last executing test programs: 1m2.494224938s ago: executing program 1 (id=11726): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 1m2.416778438s ago: executing program 1 (id=11728): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x49000, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000180)) 1m2.237139104s ago: executing program 1 (id=11732): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073"], 0x40}}, 0x0) 1m2.113989944s ago: executing program 1 (id=11735): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 1m2.113413914s ago: executing program 1 (id=11736): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 1m1.97961317s ago: executing program 1 (id=11738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 47.924647175s ago: executing program 32 (id=11738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 43.541023139s ago: executing program 3 (id=11951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3}) 43.076458185s ago: executing program 3 (id=11958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 42.954398613s ago: executing program 3 (id=11960): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 42.865845298s ago: executing program 3 (id=11961): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x40000001}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 42.692638848s ago: executing program 3 (id=11965): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'lo\x00'}) wait4(0x0, &(0x7f0000000240), 0x40000000, 0x0) 42.408380042s ago: executing program 3 (id=11969): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.31406669s ago: executing program 33 (id=11969): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.899001512s ago: executing program 0 (id=12556): r0 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x400, 0x200, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x2}}}], 0x18}}], 0x2, 0x8004) 2.665344385s ago: executing program 0 (id=12560): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x55f2, 0x0, 0x0, 0x1000}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000100", 0x41d) 2.584081776s ago: executing program 5 (id=12562): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) 2.373238473s ago: executing program 0 (id=12564): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, @dev}, 0x10) poll(&(0x7f0000000280)=[{r0, 0x1}], 0x1, 0x0) 2.356462609s ago: executing program 5 (id=12565): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x1000000000004}}) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) 2.17598323s ago: executing program 2 (id=12566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x4, 0xc, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) 2.093508643s ago: executing program 2 (id=12567): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000005c0)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffd}) 2.029891669s ago: executing program 2 (id=12569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}}, 0x0) 1.522790629s ago: executing program 0 (id=12572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002400), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000600110000080000080001"], 0x2c}}, 0x0) 1.27302323s ago: executing program 5 (id=12574): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0xfffa, 0x2}, 0x4) 1.24088284s ago: executing program 2 (id=12576): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{}], 0x1, 0xe4, 0x0, 0x0, 0x0, 0x5c}) 1.164169795s ago: executing program 4 (id=12577): connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4d, 0x0, 0x20000000) 1.161928639s ago: executing program 0 (id=12578): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000480)) 1.079688307s ago: executing program 0 (id=12579): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.079249174s ago: executing program 5 (id=12580): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 1.006630307s ago: executing program 5 (id=12581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 1.006245059s ago: executing program 2 (id=12582): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 1.005834275s ago: executing program 6 (id=12583): r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0xee00, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 905.106488ms ago: executing program 6 (id=12584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) 838.204912ms ago: executing program 5 (id=12585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x11}, 0x0, 0x0, 0x0, 0x0}) 817.930478ms ago: executing program 6 (id=12586): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) 775.694729ms ago: executing program 4 (id=12587): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xd) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xd, 0x0, 0x0) 755.649422ms ago: executing program 2 (id=12588): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 635.6279ms ago: executing program 6 (id=12589): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 635.000755ms ago: executing program 4 (id=12590): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140)) 415.100661ms ago: executing program 4 (id=12591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x101, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) 414.61987ms ago: executing program 6 (id=12592): openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 329.015307ms ago: executing program 6 (id=12593): r0 = timerfd_create(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/194, 0xc2) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) 298.222219ms ago: executing program 4 (id=12594): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) 0s ago: executing program 4 (id=12595): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r0, 0x3, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) kernel console output (not intermixed with test programs): hange request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.174018][ T6576] usb 2-1: Using ep0 maxpacket: 32 [ 547.190413][ T6576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.201825][ T6576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.229604][ T6576] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.246362][ T6576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.290580][ T6576] usb 2-1: config 0 descriptor?? [ 547.300309][ T6576] hub 2-1:0.0: USB hub found [ 547.491763][ T6576] hub 2-1:0.0: 1 port detected [ 547.710303][T28424] @: renamed from veth0_vlan (while UP) [ 547.726380][ T6576] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 547.733043][ T6576] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 547.776596][ T6576] usbhid 2-1:0.0: can't add hid device: -71 [ 547.782817][ T6576] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 547.815265][ T6576] usb 2-1: USB disconnect, device number 21 [ 548.838023][T28504] netlink: 1132 bytes leftover after parsing attributes in process `syz.2.11061'. [ 548.965643][T28514] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11065'. [ 549.020412][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11067'. [ 549.345719][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 549.486138][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 549.497653][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.510140][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 549.529707][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 549.553296][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 549.578424][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.607570][ T46] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 549.631177][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.650416][ T46] usb 5-1: Product: syz [ 549.657086][ T46] usb 5-1: Manufacturer: syz [ 549.662010][ T46] usb 5-1: SerialNumber: syz [ 549.679957][ T46] usb 5-1: config 0 descriptor?? [ 549.690966][ T46] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input89 [ 549.945728][ T6576] usb 5-1: USB disconnect, device number 27 [ 549.945843][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 550.220726][ T46] IPVS: starting estimator thread 0... [ 550.306805][T28603] netlink: 'syz.0.11107': attribute type 3 has an invalid length. [ 550.323724][T28594] IPVS: using max 15 ests per chain, 36000 per kthread [ 550.644800][T28624] dns_resolver: Unsupported server list version (0) [ 550.734958][T28633] netlink: 'syz.3.11122': attribute type 10 has an invalid length. [ 550.805917][T28633] bridge0: port 3(team0) entered disabled state [ 550.858799][T28633] team0: left allmulticast mode [ 550.863906][T28633] team_slave_0: left allmulticast mode [ 550.901997][T28633] team_slave_1: left allmulticast mode [ 550.907526][T28633] mac80211_hwsim hwsim9 : left allmulticast mode [ 550.941505][T28633] team0: left promiscuous mode [ 550.946327][T28633] team_slave_0: left promiscuous mode [ 550.979829][T28633] team_slave_1: left promiscuous mode [ 550.985383][T28633] mac80211_hwsim hwsim9 : left promiscuous mode [ 551.001394][T28633] bridge0: port 3(team0) entered disabled state [ 551.030610][T28633] batman_adv: batadv0: Adding interface: team0 [ 551.038859][T28633] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.076767][T28633] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 551.115534][T28644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11129'. [ 551.171738][T28660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.937359][T28720] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 552.152492][T28736] ip6t_srh: unknown srh invflags 7863 [ 552.425603][T28757] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 552.500014][ T29] audit: type=1326 audit(1731322328.153:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28760 comm="syz.0.11179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40f7e719 code=0x7ffc0000 [ 552.521963][ T6576] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 552.550797][ T29] audit: type=1326 audit(1731322328.153:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28760 comm="syz.0.11179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40f7e719 code=0x7ffc0000 [ 552.602807][ T29] audit: type=1326 audit(1731322328.153:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28760 comm="syz.0.11179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3b40f7e719 code=0x7ffc0000 [ 552.607486][T28766] openvswitch: netlink: Message has -1 unknown bytes. [ 552.665718][ T29] audit: type=1326 audit(1731322328.153:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28760 comm="syz.0.11179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40f7e719 code=0x7ffc0000 [ 552.688748][ T6576] usb 4-1: Using ep0 maxpacket: 16 [ 552.709478][ T29] audit: type=1326 audit(1731322328.153:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28760 comm="syz.0.11179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40f7e719 code=0x7ffc0000 [ 552.712968][T28771] netlink: 'syz.2.11185': attribute type 10 has an invalid length. [ 552.752877][ T6576] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 552.762273][ T6576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.784562][ T6576] usb 4-1: Product: syz [ 552.788862][ T6576] usb 4-1: Manufacturer: syz [ 552.793070][T28771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11185'. [ 552.811818][ T6576] usb 4-1: SerialNumber: syz [ 552.832912][ T6576] usb 4-1: config 0 descriptor?? [ 552.857332][ T6576] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 552.889445][T28771] team0: Port device geneve0 added [ 553.036259][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 553.215189][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.228220][ T25] usb 2-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=2c.d4 [ 553.237953][ T25] usb 2-1: New USB device strings: Mfr=4, Product=2, SerialNumber=3 [ 553.239342][ T6576] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 553.250615][ T25] usb 2-1: Product: syz [ 553.258251][ T25] usb 2-1: Manufacturer: syz [ 553.263028][ T6576] visor 4-1:0.0: probe with driver visor failed with error -71 [ 553.263657][ T25] usb 2-1: SerialNumber: syz [ 553.279382][ T25] usb 2-1: config 0 descriptor?? [ 553.285976][ T25] usb 2-1: Could not find all expected endpoints [ 553.286062][ T6576] usb 4-1: USB disconnect, device number 20 [ 553.381214][ T46] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 553.419090][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 553.430663][ T6489] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 553.490744][ T6576] usb 2-1: USB disconnect, device number 22 [ 553.549342][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.559761][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.567802][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 553.570475][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.575490][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.584051][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.602191][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.603680][ T6489] usb 3-1: Using ep0 maxpacket: 8 [ 553.612062][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.629551][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.630361][ T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 553.650438][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.650491][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.659581][ T6489] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 553.678296][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 553.684637][ T6489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.686559][ T8] hub 5-1:1.0: probe with driver hub failed with error -5 [ 553.692947][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.706931][ T8] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 553.712549][ T6489] usb 3-1: Product: syz [ 553.722646][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.731659][ T6489] usb 3-1: Manufacturer: syz [ 553.765495][ T6489] usb 3-1: SerialNumber: syz [ 553.775663][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.786044][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.796406][ T6489] r8152-cfgselector 3-1: Unknown version 0x0000 [ 553.802871][ T6489] r8152-cfgselector 3-1: config 0 descriptor?? [ 553.810266][ T46] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.819782][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.827804][ T46] usb 1-1: SerialNumber: syz [ 554.024557][ T8] usb 5-1: USB disconnect, device number 28 [ 554.033824][ T46] usb 1-1: USB disconnect, device number 21 [ 554.182653][ T6493] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 554.256396][ T8] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 554.328508][ T6493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 554.349270][ T6493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 554.364487][ T6493] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 554.379374][ T6493] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.388905][ T6493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 554.397312][ T6493] usb 4-1: SerialNumber: syz [ 554.414027][T28805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 554.425252][ T6493] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 554.522051][T28827] tmpfs: Bad value for 'mpol' [ 554.593000][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 554.639442][ T6493] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 554.668987][ T6493] usb 4-1: USB disconnect, device number 21 [ 554.711039][T28835] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 554.751390][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 554.804083][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.815229][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 554.827169][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 554.853188][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 554.864743][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.021588][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 555.030733][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.052796][ T9] usb 2-1: Product: syz [ 555.057001][ T9] usb 2-1: Manufacturer: syz [ 555.062252][ T9] usb 2-1: SerialNumber: syz [ 555.069030][ T9] usb 2-1: config 0 descriptor?? [ 555.331315][ T9] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 555.341312][T28870] ufs: Invalid option: "0(eLd9(@ 8L)uH\dKzLVR<%5rƌze ~I2~ [ 555.341312][T28870] r0Rpyh:Y [ 555.341312][T28870] O\zY" or missing value [ 555.361425][ T9] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 555.370430][T28870] ufs: wrong mount options [ 555.409693][ T9] usb 2-1: USB disconnect, device number 23 [ 555.635275][T28889] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.11241'. [ 555.772074][T28896] netlink: 'syz.0.11245': attribute type 2 has an invalid length. [ 556.211958][T28932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11264'. [ 556.699641][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 556.705220][T28961] program syz.0.11277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.740144][T28963] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 556.857451][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 556.948962][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.971700][ T46] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 556.990747][T28977] netlink: 'syz.2.11288': attribute type 33 has an invalid length. [ 557.000316][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.008787][T28981] xt_l2tp: invalid flags combination: c [ 557.037733][ T46] usb 5-1: Product: syz [ 557.044821][ T46] usb 5-1: Manufacturer: syz [ 557.071013][ T46] usb 5-1: SerialNumber: syz [ 557.126253][ T46] usb 5-1: config 0 descriptor?? [ 557.299665][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11298'. [ 557.350000][ T46] usb 5-1: Not enough endpoints found in device, aborting! [ 557.542515][ T46] usb 5-1: USB disconnect, device number 29 [ 557.814291][T29038] trusted_key: encrypted_key: hex blob is missing [ 557.889018][ T29] audit: type=1326 audit(1731322333.915:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29039 comm="syz.1.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 557.911286][ T29] audit: type=1326 audit(1731322333.915:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29039 comm="syz.1.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 557.933182][ T29] audit: type=1326 audit(1731322333.915:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29039 comm="syz.1.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 557.955167][ T29] audit: type=1326 audit(1731322333.915:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29039 comm="syz.1.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 557.977162][ T29] audit: type=1326 audit(1731322333.915:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29039 comm="syz.1.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 558.111656][T29051] xt_CT: No such helper "syz0" [ 558.394281][T29076] netlink: 772 bytes leftover after parsing attributes in process `syz.1.11335'. [ 558.433106][ T46] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 558.487460][T29083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.582277][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 558.590108][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 558.611428][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.621799][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 558.637885][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 558.659819][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 558.674836][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.689204][ T46] usb 3-1: Product: syz [ 558.693403][ T46] usb 3-1: Manufacturer: syz [ 558.698102][ T46] usb 3-1: SerialNumber: syz [ 558.706241][ T46] usb 3-1: config 0 descriptor?? [ 558.714513][ T46] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 558.789502][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 558.801262][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 558.820970][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 558.851699][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 558.872910][ T25] usb 1-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 558.882907][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.901401][ T25] usb 1-1: Product: syz [ 558.923129][ T25] usb 1-1: Manufacturer: syz [ 558.942149][ T25] usb 1-1: SerialNumber: syz [ 558.947483][T29103] netlink: 'syz.4.11348': attribute type 21 has an invalid length. [ 558.966484][ T25] usb 1-1: config 0 descriptor?? [ 558.971652][T29103] netlink: 'syz.4.11348': attribute type 1 has an invalid length. [ 558.979968][T29071] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 559.106474][ T25] usb 3-1: USB disconnect, device number 31 [ 559.207435][ T8] usb 1-1: USB disconnect, device number 22 [ 559.288016][T29123] netlink: 'syz.1.11358': attribute type 11 has an invalid length. [ 559.306197][T29123] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11358'. [ 559.630308][T29143] binder: 29142:29143 ioctl c0306201 20001a80 returned -14 [ 559.739795][T29147] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11372'. [ 560.171435][T29184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11389'. [ 560.446782][T29205] binder: 29204:29205 ioctl 40046210 0 returned -14 [ 560.622277][T29219] netlink: 'syz.4.11406': attribute type 5 has an invalid length. [ 560.878083][T29241] netlink: 'syz.4.11417': attribute type 30 has an invalid length. [ 561.231578][T29267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11430'. [ 561.303807][T29272] overlay: Unknown parameter 'y^\@\+\' [ 561.495931][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11439'. [ 561.566085][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11442'. [ 561.686757][T29299] Scaler: ================= START STATUS ================= [ 561.723317][T29299] Scaler: ================== END STATUS ================== [ 561.951401][T29320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11455'. [ 561.965340][ T46] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 561.983979][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 562.065443][ T29] audit: type=1326 audit(1731322338.410:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29326 comm="syz.4.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.089938][ T29] audit: type=1326 audit(1731322338.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29326 comm="syz.4.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.114329][T29329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11460'. [ 562.135655][ T29] audit: type=1326 audit(1731322338.474:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29326 comm="syz.4.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.160299][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 562.169438][ T46] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 562.178492][ T46] usb 3-1: config 0 has no interface number 0 [ 562.186225][ T46] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.209702][ T46] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 562.249211][ T46] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 562.249533][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.267676][ T46] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 562.284456][ T46] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.288329][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 562.299998][ T46] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 562.313629][ T9] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 562.322760][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.324868][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.329851][ T9] usb 4-1: config 0 descriptor?? [ 562.370167][ T46] usb 3-1: Product: syz [ 562.392069][ T29] audit: type=1326 audit(1731322338.764:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29326 comm="syz.4.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.415638][ T46] usb 3-1: Manufacturer: syz [ 562.421541][ T46] usb 3-1: SerialNumber: syz [ 562.442199][ T46] usb 3-1: config 0 descriptor?? [ 562.453674][T29303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 562.463996][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.483655][ T29] audit: type=1326 audit(1731322338.764:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29326 comm="syz.4.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.635429][T29348] tmpfs: Bad value for 'mpol' [ 562.686536][ T29] audit: type=1326 audit(1731322339.086:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.757382][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 562.769378][ T9] Bluetooth: Can't get state to change to load configuration err [ 562.777708][ T9] Bluetooth: Loading sysconfig file failed [ 562.783557][ T9] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 562.790207][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11473'. [ 562.800214][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11473'. [ 562.815235][ T29] audit: type=1326 audit(1731322339.086:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.840474][ T25] usb 3-1: USB disconnect, device number 32 [ 562.864128][ T9] usb 4-1: USB disconnect, device number 22 [ 562.921702][ T29] audit: type=1326 audit(1731322339.086:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.944146][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 562.964803][ T29] audit: type=1326 audit(1731322339.086:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 562.987075][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 562.998941][ T29] audit: type=1326 audit(1731322339.086:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 563.025565][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.044740][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.053557][ T8] usb 1-1: Product: syz [ 563.069454][ T8] usb 1-1: Manufacturer: syz [ 563.081732][ T8] usb 1-1: SerialNumber: syz [ 563.107885][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 563.334936][ T25] usb 1-1: USB disconnect, device number 23 [ 563.768602][T29413] (syz.4.11501,29413,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 563.788179][T29413] (syz.4.11501,29413,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 563.977325][T29427] netlink: 'syz.2.11506': attribute type 10 has an invalid length. [ 564.012565][T29427] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11506'. [ 564.058567][T29427] bond0: (slave team0): Releasing backup interface [ 564.101561][T29427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.135408][T29432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11509'. [ 564.147079][T29432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11509'. [ 564.217631][T29439] syz.0.11514: attempt to access beyond end of device [ 564.217631][T29439] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 564.240144][T29439] syz.0.11514: attempt to access beyond end of device [ 564.240144][T29439] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 564.282010][T29439] Mount JFS Failure: -5 [ 564.296290][T29439] jfs_mount failed w/return code = -5 [ 564.321085][T29447] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 564.667757][T29473] netlink: 'syz.0.11531': attribute type 1 has an invalid length. [ 564.750013][T29480] netlink: 'syz.2.11534': attribute type 1 has an invalid length. [ 564.797329][ T46] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 564.806085][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 565.022704][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 565.031029][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 565.043427][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 565.054972][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.066370][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.076484][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64 [ 565.091752][ T25] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 565.102335][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 565.114110][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.125728][ T46] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 565.134978][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.142998][ T46] usb 5-1: Product: syz [ 565.156874][ T25] usb 2-1: config 0 descriptor?? [ 565.162010][ T46] usb 5-1: Manufacturer: syz [ 565.176968][ T46] usb 5-1: SerialNumber: syz [ 565.206073][ T46] usb 5-1: config 0 descriptor?? [ 565.218913][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 565.325402][T29508] lo: MTU too low for tipc bearer [ 565.341227][T29508] tipc: Enabling of bearer rejected, failed to enable media [ 565.386636][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 565.397188][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 565.407451][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.415728][ T9] usb 1-1: Product: syz [ 565.420272][ T9] usb 1-1: Manufacturer: syz [ 565.425285][ T9] usb 1-1: SerialNumber: syz [ 565.432129][ T9] usb 1-1: config 0 descriptor?? [ 565.452811][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 565.556727][ T25] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 565.607021][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.614049][ T46] input input90: Device does not respond to id packet M [ 565.628433][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.641690][ T46] input input90: Device does not respond to id packet P [ 565.659386][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.683837][ T46] input input90: Device does not respond to id packet B [ 565.702162][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.708939][ T46] input input90: Device does not respond to id packet N [ 565.720376][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.740049][ T25] usb 2-1: USB disconnect, device number 24 [ 565.769031][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.782388][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.794224][ T46] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 565.804808][ T46] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input90 [ 565.847375][ T46] usb 5-1: USB disconnect, device number 30 [ 566.001727][T29536] UBIFS error (pid: 29536): cannot open "ub", error -22 [ 566.017812][ T9] gspca_stk1135: reg_w 0x3 err -71 [ 566.039826][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.051955][ T9] gspca_stk1135: Sensor write failed [ 566.059570][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.065948][ T9] gspca_stk1135: Sensor write failed [ 566.074144][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.080769][ T9] gspca_stk1135: Sensor read failed [ 566.088200][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.094660][ T9] gspca_stk1135: Sensor read failed [ 566.100125][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 566.107680][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.114558][ T9] gspca_stk1135: Sensor read failed [ 566.119798][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.150300][ T9] gspca_stk1135: Sensor read failed [ 566.169793][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.182064][ T9] gspca_stk1135: Sensor write failed [ 566.190531][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 566.203312][ T9] gspca_stk1135: Sensor write failed [ 566.210187][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 566.224848][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 566.245570][ T9] usb 1-1: USB disconnect, device number 24 [ 566.368384][T29553] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 566.385826][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 566.393547][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.421176][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.436028][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 566.449383][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.488218][ T8] usb 3-1: config 0 descriptor?? [ 566.496432][ T8] hub 3-1:0.0: USB hub found [ 566.690766][ T8] hub 3-1:0.0: 1 port detected [ 566.877990][ T8] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 566.884498][ T8] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 566.907724][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 566.913761][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 566.962246][ T8] usb 3-1: USB disconnect, device number 33 [ 567.014194][T29589] __nla_validate_parse: 2 callbacks suppressed [ 567.014214][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11585'. [ 567.054087][T29589] nbd: socks must be embedded in a SOCK_ITEM attr [ 567.312786][T29607] tipc: Enabling of bearer rejected, failed to enable media [ 567.432749][T29614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11599'. [ 567.569238][T29622] veth0_vlan: left promiscuous mode [ 567.578185][T29622] veth0_vlan: entered promiscuous mode [ 568.081189][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 568.294933][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 568.318276][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 568.334480][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 568.344101][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.361243][T29680] sp0: Synchronizing with TNC [ 568.373162][ T8] usb 5-1: Product: syz [ 568.377931][ T8] usb 5-1: Manufacturer: syz [ 568.382571][ T8] usb 5-1: SerialNumber: syz [ 568.411758][ T8] usb 5-1: config 0 descriptor?? [ 568.424880][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 568.432036][ T8] pvrusb2: ********** [ 568.440425][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 568.480505][ T8] pvrusb2: Important functionality might not be entirely working. [ 568.498731][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 568.545398][ T8] pvrusb2: ********** [ 568.617616][ T2330] pvrusb2: Invalid write control endpoint [ 568.646883][ T29] audit: type=1326 audit(1731322345.474:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 568.738523][ T2330] pvrusb2: Invalid write control endpoint [ 568.752799][ T29] audit: type=1326 audit(1731322345.474:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 568.780185][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 568.794055][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 568.806404][T29700] tmpfs: Bad value for 'mpol' [ 568.817975][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 568.828416][ T29] audit: type=1326 audit(1731322345.506:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 568.856766][ T8] usb 5-1: USB disconnect, device number 31 [ 568.874159][ T2330] pvrusb2: Device being rendered inoperable [ 568.886179][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 568.893775][ T29] audit: type=1326 audit(1731322345.506:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 568.915743][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 568.926457][ T2330] pvrusb2: Attached sub-driver cx25840 [ 568.932071][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 568.974653][ T29] audit: type=1326 audit(1731322345.506:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 569.002197][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 569.017106][ T29] audit: type=1326 audit(1731322345.517:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 569.038939][ T29] audit: type=1326 audit(1731322345.517:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 569.060807][ T29] audit: type=1326 audit(1731322345.517:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29693 comm="syz.1.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7877e719 code=0x7ffc0000 [ 569.258063][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 569.422572][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 569.434531][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 569.444090][T29721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11649'. [ 569.461661][ T25] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 569.471161][ T25] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 569.487050][ T25] usb 1-1: Product: syz [ 569.501072][ T25] usb 1-1: Manufacturer: syz [ 569.512578][ T25] usb 1-1: SerialNumber: syz [ 569.517437][ T6489] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 569.689519][ T6489] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 569.700186][ T6489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.718374][ T6489] usb 2-1: Product: syz [ 569.730308][ T6489] usb 2-1: Manufacturer: syz [ 569.730491][ T25] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 569.743628][ T6489] usb 2-1: SerialNumber: syz [ 569.758328][ T6489] usb 2-1: config 0 descriptor?? [ 569.767668][ T25] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 569.779046][ T6489] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 569.786036][ T6489] usb 2-1: No valid video chain found. [ 569.792434][ T25] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 569.811625][ T25] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 569.922226][ T25] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 569.944099][ T25] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 569.964235][ T25] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 569.993610][ T6489] usb 2-1: USB disconnect, device number 25 [ 570.023275][ T25] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 570.047545][ T25] usb 1-1: USB disconnect, device number 25 [ 570.066809][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 570.101029][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 570.126378][ T25] visor 1-1:1.0: device disconnected [ 570.214203][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 570.402004][ T8] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 570.426073][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.460024][ T8] usb 4-1: Product: syz [ 570.464250][ T8] usb 4-1: Manufacturer: syz [ 570.484179][ T8] usb 4-1: SerialNumber: syz [ 570.499714][ T8] usb 4-1: config 0 descriptor?? [ 570.523260][ T8] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 570.592994][T29765] program syz.2.11670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.856788][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 571.006465][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 571.035652][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.052981][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 571.065753][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 571.077734][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 571.089248][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 571.099459][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 571.110648][ T8] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 571.121626][ T8] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 571.142019][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 571.147674][ T8] usb 4-1: USB disconnect, device number 23 [ 571.173115][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 571.208177][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 571.222503][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.240854][ T25] usb 1-1: Product: syz [ 571.255189][ T25] usb 1-1: Manufacturer: syz [ 571.262802][ T25] usb 1-1: SerialNumber: syz [ 571.292642][ T25] usb 1-1: config 0 descriptor?? [ 571.310075][T29769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 571.435249][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 571.519128][ T25] cxacru 1-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 571.532703][T29811] cxacru 1-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 571.545844][ T25] usb 1-1: USB disconnect, device number 26 [ 571.556054][T29811] cxacru 1-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 571.662511][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.674468][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 571.705954][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.737281][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.758559][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 571.872884][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.880754][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 571.891775][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.903780][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.915288][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 571.937790][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.945438][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 571.956339][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.968267][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.979841][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 572.025286][ T9] usb 3-1: string descriptor 0 read error: -22 [ 572.031604][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 572.040640][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.065654][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 572.277327][ T6576] usb 3-1: USB disconnect, device number 34 [ 572.346130][T29852] batadv0: Device is already in use. [ 572.860856][ T6489] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 573.038450][ T6489] usb 4-1: Using ep0 maxpacket: 32 [ 573.058549][ T6489] usb 4-1: config 1 has an invalid interface number: 4 but max is 0 [ 573.066887][ T6489] usb 4-1: config 1 has an invalid interface number: 67 but max is 0 [ 573.078693][ T6489] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 573.114323][ T6489] usb 4-1: config 1 has no interface number 0 [ 573.123465][ T6489] usb 4-1: config 1 has no interface number 1 [ 573.129605][ T6489] usb 4-1: too many endpoints for config 1 interface 67 altsetting 100: 222, using maximum allowed: 30 [ 573.156429][ T6489] usb 4-1: config 1 interface 67 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 222 [ 573.172971][ T6489] usb 4-1: config 1 interface 4 has no altsetting 0 [ 573.180682][ T6489] usb 4-1: config 1 interface 67 has no altsetting 0 [ 573.254031][T29898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11732'. [ 573.384944][ T6489] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0018, bcdDevice=91.00 [ 573.395618][ T6489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.404011][ T6489] usb 4-1: Product: syz [ 573.408347][ T6489] usb 4-1: Manufacturer: syz [ 573.413187][ T6489] usb 4-1: SerialNumber: syz [ 573.671940][ T6489] em28xx 4-1:1.4: New device syz syz @ 480 Mbps (0fd9:0018, interface 4, class 4) [ 573.702443][ T6489] em28xx 4-1:1.4: DVB interface 4 found: bulk [ 573.771855][T29917] netlink: 'syz.4.11742': attribute type 3 has an invalid length. [ 573.791152][T29917] netlink: 'syz.4.11742': attribute type 1 has an invalid length. [ 573.809516][T29917] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.11742'. [ 573.962367][T29921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11744'. [ 574.607860][T29938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11753'. [ 575.079866][ T6576] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 575.169667][T29955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11761'. [ 575.200909][T29955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11761'. [ 575.228256][ T6576] usb 3-1: Using ep0 maxpacket: 8 [ 575.239196][ T6576] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.264640][ T6576] usb 3-1: config 0 has no interface number 0 [ 575.291390][ T6576] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.337605][ T6576] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 575.379569][ T6576] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 575.415607][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.456393][ T6576] usb 3-1: config 0 descriptor?? [ 575.474630][ T6489] em28xx 4-1:1.4: unknown em28xx chip ID (0) [ 575.503189][ T6576] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 575.670210][T29945] iowarrior 3-1:0.1: Error -90 while submitting URB [ 575.714294][ T6576] usb 3-1: USB disconnect, device number 35 [ 575.727965][ T6489] em28xx 4-1:1.4: reading from i2c device at 0xa0 failed (error=-5) [ 575.746493][ T6489] em28xx 4-1:1.4: board has no eeprom [ 575.749283][ T6576] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 575.825121][ T6489] em28xx 4-1:1.4: Identified as Elgato EyeTV Hybrid 2008 INT (card=97) [ 575.843817][ T6489] em28xx 4-1:1.4: dvb set to bulk mode. [ 575.849467][ T6519] em28xx 4-1:1.4: Binding DVB extension [ 575.891220][ T6489] usb 4-1: USB disconnect, device number 24 [ 575.900807][ T6519] em28xx 4-1:1.4: writing to i2c device at 0x82 failed (error=-19) [ 575.910398][ T6519] em28xx 4-1:1.4: writing to i2c device at 0x82 failed (error=-19) [ 575.921743][ T6519] em28xx 4-1:1.4: writing to i2c device at 0x82 failed (error=-19) [ 575.946309][ T6489] em28xx 4-1:1.4: Disconnecting em28xx [ 576.025531][ T6519] DVB: Unable to find symbol drxk_attach() [ 576.032425][ T6519] em28xx 4-1:1.4: Registering input extension [ 576.053956][ T6489] em28xx 4-1:1.4: Closing input extension [ 576.087768][ T6489] em28xx 4-1:1.4: Freeing device [ 576.611080][T29987] batadv0: entered promiscuous mode [ 576.636204][T29987] macvtap0: entered promiscuous mode [ 576.647586][T29987] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 577.433385][T30007] tipc: Started in network mode [ 577.449771][T30007] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 577.483870][T30007] tipc: Enabled bearer , priority 0 [ 577.606951][ T6576] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 577.782647][ T6576] usb 4-1: Using ep0 maxpacket: 32 [ 577.796754][ T6576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.855532][ T6576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.909740][ T6576] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.959161][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 577.986372][ T6576] usb 4-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 578.027507][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.072950][ T6576] usb 4-1: config 0 descriptor?? [ 578.146286][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.173460][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.220158][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 578.261026][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.308592][ T9] usb 5-1: config 0 descriptor?? [ 578.527967][ T6490] tipc: Node number set to 10136234 [ 578.612281][ T6576] wacom 0003:056A:0116.0002: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.3-1/input0 [ 578.731522][ T6489] usb 4-1: USB disconnect, device number 25 [ 578.750590][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 578.761615][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input95 [ 578.823333][ T9] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 578.953151][ T9] usb 5-1: USB disconnect, device number 32 [ 580.777394][T30072] netlink: 'syz.3.11815': attribute type 10 has an invalid length. [ 581.151038][T30078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11818'. [ 581.709521][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11826'. [ 583.010735][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 583.152490][ T9] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 583.161125][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 583.179211][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.197557][ T9] usb 5-1: config 0 has no interface number 0 [ 583.210909][ T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 583.231824][ T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 583.254157][ T9] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.282656][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 583.294282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 583.309883][ T9] usb 5-1: SerialNumber: syz [ 583.322247][ T9] usb 5-1: config 0 descriptor?? [ 583.337985][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 583.527362][ T9] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 583.537952][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.549908][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 583.606417][ T9] usb 5-1: USB disconnect, device number 33 [ 583.744727][T29344] udevd[29344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.256070][T30136] atomic_op ffff88806dc99198 conn xmit_atomic 0000000000000000 [ 585.229153][ T6519] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 585.416648][ T6519] usb 5-1: config 0 has no interfaces? [ 585.424453][ T6519] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 585.462032][ T6519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.518196][T30146] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 585.525281][T30146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.565580][T30146] vhci_hcd vhci_hcd.0: Device attached [ 585.683142][ T6519] usb 5-1: config 0 descriptor?? [ 585.751304][ T46] vhci_hcd: vhci_device speed not set [ 585.807542][ T46] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 585.924055][T30147] vhci_hcd: unknown pdu 1 [ 585.938337][ T2998] vhci_hcd: stop threads [ 585.942627][ T2998] vhci_hcd: release socket [ 585.997226][ T2998] vhci_hcd: disconnect device [ 586.002117][ T46] vhci_hcd: vhci_device speed not set [ 586.051290][ T6489] usb 5-1: USB disconnect, device number 34 [ 586.914392][T30193] netlink: 'syz.0.11869': attribute type 1 has an invalid length. [ 586.941144][T30193] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.11869'. [ 586.987201][T30193] netlink: 'syz.0.11869': attribute type 1 has an invalid length. [ 587.020034][T30193] netlink: 'syz.0.11869': attribute type 2 has an invalid length. [ 587.043358][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11869'. [ 587.627737][T30214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11877'. [ 588.157407][ T6455] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.174235][ T6455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.187487][ T3478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.190118][ T6455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.206996][ T6455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.216400][ T6455] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 588.224480][ T6455] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.275463][T30232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11885'. [ 588.304252][ T6453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.320383][ T6453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.334071][ T6453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.349948][ T6453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.358336][ T6453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 588.366684][ T6453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.396852][T30226] lo speed is unknown, defaulting to 1000 [ 588.550152][ T3478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.749055][ T3478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.783141][T30262] overlayfs: workdir and upperdir must be separate subtrees [ 588.964792][T30226] chnl_net:caif_netlink_parms(): no params data found [ 589.219517][T30292] bond2: entered promiscuous mode [ 589.231320][T30292] bond2: entered allmulticast mode [ 589.242492][T30292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.503289][T30292] bond2 (unregistering): Released all slaves [ 589.532415][T30290] netlink: 'syz.0.11903': attribute type 30 has an invalid length. [ 589.577587][ T6576] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 589.602580][T30226] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.609702][T30226] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.617352][T30226] bridge_slave_0: entered allmulticast mode [ 589.624428][T30226] bridge_slave_0: entered promiscuous mode [ 589.632241][T30226] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.639650][T30226] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.646832][T30226] bridge_slave_1: entered allmulticast mode [ 589.653886][T30226] bridge_slave_1: entered promiscuous mode [ 589.732571][ T6576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.772971][T30226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.783471][ T6576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.816423][ T6576] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 589.827173][T30226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.860113][ T6576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.906900][ T3478] bridge_slave_1: left allmulticast mode [ 589.912705][ T6576] usb 5-1: config 0 descriptor?? [ 589.938393][ T3478] bridge_slave_1: left promiscuous mode [ 589.953912][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.991791][ T3478] bridge_slave_0: left allmulticast mode [ 589.998601][ T3478] bridge_slave_0: left promiscuous mode [ 590.005312][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.330263][ T6576] logitech-djreceiver 0003:046D:C71B.0004: unbalanced collection at end of report description [ 590.347110][T30333] openvswitch: netlink: Actions may not be safe on all matching packets [ 590.356238][ T6455] Bluetooth: hci1: command tx timeout [ 590.362217][ T6576] logitech-djreceiver 0003:046D:C71B.0004: logi_dj_probe: parse failed [ 590.362267][ T6576] logitech-djreceiver 0003:046D:C71B.0004: probe with driver logitech-djreceiver failed with error -22 [ 590.533932][ T6576] usb 5-1: USB disconnect, device number 35 [ 590.604425][T30342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11928'. [ 590.817282][T30352] devtmpfs: Too few inodes for current use [ 591.036732][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.046068][ T3478] bond_slave_0: left promiscuous mode [ 591.085751][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.105025][ T3478] bond_slave_1: left promiscuous mode [ 591.123697][ T3478] bond0 (unregistering): Released all slaves [ 591.448221][ T3478] bond1 (unregistering): Released all slaves [ 591.462466][ T3478] bond2 (unregistering): Released all slaves [ 591.473997][T30379] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.11946'. [ 591.625838][ T3478] bond3 (unregistering): Released all slaves [ 591.632310][ T6489] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 591.678027][T30226] team0: Port device team_slave_0 added [ 591.712760][T30226] team0: Port device team_slave_1 added [ 591.780784][ T3478] ɶƣ0GC!: left promiscuous mode [ 591.801994][ T6489] usb 5-1: Using ep0 maxpacket: 32 [ 591.817285][ T6489] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 255, using maximum allowed: 30 [ 591.852455][ T6489] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 591.881937][T30226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.902933][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.943302][ T6489] usb 5-1: config 1 interface 0 has no altsetting 0 [ 591.992516][T30226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.003538][ T6489] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 592.033257][ T6489] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 592.045628][T30226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.046182][ T6489] usb 5-1: Product: syz [ 592.076842][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.086775][ T6489] usb 5-1: Manufacturer: syz [ 592.116079][T30399] support for cryptoloop has been removed. Use dm-crypt instead. [ 592.154269][ T6489] usb 5-1: SerialNumber: syz [ 592.170253][T30226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.294001][ T6455] Bluetooth: hci1: command tx timeout [ 592.387761][ T6489] aqc111 5-1:1.0: probe with driver aqc111 failed with error -22 [ 592.458168][T30226] hsr_slave_0: entered promiscuous mode [ 592.481594][T30226] hsr_slave_1: entered promiscuous mode [ 592.504524][T30226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.519893][T30226] Cannot create hsr debugfs directory [ 592.535454][T30413] netlink: 'syz.2.11957': attribute type 18 has an invalid length. [ 592.550631][T30413] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.560065][T30413] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.569163][T30413] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.578087][T30413] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.731204][ T9] usb 5-1: USB disconnect, device number 36 [ 593.068980][T30441] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 593.212547][ T3478] hsr_slave_0: left promiscuous mode [ 593.226146][ T3478] hsr_slave_1: left promiscuous mode [ 593.241892][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.258908][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.287992][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.304018][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.385435][ T3478] veth1_macvtap: left promiscuous mode [ 593.391120][ T3478] veth1_vlan: left promiscuous mode [ 593.404804][ T3478] veth0_vlan: left promiscuous mode [ 594.223581][ T6455] Bluetooth: hci1: command tx timeout [ 594.299376][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 594.342785][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 594.610244][ T3478] team0 (unregistering): Port device batadv0 removed [ 594.848335][T30226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 594.886482][T30226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 594.920731][T30226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 594.970258][T30226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.190629][T30226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.231925][T30226] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.255152][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.262361][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.278829][T30502] xt_bpf: check failed: parse error [ 595.299722][ T2855] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.306939][ T2855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.327481][ T3478] IPVS: stop unused estimator thread 0... [ 595.628931][T30226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.882491][ T9] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 596.033611][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 596.048106][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 596.078828][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 596.120363][T30226] veth0_vlan: entered promiscuous mode [ 596.128481][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.148403][T30226] veth1_vlan: entered promiscuous mode [ 596.175236][ T6455] Bluetooth: hci1: command tx timeout [ 596.177143][T30226] veth0_macvtap: entered promiscuous mode [ 596.189600][T30226] veth1_macvtap: entered promiscuous mode [ 596.205789][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.216539][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.226783][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.237552][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.247747][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.258511][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.270198][T30226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.303860][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.315545][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.325553][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.336119][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.346014][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.357028][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.367351][T30226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.377923][T30226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.389200][T30226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.399893][T30226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.408825][T30226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.417837][T30226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.426700][T30226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.457949][ T9] usb 3-1: string descriptor 0 read error: -22 [ 596.472340][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.479209][ T6519] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 596.486993][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.518720][ T9] usb 3-1: 0:2 : does not exist [ 596.583242][ T2855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.611461][ T2855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.679348][ T6519] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 596.689891][ T6519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.705745][ T46] usb 3-1: USB disconnect, device number 36 [ 596.715927][T30557] mkiss: ax0: crc mode is auto. [ 596.737082][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.749471][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.753396][ T6519] usb 5-1: config 0 descriptor?? [ 597.005705][ T6519] kaweth 5-1:0.0: Firmware present in device. [ 597.168927][ T6519] kaweth 5-1:0.0: Statistics collection: 0 [ 597.174791][ T6519] kaweth 5-1:0.0: Multicast filter limit: 0 [ 597.229445][ T6519] kaweth 5-1:0.0: MTU: 0 [ 597.233753][ T6519] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 597.356428][ T6519] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 597.403299][ T6519] usb 5-1: USB disconnect, device number 37 [ 597.827072][T30608] trusted_key: encrypted_key: key user:syz not found [ 598.132630][T30625] sp0: Synchronizing with TNC [ 598.958309][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 599.141480][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 599.150041][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.162153][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.172331][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.205002][ T46] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 599.227412][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.249323][ T46] usb 6-1: config 0 descriptor?? [ 599.260993][ T46] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input96 [ 599.287244][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.345996][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.389779][T28356] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.415549][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.436260][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.455099][T30693] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12037'. [ 599.477540][T30656] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.519350][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.544686][ T5190] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 599.547641][ T46] usb 6-1: USB disconnect, device number 2 [ 599.773985][T30709] process 'syz.2.12041' launched './file1' with NULL argv: empty string added [ 599.806869][T30553] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 599.913905][T30714] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12042'. [ 599.956149][T30553] usb 5-1: Using ep0 maxpacket: 8 [ 599.966395][T30553] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 599.975756][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 599.996776][T30553] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.008893][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.020427][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 600.047749][ T29] audit: type=1326 audit(1731322379.167:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30716 comm="syz.2.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 600.092160][ T29] audit: type=1326 audit(1731322379.167:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30716 comm="syz.2.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 600.115264][T30553] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 600.122707][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 600.151795][ T29] audit: type=1326 audit(1731322379.199:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30716 comm="syz.2.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 600.179422][T30553] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.198170][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.209466][ T29] audit: type=1326 audit(1731322379.199:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30716 comm="syz.2.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 600.231484][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 600.243332][ T29] audit: type=1326 audit(1731322379.199:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30716 comm="syz.2.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 600.338728][T30553] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 600.346187][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 600.384693][T30553] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.403221][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.431412][T30553] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 600.644591][T30734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12049'. [ 600.794290][T30553] usb 5-1: string descriptor 0 read error: -22 [ 600.801015][T30553] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 600.810762][T30553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.836143][T30553] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 601.064341][ T6490] usb 5-1: USB disconnect, device number 38 [ 601.233167][T30553] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 601.382414][T30553] usb 3-1: Using ep0 maxpacket: 32 [ 601.410676][T30553] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 601.426931][T30553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.447172][T30553] usb 3-1: config 0 descriptor?? [ 601.851673][T30553] ortek 0003:05A4:8003.0005: item fetching failed at offset 3/5 [ 601.876470][T30553] ortek 0003:05A4:8003.0005: probe with driver ortek failed with error -22 [ 602.046179][T30553] usb 3-1: USB disconnect, device number 37 [ 602.344656][T30810] sp0: Synchronizing with TNC [ 603.041185][T30553] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 603.190156][T30553] usb 6-1: Using ep0 maxpacket: 8 [ 603.216881][T30553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.234739][T30553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.236345][ T6519] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 603.245328][T30553] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 603.276914][T30553] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 603.301275][T30553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.321353][T30553] usb 6-1: config 0 descriptor?? [ 603.387912][ T6519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.399342][ T6519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.418860][ T6519] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 603.441574][ T6519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.462027][ T6519] usb 3-1: config 0 descriptor?? [ 603.714774][T30553] apple 0003:05AC:0274.0006: item fetching failed at offset 6/70 [ 603.723523][T30553] apple 0003:05AC:0274.0006: parse failed [ 603.731416][T30553] apple 0003:05AC:0274.0006: probe with driver apple failed with error -22 [ 603.865336][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.876293][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.887763][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.898424][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.911501][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.922292][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.934167][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.939468][T30553] usb 6-1: USB disconnect, device number 3 [ 603.943732][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.967297][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.980196][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 603.989384][ T6519] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 604.012532][ T6519] waltop 0003:172F:0032.0007: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 604.097342][ T6519] usb 3-1: USB disconnect, device number 38 [ 604.710217][ T6490] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 604.895741][ T6490] usb 6-1: Using ep0 maxpacket: 8 [ 604.904956][ T6490] usb 6-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.916786][ T6490] usb 6-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.928091][ T6490] usb 6-1: config 0 interface 0 has no altsetting 0 [ 604.935080][ T6490] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 604.944685][ T6490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.954424][ T6490] usb 6-1: config 0 descriptor?? [ 605.055005][ T6519] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 605.176231][T30883] netlink: 'syz.2.12116': attribute type 11 has an invalid length. [ 605.185149][T30883] netlink: 'syz.2.12116': attribute type 11 has an invalid length. [ 605.193117][T30883] netlink: 209800 bytes leftover after parsing attributes in process `syz.2.12116'. [ 605.222145][ T6519] usb 5-1: Using ep0 maxpacket: 8 [ 605.240589][ T6519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.252534][ T6519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.267799][ T6519] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 605.277177][ T6519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.294427][ T6519] usb 5-1: config 0 descriptor?? [ 605.345590][ T6490] kye 0003:0458:0153.0008: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 605.532640][ T6490] usb 6-1: USB disconnect, device number 4 [ 605.688214][ T6519] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 605.695363][ T6519] cherry 0003:046A:0027.0009: unknown main item tag 0xe [ 605.711455][ T6519] cherry 0003:046A:0027.0009: unknown main item tag 0x5 [ 605.734599][ T6519] cherry 0003:046A:0027.0009: unknown main item tag 0x4 [ 605.741607][ T6519] cherry 0003:046A:0027.0009: ignoring exceeding usage max [ 605.750786][ T6519] cherry 0003:046A:0027.0009: usage index exceeded [ 605.757431][ T6519] cherry 0003:046A:0027.0009: item 0 0 2 0 parsing failed [ 605.769559][ T6519] cherry 0003:046A:0027.0009: probe with driver cherry failed with error -22 [ 605.887348][ T9] usb 5-1: USB disconnect, device number 39 [ 606.052550][ T6490] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 606.145256][T30913] netlink: 'syz.5.12129': attribute type 1 has an invalid length. [ 606.158175][T30913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.165454][T30913] IPv6: NLM_F_CREATE should be set when creating new route [ 606.209566][ T6490] usb 3-1: Using ep0 maxpacket: 16 [ 606.218486][ T6490] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 606.234859][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 606.257498][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24624, setting to 1024 [ 606.275631][ T6490] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.296404][ T6490] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 606.306058][ T6490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.315400][ T6490] usb 3-1: Product: syz [ 606.319616][ T6490] usb 3-1: Manufacturer: syz [ 606.324327][ T6490] usb 3-1: SerialNumber: syz [ 606.330906][ T6490] usb 3-1: config 0 descriptor?? [ 606.356956][ T6490] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 606.378552][ T6490] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 606.471112][ T6490] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 606.572638][ T9] usb 3-1: USB disconnect, device number 39 [ 606.645697][T30553] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 606.653757][T30553] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 606.667495][T30553] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 606.713367][ T6490] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 606.739869][ T29] audit: type=1326 audit(1731322386.344:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.764614][ T29] audit: type=1326 audit(1731322386.344:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.786248][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.796961][ T29] audit: type=1326 audit(1731322386.376:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.827389][ T29] audit: type=1326 audit(1731322386.376:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.852503][ T29] audit: type=1326 audit(1731322386.376:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.875868][ T29] audit: type=1326 audit(1731322386.376:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.881094][ T6490] usb 5-1: Using ep0 maxpacket: 32 [ 606.900218][ T29] audit: type=1326 audit(1731322386.376:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.914413][ T6490] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 606.943879][ T6490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.954565][ T29] audit: type=1326 audit(1731322386.376:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30931 comm="syz.5.12138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5d7e719 code=0x7ffc0000 [ 606.961987][ T6490] usb 5-1: config 0 descriptor?? [ 606.993160][ T6490] gspca_main: sq930x-2.14.0 probing 041e:403c [ 607.371856][T30944] netlink: 'syz.2.12144': attribute type 4 has an invalid length. [ 607.394885][T30944] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12144'. [ 607.569102][ T6453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.580217][ T6453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.591224][ T6453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.598557][ T6490] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 607.607938][ T6453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.615370][ T6490] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 607.627074][ T6453] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 607.634557][ T6453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.697544][ T6490] usb 5-1: USB disconnect, device number 40 [ 607.754624][T30953] lo speed is unknown, defaulting to 1000 [ 607.874256][ T29] audit: type=1326 audit(1731322387.557:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30966 comm="syz.2.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 607.896851][ T29] audit: type=1326 audit(1731322387.557:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30966 comm="syz.2.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 607.950774][T30971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 608.200228][T30984] sp0: Synchronizing with TNC [ 608.278167][T30988] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12157'. [ 608.298929][T30988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12157'. [ 608.324325][T30953] chnl_net:caif_netlink_parms(): no params data found [ 608.667586][T30953] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.680598][T31012] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12161'. [ 608.697956][T30953] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.722318][T30953] bridge_slave_0: entered allmulticast mode [ 608.741289][T31012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12161'. [ 608.751750][T30953] bridge_slave_0: entered promiscuous mode [ 608.789951][T30953] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.839103][T30953] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.866193][T30953] bridge_slave_1: entered allmulticast mode [ 608.873229][T30953] bridge_slave_1: entered promiscuous mode [ 608.934557][T31028] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12169'. [ 608.950193][ T6490] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 608.963801][T30953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.973499][T31028] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 608.985853][T30953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.042386][T30953] team0: Port device team_slave_0 added [ 609.049050][ T46] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 609.095579][T30953] team0: Port device team_slave_1 added [ 609.099002][ T6490] usb 3-1: Using ep0 maxpacket: 8 [ 609.135283][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.172588][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.200666][ T6490] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 609.225273][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 609.237463][ T6490] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 609.257678][ T6490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.285711][ T6490] usb 3-1: config 0 descriptor?? [ 609.292561][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.323894][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.345942][T30953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.358309][T30953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.384310][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.394820][ T46] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 609.412552][T30953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.424579][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.443423][T30953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.460681][ T46] usb 6-1: config 0 descriptor?? [ 609.472597][T30953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.533267][T30953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.583663][ T6455] Bluetooth: hci5: command tx timeout [ 609.603727][T31049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12174'. [ 609.638818][T30953] hsr_slave_0: entered promiscuous mode [ 609.646074][T30953] hsr_slave_1: entered promiscuous mode [ 609.671026][T30953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.688448][ T6490] pyra 0003:1E7D:2C24.000B: item fetching failed at offset 5/7 [ 609.692829][T30953] Cannot create hsr debugfs directory [ 609.697221][ T6490] pyra 0003:1E7D:2C24.000B: parse failed [ 609.710184][ T6490] pyra 0003:1E7D:2C24.000B: probe with driver pyra failed with error -22 [ 609.864833][ T46] viewsonic 0003:2133:0018.000C: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 609.890493][ T6490] usb 3-1: USB disconnect, device number 40 [ 609.984725][ T6489] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 610.038901][T30953] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 610.057895][ T6523] usb 6-1: USB disconnect, device number 5 [ 610.077985][T30953] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 610.097690][T30953] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 610.135836][T30953] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 610.149767][ T6489] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.167594][ T6489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.188933][ T6489] usb 5-1: config 0 descriptor?? [ 610.213159][ T6489] cp210x 5-1:0.0: cp210x converter detected [ 610.240909][T30953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.259865][T30953] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.294550][T31063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12176'. [ 610.294725][T30953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.314552][T30953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.333849][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.341041][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.390707][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.397887][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.747287][T30953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.796577][ T6489] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 610.816370][ T6489] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 610.887472][ T6489] usb 5-1: cp210x converter now attached to ttyUSB0 [ 610.924893][ T6489] usb 5-1: USB disconnect, device number 41 [ 610.964663][ T6489] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 610.982586][ T6489] cp210x 5-1:0.0: device disconnected [ 611.013038][T31099] Cannot find set identified by id 0 to match [ 611.186306][T31107] netlink: 'syz.0.12187': attribute type 5 has an invalid length. [ 611.347539][T30953] veth0_vlan: entered promiscuous mode [ 611.460141][T30953] veth1_vlan: entered promiscuous mode [ 611.531688][ T6455] Bluetooth: hci5: command tx timeout [ 611.874183][T30953] veth0_macvtap: entered promiscuous mode [ 611.945363][T30953] veth1_macvtap: entered promiscuous mode [ 612.038992][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.083232][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.125151][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.143789][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.161929][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.174372][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.184331][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.195048][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.206347][T30953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.217327][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.227899][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.237807][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.248357][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.258619][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.269650][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.279756][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.290287][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.300222][T30953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.310781][T30953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.321867][T30953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.366653][T30953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.377976][T30953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.424095][T30953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.445503][T30953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.475725][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 612.475742][ T29] audit: type=1800 audit(1731322392.503:315): pid=31172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.12210" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 612.501605][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.848319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.869706][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.898507][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.914178][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.306899][T31209] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12217'. [ 613.363004][T31212] pim6reg: entered allmulticast mode [ 613.461586][ T6455] Bluetooth: hci5: command tx timeout [ 613.601121][ T6493] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 613.796814][ T6493] usb 3-1: Using ep0 maxpacket: 32 [ 613.806763][ T6493] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.827804][ T6493] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.862814][ T6493] usb 3-1: config 0 interface 0 has no altsetting 0 [ 613.879419][ T6493] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 613.908332][ T6493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.952710][ T6493] usb 3-1: config 0 descriptor?? [ 613.998840][T31243] random: crng reseeded on system resumption [ 614.403895][ T6493] kye 0003:0458:5012.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 614.420559][ T6493] kye 0003:0458:5012.000D: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 614.431667][ T6493] kye 0003:0458:5012.000D: tablet-enabling feature report not found [ 614.439680][ T6493] kye 0003:0458:5012.000D: tablet enabling failed [ 614.601254][ T46] usb 3-1: USB disconnect, device number 41 [ 615.109659][T31294] vivid-000: disconnect [ 615.148011][T31291] vivid-000: reconnect [ 615.401121][ T6455] Bluetooth: hci5: command tx timeout [ 615.633208][ T46] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 615.789692][T31335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12262'. [ 615.799484][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 615.808328][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.838181][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.865056][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.878235][ T46] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.887798][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.906233][ T46] usb 5-1: config 0 descriptor?? [ 616.155602][ T6493] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 616.167017][T31350] tipc: Started in network mode [ 616.182468][T31350] tipc: Node identity fe80000000000000000000000000001, cluster identity 9 [ 616.191168][T31350] tipc: Enabling of bearer rejected, failed to enable media [ 616.259697][ T29] audit: type=1326 audit(1731322396.558:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31352 comm="syz.5.12270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06e5d7e719 code=0x0 [ 616.299802][ T46] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 616.310628][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input97 [ 616.327304][ T46] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 616.343690][ T6493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.358816][ T6493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.381171][ T6493] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 616.391356][ T6493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.425694][ T6493] usb 7-1: config 0 descriptor?? [ 616.537355][ T46] usb 5-1: USB disconnect, device number 42 [ 616.820647][ T6493] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 616.840460][ T6493] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 616.853538][ T6493] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 616.862627][ T6493] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 616.872961][ T6493] sony 0003:054C:024B.000F: unknown main item tag 0x0 [ 616.896834][ T6493] sony 0003:054C:024B.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.6-1/input0 [ 616.909531][ T6493] sony 0003:054C:024B.000F: failed to claim input [ 617.039219][T30553] usb 7-1: USB disconnect, device number 2 [ 617.478725][ T6493] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 617.534135][ T8] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 617.572649][T30553] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 617.637125][ T6493] usb 6-1: Using ep0 maxpacket: 16 [ 617.650198][ T6493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.665045][ T6493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.674112][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 617.681497][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.690301][ T6493] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 617.693203][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.719186][ T6493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.725325][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.740296][T30553] usb 3-1: Using ep0 maxpacket: 16 [ 617.757032][T30553] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 617.758485][ T6493] usb 6-1: config 0 descriptor?? [ 617.773971][T30553] usb 3-1: config 0 has no interface number 0 [ 617.787981][T30553] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.801089][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.810434][T30553] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 617.820465][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.830757][T30553] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 617.840112][T30553] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 617.849950][ T8] usb 5-1: config 0 descriptor?? [ 617.855649][T30553] usb 3-1: Product: syz [ 617.861416][T30553] usb 3-1: SerialNumber: syz [ 617.892410][T30553] usb 3-1: config 0 descriptor?? [ 617.904159][T30553] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 617.913415][T30553] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input99 [ 618.139126][ C0] cm109_urb_ctl_callback: 208 callbacks suppressed [ 618.139151][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.153015][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.160260][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.167407][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.177639][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.185227][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.195863][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.202064][ T6493] samsung 0003:0419:0001.0010: unknown main item tag 0x0 [ 618.205102][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.224184][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.232110][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.262272][T30553] usb 3-1: USB disconnect, device number 42 [ 618.262371][ T6493] samsung 0003:0419:0001.0010: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 618.268235][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 618.352034][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input100 [ 618.374100][T30553] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 618.437581][ T6493] usb 6-1: USB disconnect, device number 6 [ 618.483984][ T8] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 618.538211][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12298'. [ 618.557611][T31412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12298'. [ 618.567951][T31412] netlink: 'syz.0.12298': attribute type 6 has an invalid length. [ 618.655162][ T46] usb 5-1: USB disconnect, device number 43 [ 619.517375][T31452] overlayfs: missing 'lowerdir' [ 619.610410][T31457] [U] V3Fپ"S/4:XTZWTLW= [ 619.883377][ T6490] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 620.032473][ T6490] usb 3-1: Using ep0 maxpacket: 8 [ 620.042878][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.062993][ T6490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.092553][ T6490] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 620.104795][T31481] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12331'. [ 620.125341][ T6490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.125817][T31481] netlink: 444 bytes leftover after parsing attributes in process `syz.6.12331'. [ 620.151139][ T6490] usb 3-1: config 0 descriptor?? [ 620.164741][T31481] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12331'. [ 620.386104][ T6493] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 620.438789][T31491] sctp: [Deprecated]: syz.6.12336 (pid 31491) Use of int in maxseg socket option. [ 620.438789][T31491] Use struct sctp_assoc_value instead [ 620.525061][T31493] tmpfs: Bad value for 'mpol' [ 620.535635][ T6493] usb 6-1: Using ep0 maxpacket: 32 [ 620.546781][ T6493] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.550256][ T6490] logitech 0003:046D:C24F.0012: unknown main item tag 0x1 [ 620.567016][ T6493] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.585110][ T6493] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.585343][ T6490] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 620.612583][ T6493] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 620.617294][ T6490] logitech 0003:046D:C24F.0012: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 620.627418][ T6493] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 620.645135][ T6490] logitech 0003:046D:C24F.0012: no inputs found [ 620.648655][ T6493] usb 6-1: Product: syz [ 620.664582][ T6493] usb 6-1: Manufacturer: syz [ 620.673122][ T6493] usb 6-1: SerialNumber: syz [ 620.696117][ T6493] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input101 [ 620.928221][ T6490] usb 3-1: USB disconnect, device number 43 [ 620.965464][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 620.965471][ T8] usb 6-1: USB disconnect, device number 7 [ 620.995792][ T8] appletouch 6-1:1.0: input: appletouch disconnected [ 621.395591][T31523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12351'. [ 621.680465][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 621.707844][T31540] Bluetooth: MGMT ver 1.23 [ 621.832418][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.849393][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.868697][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 621.895317][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.915689][ T8] usb 3-1: config 0 descriptor?? [ 622.076400][T31550] block device autoloading is deprecated and will be removed. [ 622.207540][T31556] hfsplus: invalid gid specified [ 622.212906][T31556] hfsplus: unable to parse mount options [ 622.328788][ T8] elecom 0003:056E:00FB.0013: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 622.505858][T30553] usb 3-1: USB disconnect, device number 44 [ 622.595762][ T46] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 622.763347][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 622.776668][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.801266][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.815894][T31574] binder: 31573:31574 ioctl c018620b 2001ed80 returned -14 [ 622.828377][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 622.846659][ T46] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 622.856329][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.887788][ T46] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 622.897139][ T46] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.905681][ T46] usb 6-1: Manufacturer: syz [ 622.940765][ T46] usb 6-1: config 0 descriptor?? [ 623.126936][T31585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12378'. [ 623.266672][ T46] rc_core: IR keymap rc-hauppauge not found [ 623.273014][ T46] Registered IR keymap rc-empty [ 623.282880][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.323365][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.342110][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 623.363684][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input102 [ 623.405806][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.446064][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.452591][ T6490] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 623.489897][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.528031][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.558075][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.592830][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.602464][ T6490] usb 7-1: Using ep0 maxpacket: 8 [ 623.615129][ T6490] usb 7-1: config index 0 descriptor too short (expected 146, got 18) [ 623.620430][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.625487][ T6490] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.d3 [ 623.640486][ T6490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.648501][ T6490] usb 7-1: Product: syz [ 623.660314][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.675523][ T6490] usb 7-1: Manufacturer: syz [ 623.680298][ T6490] usb 7-1: SerialNumber: syz [ 623.687812][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.696450][T30553] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 623.714841][ T6490] usb 7-1: config 0 descriptor?? [ 623.716226][ T46] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 623.743744][ T46] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 623.763796][ T46] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 623.794922][ T46] usb 6-1: USB disconnect, device number 8 [ 623.862567][T30553] usb 3-1: Using ep0 maxpacket: 8 [ 623.900388][T30553] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 623.919102][ T6490] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.927633][T30553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.947747][T30553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.958555][T30553] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 623.975844][T30553] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 623.986822][T30553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.007610][T30553] usb 3-1: config 0 descriptor?? [ 624.294681][ T6490] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 624.324292][ T6490] usb 7-1: USB disconnect, device number 3 [ 624.420643][T30553] hid (null): report_id 0 is invalid [ 624.428217][T30553] uclogic 0003:2179:0077.0014: interface is invalid, ignoring [ 624.634950][ T46] usb 3-1: USB disconnect, device number 45 [ 624.767280][T31639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12405'. [ 625.084610][T31654] Bluetooth: MGMT ver 1.23 [ 625.167951][ T6490] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 625.318284][ T6490] usb 5-1: Using ep0 maxpacket: 32 [ 625.325610][T31665] program syz.5.12417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.336865][ T6490] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 625.346901][ T6490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.376094][ T6490] usb 5-1: config 0 descriptor?? [ 625.767589][ T6490] kye 0003:0458:5011.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 625.796928][T31685] sp0: Synchronizing with TNC [ 625.841505][ T6490] kye 0003:0458:5011.0015: hidraw0: USB HID vb.51 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 625.897994][ T6490] kye 0003:0458:5011.0015: tablet-enabling feature report not found [ 625.931908][ T6490] kye 0003:0458:5011.0015: tablet enabling failed [ 625.998947][ T6490] usb 5-1: USB disconnect, device number 44 [ 626.126170][T31701] netlink: 'syz.0.12435': attribute type 2 has an invalid length. [ 626.147060][T31701] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12435'. [ 627.236767][T30553] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 627.388202][T30553] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 627.397526][T30553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.420854][T30553] usb 3-1: config 0 descriptor?? [ 627.435841][T30553] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 627.853919][T30553] gspca_cpia1: usb_control_msg 03, error -32 [ 627.885136][T30553] gspca_cpia1: usb_control_msg 03, error -71 [ 627.915338][T30553] gspca_cpia1: usb_control_msg 01, error -71 [ 627.926087][T30553] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 627.948805][T30553] usb 3-1: USB disconnect, device number 46 [ 628.225985][T31792] program syz.4.12476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.466030][T31807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12483'. [ 628.484568][T31807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12483'. [ 628.541725][ T6490] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 628.593986][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12484'. [ 628.705790][ T6490] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.719391][ T6490] usb 7-1: config 0 has no interface number 0 [ 628.731259][ T6490] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 628.745802][ T6490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.754812][ T6490] usb 7-1: Product: syz [ 628.759381][ T6490] usb 7-1: Manufacturer: syz [ 628.764693][ T6490] usb 7-1: SerialNumber: syz [ 628.781139][ T6490] usb 7-1: config 0 descriptor?? [ 628.897869][T29811] cxacru 1-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 628.991756][ T6490] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 629.024625][ T6490] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 629.073871][ T6490] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 629.081937][ T6490] usb 7-1: media controller created [ 629.133520][ T6490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.179323][ T6490] usb 7-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 629.188135][ T6490] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 629.230326][ T6490] DVB: Unable to find symbol mxl5005s_attach() [ 629.231440][ T25] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 629.343924][ T6523] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 629.392040][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 629.407307][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 629.423426][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 629.423841][ T6490] usb 7-1: USB disconnect, device number 4 [ 629.440080][ T25] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 629.461197][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.492196][ T25] usb 1-1: config 0 descriptor?? [ 629.493975][ T6523] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.501892][T31758] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 629.529767][ T6523] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.544190][ T6523] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 629.554726][ T6523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 629.564159][ T6523] usb 6-1: SerialNumber: syz [ 629.793723][ T6523] usb 6-1: 0:2 : does not exist [ 629.828572][ T6523] usb 6-1: USB disconnect, device number 9 [ 629.913792][ T25] aureal 0003:0755:2626.0016: unknown main item tag 0x6 [ 629.920826][ T25] aureal 0003:0755:2626.0016: report_id 29495 is invalid [ 629.943983][ T25] aureal 0003:0755:2626.0016: item 0 2 1 8 parsing failed [ 629.959153][ T25] aureal 0003:0755:2626.0016: probe with driver aureal failed with error -22 [ 630.017587][T28356] udevd[28356]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.181546][ T6493] usb 1-1: USB disconnect, device number 27 [ 630.470397][T31865] MPI: mpi too large (185152 bits) [ 630.922679][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.987650][T31883] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 631.030513][T31889] openvswitch: netlink: Actions may not be safe on all matching packets [ 631.235594][ T29] audit: type=1326 audit(1731322412.620:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.287799][ T29] audit: type=1326 audit(1731322412.630:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.311635][ T29] audit: type=1326 audit(1731322412.630:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.335412][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.366215][T31904] netlink: 'syz.6.12528': attribute type 12 has an invalid length. [ 631.374164][T31904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12528'. [ 631.392968][ T29] audit: type=1326 audit(1731322412.630:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.487397][ T29] audit: type=1326 audit(1731322412.630:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.553096][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.576687][ T6493] IPVS: starting estimator thread 0... [ 631.581949][ T29] audit: type=1326 audit(1731322412.641:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.603786][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.691521][ T29] audit: type=1326 audit(1731322412.641:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31899 comm="syz.4.12527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39dd7e719 code=0x7ffc0000 [ 631.692456][T31917] IPVS: using max 20 ests per chain, 48000 per kthread [ 631.713214][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.770926][ T11] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.258229][ T11] bridge_slave_1: left allmulticast mode [ 632.266098][ T11] bridge_slave_1: left promiscuous mode [ 632.273370][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.298685][ T11] bridge_slave_0: left allmulticast mode [ 632.307251][ T11] bridge_slave_0: left promiscuous mode [ 632.314688][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.721479][T31973] program syz.5.12558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.751182][ T29] audit: type=1326 audit(1731322414.240:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31974 comm="syz.2.12559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 632.843883][ T29] audit: type=1326 audit(1731322414.240:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31974 comm="syz.2.12559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 632.931629][ T29] audit: type=1326 audit(1731322414.250:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31974 comm="syz.2.12559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f718db7e719 code=0x7ffc0000 [ 632.953143][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.404635][T32001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12568'. [ 633.432351][T32001] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12568'. [ 633.796000][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.811121][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.823137][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 633.836470][ T11] bond0 (unregistering): Released all slaves [ 634.045428][ T11] bond1 (unregistering): Released all slaves [ 634.088409][T32003] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 634.133555][ T11] : left promiscuous mode [ 634.170968][T32013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 634.594116][ T11] IPVS: stopping backup sync thread 28028 ... [ 634.647180][ T6493] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 634.833598][ T6493] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.861808][ T6493] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.874820][ T6493] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 634.886011][ T6493] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 634.895138][ T6493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.915395][T32026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 634.938556][ T6493] hub 1-1:1.0: bad descriptor, ignoring hub [ 634.944508][ T6493] hub 1-1:1.0: probe with driver hub failed with error -5 [ 634.952204][T32052] netlink: 'syz.6.12589': attribute type 1 has an invalid length. [ 634.968328][ T6493] cdc_wdm 1-1:1.0: skipping garbage [ 634.979641][ T6493] cdc_wdm 1-1:1.0: skipping garbage [ 634.994930][ T6493] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 635.000859][ T6493] cdc_wdm 1-1:1.0: Unknown control protocol [ 635.038490][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 635.151307][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 635.241313][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.262895][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.289638][ T46] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 635.322522][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 635.329315][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 635.336435][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 635.343059][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 635.349208][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 635.357989][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 635.365883][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.394840][ T25] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 635.405593][ T46] usb 3-1: config 0 descriptor?? [ 635.421557][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.441319][ T25] usb 6-1: Product: syz [ 635.446020][ T25] usb 6-1: Manufacturer: syz [ 635.451477][ T25] usb 6-1: SerialNumber: syz [ 635.462349][ T25] usb 6-1: config 0 descriptor?? [ 635.487784][ T11] [ 635.487769][ C1] BUG: workqueue leaked atomic, lock or RCU: syz.0.12579[32022] [ 635.487769][ C1] preempt=0x00000101 lock=2->0 RCU=0->0 workfn=usb_giveback_urb_bh [ 635.490121][ T11] ====================================================== [ 635.490129][ T11] WARNING: possible circular locking dependency detected [ 635.490137][ T11] 6.12.0-rc7-syzkaller #0 Not tainted [ 635.490148][ T11] ------------------------------------------------------ [ 635.490155][ T11] kworker/u8:0/11 is trying to acquire lock: [ 635.505970][ C1] INFO: lockdep is turned off. [ 635.512901][ T11] ffff88805cf14d40 [ 635.519954][ C1] CPU: 1 UID: 0 PID: 32022 Comm: syz.0.12579 Not tainted 6.12.0-rc7-syzkaller #0 [ 635.525234][ T11] (team->team_lock_key [ 635.532229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 635.538178][ T11] #4){+.+.}-{3:3} [ 635.542914][ C1] Call Trace: [ 635.546602][ T11] , at: team_del_slave+0x32/0x1d0 [ 635.555678][ C1] [ 635.559812][ T11] [ 635.559812][ T11] but task is already holding lock: [ 635.559821][ T11] ffff8880297b0768 [ 635.569849][ C1] dump_stack_lvl+0x241/0x360 [ 635.573468][ T11] (&rdev->wiphy.mtx [ 635.576735][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.581731][ T11] ){+.+.}-{3:3} [ 635.584568][ C1] ? __pfx__printk+0x10/0x10 [ 635.591907][ T11] , at: ieee80211_remove_interfaces+0x12b/0x700 [ 635.595618][ C1] process_scheduled_works+0x1158/0x1850 [ 635.600259][ T11] [ 635.600259][ T11] which lock already depends on the new lock. [ 635.600259][ T11] [ 635.600268][ T11] [ 635.600268][ T11] the existing dependency chain (in reverse order) is: [ 635.604142][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.609302][ T11] [ 635.609302][ T11] -> #1 ( [ 635.612738][ C1] ? assign_work+0x364/0x3d0 [ 635.617295][ T11] &rdev->wiphy.mtx){+.+.}-{3:3} [ 635.623512][ C1] bh_worker+0x2a5/0x620 [ 635.629114][ T11] : [ 635.629122][ T11] lock_acquire+0x1ed/0x550 [ 635.639500][ C1] tasklet_action+0xc/0x70 [ 635.648480][ T11] __mutex_lock+0x136/0xd70 [ 635.654433][ C1] handle_softirqs+0x2c5/0x980 [ 635.659513][ T11] ieee80211_open+0xe7/0x200 [ 635.664079][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 635.668896][ T11] __dev_open+0x2d3/0x450 [ 635.673113][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 635.675503][ T11] dev_open+0xae/0x1b0 [ 635.680498][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 635.684882][ T11] team_add_slave+0x9c8/0x2760 [ 635.689876][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 635.694606][ T11] do_setlink+0xe73/0x41f0 [ 635.699690][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 635.704420][ T11] rtnl_newlink+0x180d/0x20a0 [ 635.709243][ C1] irq_exit_rcu+0x9/0x30 [ 635.714494][ T11] rtnetlink_rcv_msg+0x73f/0xcf0 [ 635.719054][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 635.724221][ T11] netlink_rcv_skb+0x1e3/0x430 [ 635.729476][ C1] [ 635.734029][ T11] netlink_unicast+0x7f6/0x990 [ 635.738942][ C1] [ 635.744107][ T11] netlink_sendmsg+0x8e4/0xcb0 [ 635.749273][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.753486][ T11] __sock_sendmsg+0x221/0x270 [ 635.758931][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 635.764516][ T11] ____sys_sendmsg+0x52a/0x7e0 [ 635.769775][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4a cc a7 f5 48 89 df e8 62 12 a9 f5 e8 ed fe d3 f5 fb bf 01 00 00 00 e2 8d 9a f5 65 8b 05 c3 35 3b 74 85 c0 74 06 5b c3 cc cc cc cc [ 635.772688][ T11] __sys_sendmsg+0x292/0x380 [ 635.777948][ C1] RSP: 0018:ffffc9000c44f330 EFLAGS: 00000286 [ 635.780859][ T11] do_syscall_64+0xf3/0x230 [ 635.786112][ C1] [ 635.792061][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.797228][ C1] RAX: 6aa3b01f9c4e4100 RBX: ffffffff8f595820 RCX: ffffffff8170bf4a [ 635.803004][ T11] [ 635.803004][ T11] -> #0 ( [ 635.808258][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acaa0 RDI: 0000000000000001 [ 635.827921][ T11] team->team_lock_key#4){+.+.}-{3:3} [ 635.833011][ C1] RBP: ffffc9000c44f4b0 R08: ffffffff94298927 R09: 1ffffffff2853124 [ 635.839047][ T11] : [ 635.839055][ T11] validate_chain+0x18ef/0x5920 [ 635.844042][ C1] R10: dffffc0000000000 R11: fffffbfff2853125 R12: 0000000000000000 [ 635.846351][ T11] __lock_acquire+0x1384/0x2050 [ 635.852737][ C1] R13: dffffc0000000000 R14: ffff888145365000 R15: ffff88802179d100 [ 635.860679][ T11] lock_acquire+0x1ed/0x550 [ 635.865765][ C1] ? mark_lock+0x9a/0x360 [ 635.873705][ T11] __mutex_lock+0x136/0xd70 [ 635.878966][ C1] usb_hcd_submit_urb+0xaaf/0x1e80 [ 635.886915][ T11] team_del_slave+0x32/0x1d0 [ 635.889320][ C1] ? lockdep_init_map_type+0xa1/0x910 [ 635.894657][ T11] team_device_event+0x200/0x5b0 [ 635.902605][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 635.907960][ T11] notifier_call_chain+0x19f/0x3e0 [ 635.915906][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 635.920905][ T11] unregister_netdevice_many_notify+0xedd/0x1da0 [ 635.925209][ C1] ? usb_submit_urb+0xe85/0x1930 [ 635.930200][ T11] unregister_netdevice_queue+0x303/0x370 [ 635.935288][ C1] usb_start_wait_urb+0x113/0x520 [ 635.940362][ T11] _cfg80211_unregister_wdev+0x163/0x590 [ 635.945709][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 635.951131][ T11] ieee80211_remove_interfaces+0x4db/0x700 [ 635.956648][ C1] ? __kmalloc_noprof+0x21a/0x400 [ 635.962245][ T11] ieee80211_unregister_hw+0x5d/0x2c0 [ 635.968023][ C1] usb_control_msg+0x2b1/0x4c0 [ 635.974838][ T11] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 635.979751][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 635.985960][ T11] hwsim_exit_net+0x5c1/0x670 [ 635.990954][ C1] ? hub_ext_port_status+0x54e/0x840 [ 635.997076][ T11] cleanup_net+0x802/0xcc0 [ 636.002600][ C1] usb_port_resume+0x49e/0x2210 [ 636.008890][ T11] process_scheduled_works+0xa63/0x1850 [ 636.013899][ C1] ? __lock_acquire+0x1384/0x2050 [ 636.019758][ T11] worker_thread+0x870/0xd30 [ 636.024497][ C1] ? __pfx_usb_port_resume+0x10/0x10 [ 636.030529][ T11] kthread+0x2f0/0x390 [ 636.035789][ C1] ? mark_lock+0x9a/0x360 [ 636.040952][ T11] ret_from_fork+0x4b/0x80 [ 636.046211][ C1] usb_generic_driver_resume+0x4d/0x90 [ 636.051119][ T11] ret_from_fork_asm+0x1a/0x30 [ 636.055941][ C1] usb_resume_both+0x345/0xad0 [ 636.061975][ T11] [ 636.061975][ T11] other info that might help us debug this: [ 636.061975][ T11] [ 636.066973][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.072053][ T11] Possible unsafe locking scenario: [ 636.072053][ T11] [ 636.072061][ T11] CPU0 CPU1 [ 636.077305][ C1] ? __pfx_usb_runtime_resume+0x10/0x10 [ 636.081862][ T11] ---- ---- [ 636.081870][ T11] lock( [ 636.086164][ C1] __rpm_callback+0x2df/0x790 [ 636.091069][ T11] &rdev->wiphy.mtx [ 636.096505][ C1] ? rcu_is_watching+0x15/0xb0 [ 636.101759][ T11] ); [ 636.101766][ T11] lock( [ 636.106491][ C1] ? dev_pm_disable_wake_irq_check+0x101/0x180 [ 636.116692][ T11] team->team_lock_key#4 [ 636.121858][ C1] ? __pfx_usb_runtime_resume+0x10/0x10 [ 636.129282][ T11] ); [ 636.129289][ T11] lock( [ 636.134624][ C1] rpm_resume+0xfca/0x1670 [ 636.140138][ T11] &rdev->wiphy.mtx); [ 636.145484][ C1] ? __pfx_usb_runtime_resume+0x10/0x10 [ 636.148393][ T11] lock(team->team_lock_key [ 636.153040][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 636.156732][ T11] #4); [ 636.161467][ C1] ? __pfx_rpm_resume+0x10/0x10 [ 636.163942][ T11] [ 636.163942][ T11] *** DEADLOCK *** [ 636.163942][ T11] [ 636.163949][ T11] 5 locks held by kworker/u8:0/11: [ 636.169371][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 636.175490][ T11] #0: ffff88801baeb148 [ 636.179617][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 636.185129][ T11] ((wq_completion)netns [ 636.187609][ C1] rpm_resume+0x8fe/0x1670 [ 636.193049][ T11] ){+.+.}-{0:0} [ 636.197442][ C1] ? __pfx_rpm_resume+0x10/0x10 [ 636.201394][ T11] , at: process_scheduled_works+0x93b/0x1850 [ 636.206929][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 636.211492][ T11] #1: ffffc90000107d00 [ 636.216499][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 636.219153][ T11] (net_cleanup_work [ 636.223980][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.232102][ T11] ){+.+.}-{0:0} [ 636.237191][ C1] __pm_runtime_resume+0x120/0x180 [ 636.242531][ T11] , at: process_scheduled_works+0x976/0x1850 [ 636.246667][ C1] ? __pfx_wdm_manage_power+0x10/0x10 [ 636.251835][ T11] #2: ffffffff8fcb48d0 [ 636.256056][ C1] usb_autopm_get_interface+0x22/0xf0 [ 636.260447][ T11] (pernet_ops_rwsem [ 636.263883][ C1] ? __pfx_wdm_manage_power+0x10/0x10 [ 636.268702][ T11] ){++++}-{3:3} [ 636.274654][ C1] wdm_manage_power+0x1c/0xa0 [ 636.280085][ T11] , at: cleanup_net+0x16a/0xcc0 [ 636.284214][ C1] ? __pfx_wdm_manage_power+0x10/0x10 [ 636.290085][ T11] #3: ffffffff8fcc1408 [ 636.293955][ C1] wdm_release+0x20f/0x460 [ 636.299902][ T11] (rtnl_mutex [ 636.303348][ C1] ? __pfx_wdm_release+0x10/0x10 [ 636.308427][ T11] ){+.+.}-{3:3} [ 636.314376][ C1] __fput+0x23f/0x880 [ 636.319741][ T11] , at: ieee80211_unregister_hw+0x55/0x2c0 [ 636.323881][ C1] task_work_run+0x24f/0x310 [ 636.329216][ T11] #4: ffff8880297b0768 [ 636.333092][ C1] ? __pfx_task_work_run+0x10/0x10 [ 636.338440][ T11] (&rdev->wiphy.mtx [ 636.341877][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 636.346529][ T11] ){+.+.}-{3:3} [ 636.351352][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 636.356693][ T11] , at: ieee80211_remove_interfaces+0x12b/0x700 [ 636.360830][ C1] do_syscall_64+0x100/0x230 [ 636.365213][ T11] [ 636.365213][ T11] stack backtrace: [ 636.437018][ C1] ? clear_bhb_loop+0x35/0x90 [ 636.441705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.447598][ C1] RIP: 0033:0x7f3b40f7e719 [ 636.452024][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.471629][ C1] RSP: 002b:00007fff6da452c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 636.480044][ C1] RAX: 0000000000000000 RBX: 00007f3b41137a80 RCX: 00007f3b40f7e719 [ 636.488016][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 636.495985][ C1] RBP: 00007f3b41137a80 R08: 0000000000000006 R09: 00007fff6da455bf [ 636.503952][ C1] R10: 00000000005eadf4 R11: 0000000000000246 R12: 00000000000a3986 [ 636.511925][ C1] R13: 00007fff6da453d0 R14: 0000000000000032 R15: ffffffffffffffff [ 636.519908][ C1] [ 636.522929][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7-syzkaller #0 [ 636.531889][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 636.541965][ T11] Workqueue: netns cleanup_net [ 636.546756][ T11] Call Trace: [ 636.550048][ T11] [ 636.552995][ T11] dump_stack_lvl+0x241/0x360 [ 636.557703][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.562924][ T11] ? __pfx__printk+0x10/0x10 [ 636.566679][ T25] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 636.567517][ T11] print_circular_bug+0x13a/0x1b0 [ 636.578959][ T11] check_noncircular+0x36a/0x4a0 [ 636.583916][ T11] ? __pfx_check_noncircular+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 636.589388][ T11] ? queued_spin_lock_slowpath+0x42/0x50 [ 636.595034][ T11] ? lockdep_lock+0x1b0/0x2b0 [ 636.599740][ T11] ? __pfx_validate_chain+0x10/0x10 [ 636.604953][ T11] validate_chain+0x18ef/0x5920 [ 636.609826][ T11] ? __pfx_validate_chain+0x10/0x10 [ 636.615038][ T11] ? __pfx_validate_chain+0x10/0x10 [ 636.620273][ T11] ? mark_lock+0x9a/0x360 [ 636.624615][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.630633][ T11] ? mark_lock+0x9a/0x360 [ 636.634974][ T11] __lock_acquire+0x1384/0x2050 [ 636.639845][ T11] lock_acquire+0x1ed/0x550 [ 636.644363][ T11] ? team_del_slave+0x32/0x1d0 [ 636.649151][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 636.654193][ T11] ? __pfx___might_resched+0x10/0x10 [ 636.659498][ T11] ? __pfx___might_resched+0x10/0x10 [ 636.664801][ T11] ? xsk_notifier+0x218/0x230 [ 636.669491][ T11] __mutex_lock+0x136/0xd70 [ 636.674009][ T11] ? team_del_slave+0x32/0x1d0 [ 636.678801][ T11] ? trace_contention_end+0x3c/0x120 [ 636.684104][ T11] ? __mutex_lock+0x2ef/0xd70 [ 636.688792][ T11] ? bond_netdev_event+0xdd/0xf20 [ 636.693836][ T11] ? team_del_slave+0x32/0x1d0 [ 636.698625][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 636.703701][ T11] ? __asan_memset+0x23/0x50 [ 636.708308][ T11] team_del_slave+0x32/0x1d0 [ 636.712921][ T11] team_device_event+0x200/0x5b0 [ 636.717873][ T11] ? notifier_call_chain+0x162/0x3e0 [ 636.723169][ T11] notifier_call_chain+0x19f/0x3e0 [ 636.728284][ T11] unregister_netdevice_many_notify+0xedd/0x1da0 [ 636.734616][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 636.741373][ T11] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 636.747089][ T11] ? __pfx_lock_release+0x10/0x10 [ 636.752119][ T11] unregister_netdevice_queue+0x303/0x370 [ 636.757837][ T11] ? __pfx_up_write+0x10/0x10 [ 636.762511][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 636.768747][ T11] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 636.774465][ T11] _cfg80211_unregister_wdev+0x163/0x590 [ 636.780106][ T11] ieee80211_remove_interfaces+0x4db/0x700 [ 636.785916][ T11] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 636.792245][ T11] ieee80211_unregister_hw+0x5d/0x2c0 [ 636.797620][ T11] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 636.803193][ T11] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 636.809259][ T11] hwsim_exit_net+0x5c1/0x670 [ 636.813933][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 636.819128][ T11] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 636.824933][ T11] cleanup_net+0x802/0xcc0 [ 636.829347][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 636.834289][ T11] ? process_scheduled_works+0x976/0x1850 [ 636.840006][ T11] process_scheduled_works+0xa63/0x1850 [ 636.845563][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.851542][ T11] ? assign_work+0x364/0x3d0 [ 636.856127][ T11] worker_thread+0x870/0xd30 [ 636.860714][ T11] ? __kthread_parkme+0x169/0x1d0 [ 636.865737][ T11] ? __pfx_worker_thread+0x10/0x10 [ 636.870844][ T11] kthread+0x2f0/0x390 [ 636.874913][ T11] ? __pfx_worker_thread+0x10/0x10 [ 636.880032][ T11] ? __pfx_kthread+0x10/0x10 [ 636.884614][ T11] ret_from_fork+0x4b/0x80 [ 636.889041][ T11] ? __pfx_kthread+0x10/0x10 [ 636.893628][ T11] ret_from_fork_asm+0x1a/0x30 [ 636.898393][ T11] [ 637.004711][ T6493] usb 1-1: USB disconnect, device number 28 [ 637.091683][ T25] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 637.106633][ T11] team0: Port device  removed [ 637.131189][ T25] visor 6-1:0.0: probe with driver visor failed with error -71 [ 637.233338][ T25] usb 6-1: USB disconnect, device number 10 [ 637.448195][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 637.470572][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 637.483145][ T6447] syz-executor (6447) used greatest stack depth: 18800 bytes left [ 637.543642][ T46] usb 3-1: USB disconnect, device number 47 [ 637.623588][ T11] hsr_slave_0: left promiscuous mode [ 637.632695][ T11] hsr_slave_1: left promiscuous mode [ 637.638437][ T11] batman_adv: batadv0: Removing interface: team0 [ 637.648867][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.656288][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.673649][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.681554][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.714959][ T11] veth1_macvtap: left promiscuous mode [ 637.720492][ T11] veth0_macvtap: left promiscuous mode [ 637.727794][ T11] @: left promiscuous mode [ 637.969451][ T11] team0 (unregistering): Port device team_slave_1 removed [ 637.994850][ T11] team0 (unregistering): Port device team_slave_0 removed [ 638.553992][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.604531][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.661687][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.705709][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.788166][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.817829][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.854948][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.893722][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.957844][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.999191][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.045447][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.110707][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.199071][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.211689][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.259350][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.272034][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.313811][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.324830][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.368957][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.379467][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.532103][ T11] bridge_slave_1: left allmulticast mode [ 639.537799][ T11] bridge_slave_1: left promiscuous mode [ 639.546181][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.555161][ T11] bridge_slave_0: left allmulticast mode [ 639.560993][ T11] bridge_slave_0: left promiscuous mode [ 639.566660][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.576535][ T11] team0: left allmulticast mode [ 639.582542][ T11] team_slave_0: left allmulticast mode [ 639.590209][ T11] team_slave_1: left allmulticast mode [ 639.595782][ T11] bridge0: port 3(team0) entered disabled state [ 639.604012][ T11] bridge_slave_1: left allmulticast mode [ 639.611941][ T11] bridge_slave_1: left promiscuous mode [ 639.618355][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.628545][ T11] bridge_slave_0: left allmulticast mode [ 639.636425][ T11] bridge_slave_0: left promiscuous mode [ 639.642049][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.654120][ T11] bridge_slave_1: left allmulticast mode [ 639.659750][ T11] bridge_slave_1: left promiscuous mode [ 639.665656][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.673614][ T11] bridge_slave_0: left allmulticast mode [ 639.679238][ T11] bridge_slave_0: left promiscuous mode [ 639.685199][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.694392][ T11] bridge_slave_1: left allmulticast mode [ 639.700183][ T11] bridge_slave_1: left promiscuous mode [ 639.705777][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.714136][ T11] bridge_slave_0: left allmulticast mode [ 639.720280][ T11] bridge_slave_0: left promiscuous mode [ 639.725884][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.949814][ T11] dvmrp0 (unregistering): left allmulticast mode [ 639.986502][ T11] team0: Port device geneve0 removed [ 640.044007][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 640.440260][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.450493][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.461578][ T11] bond0 (unregistering): Released all slaves [ 640.475292][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.485154][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.495219][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 640.504230][ T11] bond0 (unregistering): Released all slaves [ 640.514366][ T11] bond1 (unregistering): Released all slaves [ 640.522622][ T11] bond2 (unregistering): Released all slaves [ 640.531887][ T11] bond3 (unregistering): Released all slaves [ 640.543370][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.553378][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.563961][ T11] bond0 (unregistering): Released all slaves [ 640.582552][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.592377][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.602515][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 640.613672][ T11] bond0 (unregistering): Released all slaves [ 640.622141][ T11] bond1 (unregistering): Released all slaves [ 640.630257][ T11] bond2 (unregistering): Released all slaves [ 640.638686][ T11] bond3 (unregistering): Released all slaves [ 642.164119][ T11] : left promiscuous mode [ 642.196772][ T11] RE6G: left promiscuous mode [ 642.277648][ T11] tipc: Left network mode [ 642.285033][ T11] IPVS: stopping master sync thread 24645 ... [ 643.169553][ T11] hsr_slave_0: left promiscuous mode [ 643.177712][ T11] hsr_slave_1: left promiscuous mode [ 643.183498][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.195289][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.202951][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.211526][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.224835][ T11] hsr_slave_0: left promiscuous mode [ 643.230638][ T11] hsr_slave_1: left promiscuous mode [ 643.239132][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.246865][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.254650][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.262205][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.271996][ T11] hsr_slave_0: left promiscuous mode [ 643.277610][ T11] hsr_slave_1: left promiscuous mode [ 643.283406][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.290907][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.298785][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.306220][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.316181][ T11] hsr_slave_0: left promiscuous mode [ 643.321807][ T11] hsr_slave_1: left promiscuous mode [ 643.327665][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.335144][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.346844][ T11] veth1_macvtap: left promiscuous mode [ 643.352811][ T11] veth0_macvtap: left promiscuous mode [ 643.358316][ T11] veth1_vlan: left promiscuous mode [ 643.364476][ T11] veth0_vlan: left promiscuous mode [ 643.370277][ T11] veth1_macvtap: left promiscuous mode [ 643.376530][ T11] veth1_vlan: left promiscuous mode [ 643.381854][ T11] veth0_vlan: left promiscuous mode [ 643.387641][ T11] veth1_macvtap: left promiscuous mode [ 643.393287][ T11] veth0_macvtap: left promiscuous mode [ 643.398945][ T11] veth1_vlan: left promiscuous mode [ 643.404230][ T11] veth0_vlan: left promiscuous mode [ 643.410532][ T11] batadv0: left promiscuous mode [ 643.415490][ T11] veth1_vlan: left promiscuous mode [ 643.420852][ T11] veth0_vlan: left promiscuous mode [ 643.564117][ T11] pim6reg (unregistering): left allmulticast mode [ 643.645953][ T11] team0 (unregistering): Port device team_slave_1 removed [ 643.656617][ T11] team0 (unregistering): Port device team_slave_0 removed [ 643.844194][ T11] team_slave_1 (unregistering): left promiscuous mode [ 643.851764][ T11] team0 (unregistering): Port device team_slave_1 removed [ 643.877781][ T11] team_slave_0 (unregistering): left promiscuous mode [ 643.886341][ T11] team0 (unregistering): Port device team_slave_0 removed [ 644.054409][ T11] team0 (unregistering): Port device team_slave_1 removed [ 644.080938][ T11] team0 (unregistering): Port device team_slave_0 removed [ 644.262572][ T11] team0 (unregistering): Port device team_slave_1 removed [ 644.289049][ T11] team0 (unregistering): Port device team_slave_0 removed