5840] cdc_ncm 3-1:1.0: bind() failure [ 797.936809][ T5840] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 797.946806][ T5840] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 797.960105][ T5840] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 797.974225][ T5840] usb 3-1: USB disconnect, device number 101 [ 798.289359][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 798.628529][T28805] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 798.865903][T28812] cgroup: fork rejected by pids controller in /syz2 [ 799.329567][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 799.503403][ T5852] Bluetooth: hci2: command tx timeout [ 800.379169][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 800.452826][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 800.824396][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.837170][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.845633][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.854441][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.862378][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.197998][T28855] chnl_net:caif_netlink_parms(): no params data found [ 801.333662][T28855] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.341032][T28855] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.348368][T28855] bridge_slave_0: entered allmulticast mode [ 801.356862][T28855] bridge_slave_0: entered promiscuous mode [ 801.367312][T28855] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.374801][T28855] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.382777][T28855] bridge_slave_1: entered allmulticast mode [ 801.391247][T28855] bridge_slave_1: entered promiscuous mode [ 801.409420][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 801.440302][T28855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.453111][T28855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.479193][ T5894] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 801.508814][T28855] team0: Port device team_slave_0 added [ 801.518685][T28855] team0: Port device team_slave_1 added [ 801.560658][T28855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.567687][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.594485][T28855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.599936][ T5841] Bluetooth: hci2: command tx timeout [ 801.617167][T28855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.625163][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.653181][T28855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.668692][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 801.679415][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 801.690022][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.706923][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 801.717329][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.725745][ T5894] usb 2-1: Product: syz [ 801.732251][ T5894] usb 2-1: Manufacturer: syz [ 801.736958][ T5894] usb 2-1: SerialNumber: syz [ 801.812788][T28855] hsr_slave_0: entered promiscuous mode [ 801.826108][T28855] hsr_slave_1: entered promiscuous mode [ 801.833777][T28855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.841883][T28855] Cannot create hsr debugfs directory [ 801.975252][ T5894] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 802.065919][T28855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.158911][T28855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.186697][ T5894] usb 2-1: USB disconnect, device number 96 [ 802.201487][ T5894] usblp0: removed [ 802.257955][T28855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.328757][T28855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.449198][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 802.508591][T28855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.523393][T28855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.534386][T28855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.545220][T28855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.650537][T28855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.680464][T28855] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.706393][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.713637][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.753617][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.760929][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.930242][ T5841] Bluetooth: hci3: command tx timeout [ 803.111138][T28855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.333164][T28855] veth0_vlan: entered promiscuous mode [ 803.379845][T28855] veth1_vlan: entered promiscuous mode [ 803.398079][T28891] netlink: 'syz.5.10249': attribute type 39 has an invalid length. [ 803.481668][ T5897] IPVS: starting estimator thread 0... [ 803.489788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 803.530121][T28855] veth0_macvtap: entered promiscuous mode [ 803.573845][T28855] veth1_macvtap: entered promiscuous mode [ 803.590075][T28896] IPVS: using max 27 ests per chain, 64800 per kthread [ 803.612700][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.635877][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.662653][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.686851][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.698062][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.716739][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.735970][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.756079][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.774513][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.797298][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.821171][T28855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.852049][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.864267][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.874815][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.892154][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.903596][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.914617][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.925331][T28855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.937658][T28855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.965143][T28855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.013055][T28855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.022301][T28855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.033383][T28855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.043045][T28855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.229705][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.237587][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.361307][T23060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.384634][T23060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.529186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 805.009612][ T5841] Bluetooth: hci3: command tx timeout [ 805.579567][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 806.210920][ T5922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 806.245648][T28961] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 806.609508][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 806.779622][T28978] loop6: detected capacity change from 0 to 524287999 [ 806.790031][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.799275][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.807693][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.816945][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.836774][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.846014][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.886712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.895959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.909147][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.918374][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.931756][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.941051][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.953007][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.962284][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.970776][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.980011][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 806.989583][ T5894] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 806.999501][T28978] ldm_validate_partition_table(): Disk read failed. [ 807.010034][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 807.019323][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 807.028334][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 807.037656][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 807.050646][T28978] Dev loop6: unable to read RDB block 0 [ 807.075627][T28978] loop6: unable to read partition table [ 807.082785][T28978] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 807.093748][ T5841] Bluetooth: hci3: command tx timeout [ 807.120817][T28979] ldm_validate_partition_table(): Disk read failed. [ 807.159149][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 807.171158][ T5894] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 807.182884][ T5894] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.194587][T28979] Dev loop6: unable to read RDB block 0 [ 807.200898][ T5894] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.219420][ T5894] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 807.234894][T28979] loop6: unable to read partition table [ 807.240978][T28979] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 807.264297][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 807.279339][ T5894] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 807.298767][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.333645][ T5894] usb 3-1: config 0 descriptor?? [ 807.611962][T28993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 807.649519][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 807.791599][ T5894] kye 0003:0458:5011.00A2: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 807.807174][ T5894] kye 0003:0458:5011.00A2: unknown main item tag 0x0 [ 807.863004][ T5894] kye 0003:0458:5011.00A2: unknown main item tag 0x0 [ 807.891555][ T5894] kye 0003:0458:5011.00A2: unknown main item tag 0x0 [ 807.910031][ T5894] kye 0003:0458:5011.00A2: unknown main item tag 0x0 [ 807.945843][ T5894] kye 0003:0458:5011.00A2: hidraw0: USB HID v0.05 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 807.992242][ T5894] kye 0003:0458:5011.00A2: tablet-enabling feature report not found [ 808.023402][ T5894] kye 0003:0458:5011.00A2: tablet enabling failed [ 808.091232][ T5894] usb 3-1: USB disconnect, device number 102 [ 808.689147][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.776338][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.785228][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.149380][ T5840] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 809.170872][ T5841] Bluetooth: hci3: command tx timeout [ 809.321857][ T5840] usb 6-1: Using ep0 maxpacket: 16 [ 809.341752][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.361412][ T5840] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 809.376044][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.396149][ T5840] usb 6-1: config 0 descriptor?? [ 809.419280][ T5894] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 809.572726][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.585218][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.597456][ T5894] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 809.609460][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.620942][ T5894] usb 3-1: config 0 descriptor?? [ 809.739536][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 809.825299][ T5840] mcp2221 0003:04D8:00DD.00A3: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 810.040939][ T5894] cp2112 0003:10C4:EA90.00A4: unknown main item tag 0x0 [ 810.051284][ T5894] cp2112 0003:10C4:EA90.00A4: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 810.228342][T28766] usb 6-1: USB disconnect, device number 17 [ 810.240947][ T5894] cp2112 0003:10C4:EA90.00A4: Part Number: 0x82 Device Version: 0xFE [ 810.658082][ T5894] cp2112 0003:10C4:EA90.00A4: error setting SMBus config [ 810.682100][ T5894] cp2112 0003:10C4:EA90.00A4: probe with driver cp2112 failed with error -71 [ 810.719170][ T5894] usb 3-1: USB disconnect, device number 103 [ 810.769174][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 811.334766][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.809549][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 812.438312][ T30] audit: type=1326 audit(1744822806.704:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.0.10331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb809f8e169 code=0x0 [ 812.835632][T29095] xt_hashlimit: size too large, truncated to 1048576 [ 812.850331][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 813.905545][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 814.409368][ T5894] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 814.571150][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.584156][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.594113][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.608567][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.623339][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.634978][ T5894] usb 3-1: config 0 descriptor?? [ 814.852675][T29138] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 814.929251][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 815.068672][ T5894] plantronics 0003:047F:FFFF.00A5: No inputs registered, leaving [ 815.088323][ T5894] plantronics 0003:047F:FFFF.00A5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 815.246809][T29147] netlink: 'syz.1.10355': attribute type 1 has an invalid length. [ 815.254972][T29147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.262318][T29147] IPv6: NLM_F_CREATE should be set when creating new route [ 815.272784][T29147] netlink: 'syz.1.10355': attribute type 1 has an invalid length. [ 815.281247][T29147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.969413][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 816.280646][T29177] loop8: detected capacity change from 0 to 8 [ 816.287795][T29177] Dev loop8: unable to read RDB block 8 [ 816.294168][T29177] loop8: unable to read partition table [ 816.300731][T29177] loop8: partition table beyond EOD, truncated [ 816.308311][T29177] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 816.730465][T29188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10374'. [ 816.990485][T29191] input: syz0 as /devices/virtual/input/input91 [ 817.009268][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 817.093662][ T3485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.124775][ T5894] usb 3-1: USB disconnect, device number 104 [ 817.499784][ T5894] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 817.669465][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 817.687538][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 817.704598][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 817.757297][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.783394][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 817.795062][T29219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.796741][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.802424][T28766] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 817.815930][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 817.836224][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 817.863767][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.896622][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 817.921018][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.952776][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 817.965888][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 817.977830][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.991083][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 818.002798][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 818.011681][T28766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.017676][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 818.036868][T28766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.047310][T28766] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 818.049332][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 818.057613][T28766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.065979][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 818.080119][T28766] usb 6-1: config 0 descriptor?? [ 818.096294][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.125545][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 818.129623][ T5897] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 818.320702][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 818.357240][ T5897] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 818.367122][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.398236][ T5897] usb 2-1: config 0 descriptor?? [ 818.412611][T29221] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 818.492707][ T5894] usb 3-1: USB disconnect, device number 105 [ 818.513643][T29227] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 818.736347][T28766] usb 6-1: string descriptor 0 read error: -22 [ 818.860986][ T5897] elan 0003:04F3:0755.00A7: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 818.937481][T28766] uclogic 0003:256C:006D.00A6: failed retrieving string descriptor #100: -71 [ 818.951485][T28766] uclogic 0003:256C:006D.00A6: failed retrieving pen parameters: -71 [ 818.961067][T28766] uclogic 0003:256C:006D.00A6: failed probing pen v1 parameters: -71 [ 818.970148][T28766] uclogic 0003:256C:006D.00A6: failed probing parameters: -71 [ 818.978506][T28766] uclogic 0003:256C:006D.00A6: probe with driver uclogic failed with error -71 [ 819.018978][T28766] usb 6-1: USB disconnect, device number 18 [ 819.058239][ T5897] usb 2-1: USB disconnect, device number 97 [ 819.089134][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 819.541439][T29242] team0: entered promiscuous mode [ 819.546576][T29242] team_slave_0: entered promiscuous mode [ 819.580546][T29242] team_slave_1: entered promiscuous mode [ 819.654858][T29242] team0: left promiscuous mode [ 819.687004][T29242] team_slave_0: left promiscuous mode [ 819.707786][T29242] team_slave_1: left promiscuous mode [ 820.129443][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 820.384198][T29264] [ 820.386587][T29264] ====================================================== [ 820.393636][T29264] WARNING: possible circular locking dependency detected [ 820.400694][T29264] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 820.407840][T29264] ------------------------------------------------------ [ 820.414887][T29264] syz.0.10407/29264 is trying to acquire lock: [ 820.421069][T29264] ffff888058820aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 820.431836][T29264] [ 820.431836][T29264] but task is already holding lock: [ 820.439210][T29264] ffff888058820258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 820.448026][T29264] [ 820.448026][T29264] which lock already depends on the new lock. [ 820.448026][T29264] [ 820.458472][T29264] [ 820.458472][T29264] the existing dependency chain (in reverse order) is: [ 820.467519][T29264] [ 820.467519][T29264] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 820.475187][T29264] lock_acquire+0x116/0x2f0 [ 820.480225][T29264] lock_sock_nested+0x48/0x100 [ 820.485519][T29264] do_ip_setsockopt+0x17e9/0x39c0 [ 820.491073][T29264] ip_setsockopt+0x63/0x100 [ 820.496114][T29264] do_sock_setsockopt+0x3b1/0x710 [ 820.501666][T29264] __x64_sys_setsockopt+0x1ee/0x280 [ 820.507389][T29264] do_syscall_64+0xf3/0x230 [ 820.512423][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.518845][T29264] [ 820.518845][T29264] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 820.526073][T29264] lock_acquire+0x116/0x2f0 [ 820.531105][T29264] __mutex_lock+0x1a5/0x10c0 [ 820.536223][T29264] start_sync_thread+0xde/0x2d60 [ 820.541691][T29264] do_ip_vs_set_ctl+0x48e/0xe50 [ 820.547070][T29264] nf_setsockopt+0x295/0x2c0 [ 820.552209][T29264] smc_setsockopt+0x25c/0xd50 [ 820.557416][T29264] do_sock_setsockopt+0x3b1/0x710 [ 820.562965][T29264] __x64_sys_setsockopt+0x1ee/0x280 [ 820.568685][T29264] do_syscall_64+0xf3/0x230 [ 820.573731][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.580240][T29264] [ 820.580240][T29264] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 820.588860][T29264] validate_chain+0xa69/0x24e0 [ 820.594161][T29264] __lock_acquire+0xad5/0xd80 [ 820.599367][T29264] lock_acquire+0x116/0x2f0 [ 820.604396][T29264] __mutex_lock+0x1a5/0x10c0 [ 820.609515][T29264] smc_switch_to_fallback+0x35/0xda0 [ 820.615325][T29264] smc_sendmsg+0x11f/0x530 [ 820.620269][T29264] __sock_sendmsg+0x221/0x270 [ 820.625477][T29264] __sys_sendto+0x365/0x4c0 [ 820.630499][T29264] __x64_sys_sendto+0xde/0x100 [ 820.635785][T29264] do_syscall_64+0xf3/0x230 [ 820.640821][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.647241][T29264] [ 820.647241][T29264] other info that might help us debug this: [ 820.647241][T29264] [ 820.657480][T29264] Chain exists of: [ 820.657480][T29264] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 820.657480][T29264] [ 820.671063][T29264] Possible unsafe locking scenario: [ 820.671063][T29264] [ 820.678517][T29264] CPU0 CPU1 [ 820.683885][T29264] ---- ---- [ 820.689259][T29264] lock(sk_lock-AF_INET); [ 820.693696][T29264] lock(rtnl_mutex); [ 820.700222][T29264] lock(sk_lock-AF_INET); [ 820.707166][T29264] lock(&smc->clcsock_release_lock); [ 820.712549][T29264] [ 820.712549][T29264] *** DEADLOCK *** [ 820.712549][T29264] [ 820.720691][T29264] 1 lock held by syz.0.10407/29264: [ 820.725890][T29264] #0: ffff888058820258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 820.735142][T29264] [ 820.735142][T29264] stack backtrace: [ 820.741051][T29264] CPU: 1 UID: 0 PID: 29264 Comm: syz.0.10407 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 820.741075][T29264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.741091][T29264] Call Trace: [ 820.741100][T29264] [ 820.741108][T29264] dump_stack_lvl+0x241/0x360 [ 820.741139][T29264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.741164][T29264] ? __pfx__printk+0x10/0x10 [ 820.741189][T29264] ? print_lock+0x171/0x1a0 [ 820.741211][T29264] print_circular_bug+0x2e1/0x300 [ 820.741235][T29264] check_noncircular+0x142/0x160 [ 820.741260][T29264] validate_chain+0xa69/0x24e0 [ 820.741284][T29264] ? update_curr_se+0x8f/0x240 [ 820.741308][T29264] __lock_acquire+0xad5/0xd80 [ 820.741329][T29264] lock_acquire+0x116/0x2f0 [ 820.741345][T29264] ? smc_switch_to_fallback+0x35/0xda0 [ 820.741370][T29264] __mutex_lock+0x1a5/0x10c0 [ 820.741390][T29264] ? smc_switch_to_fallback+0x35/0xda0 [ 820.741410][T29264] ? futex_wait_queue+0x31/0x1f0 [ 820.741426][T29264] ? futex_unqueue+0xcb/0xf0 [ 820.741452][T29264] ? smc_switch_to_fallback+0x35/0xda0 [ 820.741471][T29264] ? __pfx___mutex_lock+0x10/0x10 [ 820.741495][T29264] ? __local_bh_enable_ip+0x168/0x200 [ 820.741511][T29264] ? lockdep_hardirqs_on+0x9d/0x150 [ 820.741531][T29264] ? __local_bh_enable_ip+0x168/0x200 [ 820.741549][T29264] smc_switch_to_fallback+0x35/0xda0 [ 820.741568][T29264] ? do_raw_spin_unlock+0x13c/0x8b0 [ 820.741596][T29264] smc_sendmsg+0x11f/0x530 [ 820.741615][T29264] ? __pfx_smc_sendmsg+0x10/0x10 [ 820.741634][T29264] __sock_sendmsg+0x221/0x270 [ 820.741658][T29264] __sys_sendto+0x365/0x4c0 [ 820.741676][T29264] ? __pfx___sys_sendto+0x10/0x10 [ 820.741690][T29264] ? do_futex+0x37c/0x5a0 [ 820.741734][T29264] __x64_sys_sendto+0xde/0x100 [ 820.741751][T29264] do_syscall_64+0xf3/0x230 [ 820.741772][T29264] ? clear_bhb_loop+0x45/0xa0 [ 820.741791][T29264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.741813][T29264] RIP: 0033:0x7fb809f8e169 [ 820.741833][T29264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.741848][T29264] RSP: 002b:00007fb80aea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 820.741868][T29264] RAX: ffffffffffffffda RBX: 00007fb80a1b5fa0 RCX: 00007fb809f8e169 [ 820.741881][T29264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 820.741892][T29264] RBP: 00007fb80a010a68 R08: 0000200000e68000 R09: 0000000000000010 [ 820.741904][T29264] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 820.741915][T29264] R13: 0000000000000000 R14: 00007fb80a1b5fa0 R15: 00007fb80a2dfa28 [ 820.741934][T29264] [ 821.003139][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.169128][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 822.209919][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 822.209949][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 823.249105][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 824.289539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 825.329120][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 826.369387][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 827.330042][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 827.409113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 828.449341][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 829.489119][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available