last executing test programs: 7m1.91062841s ago: executing program 4 (id=2512): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x0, 0xfffffffe, 0x20000044, 0x102005, 0x1]}, &(0x7f0000000000)=0x54) 7m1.439027132s ago: executing program 4 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x0, 0x0, @pic={0x96, 0x26, 0xa, 0x39, 0x1c, 0xa, 0x2, 0xa, 0xfc, 0x7, 0x9, 0x5, 0x80, 0x4, 0x7, 0x14}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0xa}) 7m1.210993263s ago: executing program 4 (id=2525): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 7m1.078103861s ago: executing program 4 (id=2530): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 7m0.162907947s ago: executing program 4 (id=2539): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 6m59.843157157s ago: executing program 4 (id=2544): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m59.597369613s ago: executing program 32 (id=2544): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m4.970409302s ago: executing program 1 (id=4731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000280)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 4m4.707098557s ago: executing program 1 (id=4736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8080000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x2000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x3, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x4000, 0xd, 0x8, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x4, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x100000}, {0xeeef0000, 0x83c7}, 0xfdfcffdb, 0x0, 0x8080000, 0x28, 0xb, 0x1800, 0x4000, [0x9d, 0x3, 0x1]}) 4m4.502759941s ago: executing program 1 (id=4740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) 4m4.46072905s ago: executing program 1 (id=4741): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 4m3.549343592s ago: executing program 1 (id=4745): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000) 4m3.311186643s ago: executing program 1 (id=4746): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 4m3.126370137s ago: executing program 33 (id=4746): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2m22.531207251s ago: executing program 2 (id=6058): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.694915627s ago: executing program 2 (id=6097): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, 0x0) 2m20.55983076s ago: executing program 2 (id=6099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000100500000a400000000c0a0104000000000000001d0a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) 2m20.408395324s ago: executing program 2 (id=6102): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 2m19.45573849s ago: executing program 2 (id=6115): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x8100}], 0x1, &(0x7f0000000340), &(0x7f0000000380)={[0xc25e]}, 0x8) 2m19.256674006s ago: executing program 2 (id=6116): r0 = socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f00000000c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x80, 0x0}}], 0x2, 0x0) 2m19.089222149s ago: executing program 34 (id=6116): r0 = socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f00000000c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x80, 0x0}}], 0x2, 0x0) 5.395377915s ago: executing program 0 (id=7851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0xe}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 5.382052905s ago: executing program 0 (id=7852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) 4.980091036s ago: executing program 3 (id=7858): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000030000000000000070000007e30003000000040004000800008004001080"], 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000003000000"], 0x35) 4.503550353s ago: executing program 0 (id=7863): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x1820}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x6a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 4.341772286s ago: executing program 3 (id=7867): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000640), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 4.232940733s ago: executing program 0 (id=7869): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001580)={{0x3, 0xffffffff, 0xfffffffe, 0x2, 0x10, 0x7ff}, 0x172, [0x9, 0xfe, 0x821, 0x2, 0x0, 0x7, 0x6, 0x46, 0x3, 0x7, 0x401, 0x3, 0x2, 0x7, 0x6, 0xd, 0x7, 0x3, 0xfffffff7, 0x5d, 0x8, 0x1, 0x30000, 0x1, 0x0, 0x4, 0x5, 0x9, 0x9, 0x8000000, 0x3, 0xfffffffc, 0x5, 0x2, 0x5, 0x10001, 0xedc4, 0xfffffffb, 0xc, 0x7, 0x9, 0x0, 0xfffffff8, 0x4, 0x85, 0x2, 0x5, 0x1, 0x2, 0x6, 0x9, 0x800, 0xb, 0x5, 0x3, 0x2, 0x2b, 0x2c34, 0x7, 0xdab8, 0xffff, 0x3585, 0x9, 0x5, 0x4, 0x8, 0x0, 0xb, 0x9, 0x4, 0xe70, 0x1, 0x7, 0x0, 0xfffffffd, 0x0, 0x2, 0xc, 0x3ff, 0x8, 0x1, 0x0, 0x8, 0x48b, 0x1, 0x8, 0x5, 0x6, 0x448, 0x6, 0x6, 0xffffffff, 0xe45c, 0xab74, 0x100, 0x7, 0x80000001, 0x8000000, 0x7, 0x0, 0x0, 0x6, 0xfffffff9, 0xb4d, 0xbd, 0xffff, 0x9, 0xfffffd49, 0x2, 0x5, 0x1, 0xfffff6d5, 0x9, 0x4, 0x5, 0xf, 0x3, 0x2000400, 0xe, 0x4800000, 0x7, 0x9, 0x6, 0xfffffff8, 0x8, 0x3, 0x5, 0x0, 0x8, 0xa2, 0xfffffffd, 0xfffffff9, 0x8, 0x3, 0x200, 0xd, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10, 0x6, 0x7ff, 0xd, 0x2, 0x5, 0x10000, 0xfffffffe, 0x81, 0x6, 0x0, 0x7fff, 0x1, 0x0, 0x7, 0x9f, 0x6, 0x7, 0x1, 0x8, 0x2, 0x2027, 0x8000, 0x8, 0x5, 0x5c79, 0x9, 0x4, 0x7, 0x3d, 0x53, 0xffffffff, 0xfffffff7, 0x2, 0x8, 0x6, 0x37, 0x3ff, 0x1, 0x7, 0x10001, 0x0, 0xffff, 0x500000, 0x40000000, 0x6, 0xfffffffe, 0x1, 0x9, 0x5, 0x966e, 0x1, 0xfffffffe, 0x0, 0x10000, 0x0, 0x2, 0x9, 0xb7a, 0x9, 0x2, 0x5, 0xa1c3, 0x80, 0x6, 0x9, 0x3, 0x4, 0x10, 0x9, 0x200, 0xa6, 0x2, 0x703e, 0x9, 0x0, 0x6, 0x7ff, 0x7ff, 0x4, 0x2, 0xfffffffb, 0x8a, 0x100, 0x4, 0x0, 0x80000000, 0x5, 0x4, 0x5, 0x6, 0x6, 0x3, 0x2dfb68ba, 0x3, 0x6, 0x5, 0x9, 0x9, 0x8, 0x7, 0x15, 0x8, 0x5, 0x238, 0xd5, 0xb3f1, 0x5, 0xdf, 0x6a4a1f7, 0x0, 0x0, 0x10, 0x8, 0x5, 0xe527, 0xf0d3, 0x5, 0x5, 0x0, 0xcd9, 0x8000, 0x7, 0x1, 0xffffffff, 0xfffffff9, 0x7, 0x3, 0x6a79, 0x5, 0x2, 0x2, 0x0, 0x3, 0x1, 0x6, 0xfffffffe, 0x5, 0x6, 0xd7, 0x4, 0x4, 0x1, 0x6, 0x4, 0xac5, 0x9, 0x5, 0xcc, 0x1, 0x3, 0x7, 0xf1f7, 0x4, 0x7, 0xb5ad, 0x74c36f13, 0xc89, 0x2, 0xbf, 0x1, 0x3da, 0x0, 0xffff, 0x7, 0x5, 0x8, 0x4, 0x7, 0x2, 0x5, 0x6, 0x80, 0x0, 0x17, 0x81, 0x4, 0x3, 0xfffffff7, 0x7, 0x0, 0x80000000, 0xa9, 0x7, 0x0, 0x1, 0x4, 0x10001, 0x5b8e, 0x7fffffff, 0x97, 0xb, 0x7, 0x9, 0x3, 0x4, 0x8, 0x6, 0x4, 0x2, 0x4, 0x8000000, 0x0, 0xd8b4, 0x2, 0x2, 0xbbf2, 0x800, 0x5, 0x2, 0x8, 0x2, 0x5f, 0xfd9c, 0x3cfa, 0x1, 0x2, 0x7, 0x5a6, 0x8, 0x8, 0xfffffff1, 0x0, 0x669ccda, 0xff, 0x9, 0x71c5, 0x6, 0x7, 0xff, 0x6, 0x5, 0xe232, 0x40, 0xa, 0xb4f8, 0x8, 0x9, 0x3, 0xd38e, 0x1ff, 0x7, 0x54a8, 0xc, 0xfffffff8, 0x1, 0x4, 0x1, 0x3bd, 0x6, 0xffffffff, 0x7f, 0x4, 0x6, 0x1, 0x0, 0xd, 0xe35, 0x3aa03290, 0x2, 0x9, 0x0, 0x4, 0x5, 0x200, 0x9, 0x1, 0xe3, 0xa, 0x7fffffff, 0x7, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x4, 0x0, 0x7b6, 0x0, 0x6, 0x2, 0xe0, 0x3, 0x8, 0x0, 0x3, 0xc, 0x1, 0x6, 0x0, 0xb, 0x3ff, 0x80000, 0x5, 0x4, 0x4, 0x7, 0x3, 0x1, 0x4f3aff91, 0x83, 0x7f, 0x800, 0x4, 0xfff, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x80000000, 0x976, 0xe3, 0x2ea31eba, 0xffffffff, 0x9, 0x2, 0x7, 0xfffffff8, 0x10, 0x9, 0x8000, 0x7, 0x0, 0x6, 0xffffffff, 0x6db, 0x0, 0x8, 0x2, 0x7, 0x2, 0x3, 0xf, 0x4, 0xe9c7, 0x2, 0x7f, 0x73, 0xd2, 0x5, 0x1, 0x2, 0x9, 0x101, 0xef, 0x649, 0x100, 0x8, 0x7ff, 0x10, 0x1, 0x9, 0x2, 0x6a, 0x3, 0x1, 0x100, 0x8, 0x1, 0x7, 0x9, 0x24, 0xfff, 0x3, 0x0, 0xf, 0x8, 0xcc, 0xfff, 0x22, 0x7, 0x10001, 0x7ff, 0xcf12, 0x9, 0x542, 0x10, 0x400, 0x8001, 0x5, 0x197, 0xeafa, 0x5, 0x64c, 0x0, 0x8, 0x1000, 0xd2, 0xff, 0xfffffffb, 0x2d, 0x3, 0x6, 0x8000, 0x7fffffff, 0x98c, 0x6, 0x4, 0x8, 0x2, 0x455, 0x2, 0x6, 0xcb5, 0x800, 0x981, 0x0, 0x5, 0x3621, 0x7fff, 0x9, 0x4, 0x7, 0x5, 0x3, 0x4, 0x0, 0xfc, 0x7, 0x1, 0x1, 0x5, 0x6ead, 0x7, 0x6, 0x360, 0x81, 0x2, 0x13400, 0xfff, 0x6, 0xfffffffc, 0x4, 0x800, 0x1, 0x7, 0x6, 0x1, 0x17e, 0x4, 0x9, 0x5, 0x1, 0x9, 0x1, 0xf15, 0x8, 0x401, 0x9, 0x401, 0x6, 0x1, 0x8001, 0x400, 0x5, 0x0, 0x2, 0x26b, 0x5, 0x7, 0xf, 0x8, 0x0, 0x9, 0x7fff, 0x9, 0x2, 0x1, 0x9, 0x3, 0xc9, 0x400, 0x5, 0x2, 0x1f, 0x2, 0xf, 0x40, 0x8, 0x6, 0x5, 0xcf, 0x8001, 0x30, 0x98, 0x2, 0x3b0, 0x2f9df6e1, 0x10, 0x401, 0xfffffffb, 0x6, 0xfffffffb, 0x6, 0x7, 0x47e1, 0x8, 0xfffffff9, 0x2, 0x10, 0x1, 0x5, 0x0, 0x8, 0xff, 0x0, 0x4, 0x682b, 0x82, 0x0, 0xfffffffe, 0x7, 0x8, 0x78c3, 0x2, 0x4d, 0xd95, 0x80e9, 0xd, 0x7e, 0x1, 0x3, 0x9, 0x10001, 0x3, 0x53, 0x1, 0x7, 0xfff, 0x2, 0xffffffba, 0x9, 0x3, 0x4, 0x8, 0x1, 0x523, 0x7, 0x7fff, 0xc, 0x6, 0x7, 0x1, 0x101, 0x7, 0x59aa284c, 0x3, 0x1, 0xd, 0xfffff800, 0x5, 0x46aa, 0x7, 0x5, 0x6, 0x1, 0x12, 0x9, 0x9, 0x5, 0x4, 0x4, 0x80, 0x4, 0x2, 0x8, 0x3ff, 0x9, 0x401, 0x3, 0x4, 0xd, 0x0, 0x0, 0x5ba, 0x204000, 0x3, 0x5, 0x9, 0xfffffff9, 0x1ff, 0x7fffffff, 0x8, 0x8, 0x6e5, 0x8, 0xa1, 0x3ff, 0x5, 0xbb22, 0xbe, 0x8, 0x1, 0x2, 0x3, 0x1a3b71d0, 0x6, 0xf, 0x5, 0xfffffffc, 0x3, 0x5, 0xdc4e, 0x80000001, 0x2, 0x7, 0x1, 0x4, 0x3, 0x10001, 0x2, 0xffffffff, 0x5, 0x401, 0x6, 0x0, 0x7, 0x3, 0x3, 0x4, 0xffffff26, 0x3, 0x4cd, 0x2, 0xffffffff, 0x8, 0x5, 0x70, 0x1, 0x1, 0x8, 0x8, 0x8, 0xc1b, 0x7fff, 0x2, 0x3, 0x100, 0x6b3, 0x132d, 0x894, 0x84e, 0x4, 0x5, 0x9, 0x6, 0x4, 0x86bf, 0x7, 0x6, 0x5339, 0x4, 0x81, 0xf, 0x2, 0xfffffffe, 0xb7da, 0x1, 0x2, 0x1, 0x3, 0x8, 0x8, 0x6, 0xfff, 0xffffffff, 0x7, 0x7, 0xffffffff, 0xf25, 0x400, 0xffff, 0x9, 0xffff, 0x7, 0x3, 0x4, 0x5, 0x101, 0x0, 0x1, 0x2, 0xfff, 0x3, 0x6, 0x4, 0x1, 0x2, 0x40, 0x69, 0x7, 0x9, 0x0, 0x70cecd6, 0x80, 0x80000000, 0x1, 0x115, 0x7, 0x8, 0x5, 0x7, 0x3, 0x200, 0x5, 0x40, 0x101, 0x1, 0x6, 0x2, 0x6, 0xef36, 0xa, 0x6, 0x834, 0x3, 0x1, 0x34c17020, 0xb63, 0x2, 0x80000000, 0x7, 0x1, 0x5, 0x7, 0x4, 0x4, 0x2, 0x9, 0x4, 0x1, 0x1, 0x2, 0xa, 0x0, 0x6, 0x80000000, 0x4, 0x7, 0x8001, 0x5, 0x0, 0x9, 0xfffffff7, 0x8, 0xfffffff6, 0x1, 0x8, 0x3, 0xe2c, 0x6, 0x9, 0x81, 0x9, 0x80000001, 0x7, 0x6, 0xb1, 0x7f, 0xfffffff9, 0xe, 0x4, 0x4, 0x1, 0x78000, 0x3, 0x3, 0x2, 0x0, 0x3, 0x3, 0xb915, 0x3, 0x8, 0x6, 0x6, 0x6, 0x0, 0x7, 0x4, 0x6, 0x1, 0x7, 0x0, 0x400, 0x2, 0x4, 0x5, 0x750, 0x6, 0x2, 0x7, 0x9, 0x400, 0x8, 0x5, 0x5256, 0x80000001, 0x1, 0x4, 0x8, 0x0, 0x6, 0xffffff7f, 0xff0, 0xf6, 0x3, 0xa, 0x4, 0x1, 0x4, 0xfffff220, 0x1, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x8, 0x4, 0x7, 0x0, 0x3, 0x9, 0xf, 0x0, 0x3, 0x7, 0x2, 0x6, 0xbe, 0xfffffffc, 0x9, 0x1, 0xf5d4, 0xf9, 0x6, 0x3, 0x7ed6, 0x2, 0x7, 0xbb, 0x9, 0x9, 0x2a7, 0x0, 0x2, 0x4, 0x5, 0x8, 0x4, 0x0, 0x10, 0x6, 0xd, 0x3, 0x4, 0x1000, 0xffffffff, 0xe, 0xb6, 0x2, 0x8, 0x80, 0x4, 0xfffffffa, 0x9079, 0x9, 0xfffffff8, 0x3, 0x9c6, 0x80000001, 0xffff, 0x6f4, 0x7, 0x8, 0x8]}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 3.853270951s ago: executing program 6 (id=7872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af"], 0x0, 0x0, 0x0, 0x0}) 3.447168983s ago: executing program 3 (id=7873): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xfff2, 0x8}, {0xa, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x233}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f0e762b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x24004084) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.287790282s ago: executing program 7 (id=7876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x20000080}], 0x1, 0x40801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.255314186s ago: executing program 7 (id=7877): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000000)=""/12, 0xc}, {0x0}, {&(0x7f00000005c0)=""/105, 0x69}, {0x0}], 0x7}, 0x4}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x5, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0xd209f6d814827b13) 3.160868294s ago: executing program 7 (id=7879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) 3.027701205s ago: executing program 7 (id=7881): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 3.019324824s ago: executing program 7 (id=7882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r1, 0x0, 0x0, 0x0) 2.798061313s ago: executing program 7 (id=7885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}], 0x1}}], 0x1, 0x40000000, 0x0) 2.654851507s ago: executing program 35 (id=7885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}], 0x1}}], 0x1, 0x40000000, 0x0) 2.55512064s ago: executing program 3 (id=7889): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x7f, 0x7}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 2.486143666s ago: executing program 3 (id=7890): syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x444400) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000000)=0x10) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.168313257s ago: executing program 0 (id=7898): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="50bedb81c9d548", 0x7}], 0x1, 0x0, 0x0, 0x20040004}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1.08254273s ago: executing program 0 (id=7899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a1791", 0x4}], 0x1) 961.638588ms ago: executing program 3 (id=7901): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 877.777344ms ago: executing program 8 (id=7886): recvmsg(0xffffffffffffffff, 0x0, 0x40002020) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) 793.901476ms ago: executing program 8 (id=7903): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) r2 = dup3(r0, r1, 0x80000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x1}) 723.263947ms ago: executing program 5 (id=7904): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x6, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) 722.88234ms ago: executing program 6 (id=7905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4}, {0x2, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x26, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0x2, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x460, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0x3]}) 700.531723ms ago: executing program 8 (id=7906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0xffffffff, 0x6}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x80, 0x1}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) 690.404864ms ago: executing program 5 (id=7907): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 636.416903ms ago: executing program 5 (id=7908): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 587.929414ms ago: executing program 5 (id=7909): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 559.844532ms ago: executing program 8 (id=7910): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) 343.658907ms ago: executing program 6 (id=7911): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 275.766366ms ago: executing program 5 (id=7912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x400000001fc, &(0x7f0000001000/0x3000)=nil, 0x3) 180.853427ms ago: executing program 6 (id=7913): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 156.004568ms ago: executing program 5 (id=7914): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x40a08010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.456053ms ago: executing program 6 (id=7915): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x400c4150, &(0x7f0000000080)={0x0, 0x0}) 0s ago: executing program 6 (id=7916): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.282874][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 559.295079][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 559.302602][ T5817] loop1: unable to read partition table [ 559.311169][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.317165][ T5817] loop1: partition table beyond EOD, truncated [ 559.327366][ T24] usb 6-1: config 0 descriptor?? [ 559.342417][T21946] ldm_validate_partition_table(): Disk read failed. [ 559.370042][T21946] Dev loop1: unable to read RDB block 0 [ 559.380194][T21946] loop1: unable to read partition table [ 559.386814][T21946] loop1: partition table beyond EOD, truncated [ 559.393167][T21946] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 559.512384][T21958] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.6603'. [ 559.547852][T21954] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.555531][T21954] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.746667][T21954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.776380][ T24] mcp2221 0003:04D8:00DD.00A0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 559.793428][T21954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.808045][T21972] loop2: detected capacity change from 0 to 7 [ 559.816366][T21972] Dev loop2: unable to read RDB block 7 [ 559.822015][T21972] loop2: unable to read partition table [ 559.828866][T21972] loop2: partition table beyond EOD, truncated [ 559.835178][T21972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 559.996850][ T10] usb 6-1: USB disconnect, device number 77 [ 560.243030][T21954] hsr1: left allmulticast mode [ 560.251519][T21954] dummy0: left allmulticast mode [ 560.258621][T21954] bond0: left allmulticast mode [ 560.271553][T21954] bond_slave_0: left allmulticast mode [ 560.277920][T21954] bond_slave_1: left allmulticast mode [ 560.286068][T21954] vlan0: left allmulticast mode [ 560.291966][ T62] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.316250][ T62] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.325904][ T62] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.366547][ T1005] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.444211][T22000] loop8: detected capacity change from 0 to 8 [ 560.453338][ T5817] Dev loop8: unable to read RDB block 8 [ 560.460474][ T5817] loop8: unable to read partition table [ 560.468912][ T5817] loop8: partition table beyond EOD, truncated [ 560.497342][T22000] Dev loop8: unable to read RDB block 8 [ 560.503015][T22000] loop8: unable to read partition table [ 560.518608][T22000] loop8: partition table beyond EOD, truncated [ 560.525158][T22000] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 560.734901][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 560.857334][T22013] vlan0: entered promiscuous mode [ 560.862563][T22013] geneve1: entered promiscuous mode [ 560.868424][T22013] vlan0: entered allmulticast mode [ 560.873615][T22013] geneve1: entered allmulticast mode [ 560.894743][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 560.901945][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 560.911450][ T24] usb 4-1: config 0 has no interface number 0 [ 560.917909][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 560.932152][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 560.941882][ T5906] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 560.949813][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.959161][ T24] usb 4-1: Product: syz [ 560.963949][ T24] usb 4-1: Manufacturer: syz [ 560.968682][ T24] usb 4-1: SerialNumber: syz [ 560.976290][ T24] usb 4-1: config 0 descriptor?? [ 560.984228][ T24] smsc75xx v1.0.0 [ 561.117787][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 561.133994][ T5906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.143769][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 561.152244][ T5906] usb 6-1: SerialNumber: syz [ 561.814753][ T5906] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 562.008071][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 562.038900][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 562.058874][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 562.084663][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 562.102494][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 562.127139][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 562.154146][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 562.169798][ T24] usb 4-1: USB disconnect, device number 117 [ 562.202959][ T5908] usb 6-1: USB disconnect, device number 78 [ 562.243454][ T5908] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 562.796819][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6654'. [ 562.815938][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6654'. [ 562.829343][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.829397][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.872497][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6655'. [ 562.883323][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6655'. [ 562.926054][T22101] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6655'. [ 562.948528][T22101] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6655'. [ 563.240998][T22122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6663'. [ 563.262981][T22122] netlink: 'syz.5.6663': attribute type 7 has an invalid length. [ 563.272189][T22122] netlink: 'syz.5.6663': attribute type 8 has an invalid length. [ 563.280394][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6663'. [ 563.296721][T22122] gretap0: entered promiscuous mode [ 563.304948][T22122] gretap0: left promiscuous mode [ 563.353616][T22129] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6666'. [ 563.685080][ T5908] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 563.785176][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 563.854821][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 563.861791][ T5908] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 563.870318][ T5908] usb 6-1: config 0 has no interface number 0 [ 563.879346][ T5908] usb 6-1: config 0 interface 12 has no altsetting 0 [ 563.888571][ T5908] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 563.897851][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.905985][ T5908] usb 6-1: Product: syz [ 563.910227][ T5908] usb 6-1: Manufacturer: syz [ 563.915000][ T5908] usb 6-1: SerialNumber: syz [ 563.921378][ T5908] usb 6-1: config 0 descriptor?? [ 563.946524][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.955413][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 563.965712][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.974766][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 563.985904][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 563.998763][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.008094][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.016394][ T9] usb 8-1: Product: syz [ 564.022805][ T9] usb 8-1: Manufacturer: syz [ 564.033444][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 564.038794][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 564.045278][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 564.051214][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 564.302710][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 564.303070][ T5906] usb 8-1: USB disconnect, device number 12 [ 564.309515][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 564.309538][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 564.548331][ T5908] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 564.564683][ T5908] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 564.582295][ T5908] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 564.599490][ T5908] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 564.614894][ T5908] usb 6-1: USB disconnect, device number 79 [ 565.154615][ T5906] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 565.169856][T22184] geneve4: entered promiscuous mode [ 565.313055][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6696'. [ 565.329061][ T5906] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.339752][ T5906] usb 8-1: config 0 has no interfaces? [ 565.350973][ T5906] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 565.361271][ T5906] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 565.372537][ T5906] usb 8-1: Product: syz [ 565.377915][ T5906] usb 8-1: Manufacturer: syz [ 565.382674][ T5906] usb 8-1: SerialNumber: syz [ 565.388441][ T24] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 565.399132][ T5906] usb 8-1: config 0 descriptor?? [ 565.553366][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.562709][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.576139][ T24] usb 6-1: config 0 descriptor?? [ 565.583123][ T24] cp210x 6-1:0.0: cp210x converter detected [ 565.630264][ T5908] usb 8-1: USB disconnect, device number 13 [ 565.814892][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 565.963129][T22221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.995966][ T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 566.004617][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 566.017406][ T9] usb 4-1: config 33 has too many interfaces: 128, using maximum allowed: 32 [ 566.034698][ T9] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 566.058150][ T9] usb 4-1: config 33 has 0 interfaces, different from the descriptor's value: 128 [ 566.070366][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 566.080708][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.088987][ T9] usb 4-1: Product: syz [ 566.093340][ T9] usb 4-1: Manufacturer: syz [ 566.098125][ T9] usb 4-1: SerialNumber: syz [ 566.211422][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 566.347371][ T24] usb 4-1: USB disconnect, device number 118 [ 566.423791][ T5906] usb 6-1: USB disconnect, device number 80 [ 566.442332][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 566.463500][ T5906] cp210x 6-1:0.0: device disconnected [ 566.740594][T22267] Invalid argument reading file caps for ./file0 [ 567.012608][T22285] kvm: kvm [22284]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x8001 [ 567.205526][ T5906] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 567.285229][ T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 567.370504][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 567.377428][ T5906] usb 4-1: config 0 has no interfaces? [ 567.382940][ T5906] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 567.392865][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.409626][ T5906] usb 4-1: config 0 descriptor?? [ 567.434788][ T24] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 567.457655][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.474458][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.484276][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 567.493338][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.504481][ T9] usb 6-1: config 0 descriptor?? [ 567.591804][ T24] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.600168][ T24] usb 8-1: config 0 has no interface number 0 [ 567.606314][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 567.617761][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 567.634892][ T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 567.644174][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.653182][ T5908] usb 4-1: USB disconnect, device number 119 [ 567.660730][ T24] usb 8-1: config 0 descriptor?? [ 567.677135][T22293] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 567.699221][ T24] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 567.915396][ T5908] usb 8-1: USB disconnect, device number 14 [ 567.921659][ T9] hid (null): usage index exceeded [ 567.932356][ T9] logitech-djreceiver 0003:046D:C532.00A1: ignoring exceeding usage max [ 567.955362][ T9] logitech-djreceiver 0003:046D:C532.00A1: ignoring exceeding usage max [ 567.974019][ T9] logitech-djreceiver 0003:046D:C532.00A1: usage index exceeded [ 567.994308][ T9] logitech-djreceiver 0003:046D:C532.00A1: item 0 1 2 2 parsing failed [ 568.016850][ T9] logitech-djreceiver 0003:046D:C532.00A1: logi_dj_probe: parse failed [ 568.035268][ T9] logitech-djreceiver 0003:046D:C532.00A1: probe with driver logitech-djreceiver failed with error -22 [ 568.145787][ T10] usb 6-1: USB disconnect, device number 81 [ 568.703184][T22342] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 568.997135][T22362] cifs: Bad value for 'source' [ 569.344948][ T10] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 569.516247][ T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 569.524580][ T10] usb 6-1: config 0 has no interface number 0 [ 569.530722][ T10] usb 6-1: config 0 interface 41 has no altsetting 0 [ 569.539623][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 569.548873][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.557119][ T10] usb 6-1: Product: syz [ 569.562018][ T10] usb 6-1: Manufacturer: syz [ 569.567172][ T10] usb 6-1: SerialNumber: syz [ 569.573514][ T10] usb 6-1: config 0 descriptor?? [ 570.061413][T22389] macsec0: entered promiscuous mode [ 570.069002][T22389] __nla_validate_parse: 4 callbacks suppressed [ 570.069012][T22389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6787'. [ 570.098711][T22389] macsec0 (unregistering): left promiscuous mode [ 570.588313][ T10] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 570.602456][ T10] usb 6-1: USB disconnect, device number 82 [ 571.312870][T22426] input: syz0 as /devices/virtual/input/input153 [ 571.714790][ T24] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 571.864758][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 571.872637][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.882724][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.892828][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.903485][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.917162][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.926342][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.155571][ T24] usb 6-1: usb_control_msg returned -32 [ 572.161439][ T24] usbtmc 6-1:16.0: can't read capabilities [ 572.554641][ T10] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 572.706487][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 572.715147][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 572.723766][ T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 572.732880][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.743254][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.756472][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.765910][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.773906][ T10] usb 8-1: Product: syz [ 572.778162][ T10] usb 8-1: Manufacturer: syz [ 572.782763][ T10] usb 8-1: SerialNumber: syz [ 573.064748][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.201563][ T10] usb 8-1: 0:2 : does not exist [ 573.214823][ T10] usb 8-1: USB disconnect, device number 15 [ 573.233186][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.124616][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 574.275131][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 574.283934][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 574.292933][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 574.302655][ T10] usb 4-1: string descriptor 0 read error: -22 [ 574.309095][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 574.318310][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.333393][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 574.344683][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 574.356018][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 574.363176][ T10] usb 4-1: media controller created [ 574.375843][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.488898][ T24] usb 6-1: USB disconnect, device number 83 [ 574.538681][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 574.592695][ T10] usb 4-1: USB disconnect, device number 120 [ 574.913882][T22530] loop5: detected capacity change from 0 to 7 [ 574.925791][T22530] Dev loop5: unable to read RDB block 7 [ 574.932289][T22530] loop5: unable to read partition table [ 574.939155][T22530] loop5: partition table beyond EOD, truncated [ 574.948862][T22530] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 574.972262][ T5200] Dev loop5: unable to read RDB block 7 [ 574.978293][ T5200] loop5: unable to read partition table [ 574.984171][ T5200] loop5: partition table beyond EOD, truncated [ 576.224713][ T24] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 576.225541][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 576.374645][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 576.381524][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.392802][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.403073][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.406302][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.417193][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 576.430922][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.438687][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.448415][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 576.464351][ T10] usb 8-1: SerialNumber: syz [ 576.470436][ T24] usb 6-1: config 0 descriptor?? [ 576.901845][ T24] microsoft 0003:045E:07DA.00A2: ignoring exceeding usage max [ 576.934447][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00A2/input/input154 [ 576.997379][T22570] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 577.067280][T22573] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 577.102581][ T24] microsoft 0003:045E:07DA.00A2: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 577.123581][ T10] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 577.153450][ T24] usb 6-1: USB disconnect, device number 84 [ 577.249759][T22577] fido_id[22577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 577.479909][T22591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6880'. [ 577.594023][ T24] usb 8-1: USB disconnect, device number 16 [ 577.611676][ T24] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 577.952287][T22613] syz_tun: entered allmulticast mode [ 577.971263][T22612] syz_tun: left allmulticast mode [ 578.216288][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 578.216302][ T30] audit: type=1326 audit(1768338838.742:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.6881" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75539 code=0x0 [ 578.488237][ T5908] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 578.664888][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 578.676209][ T5908] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 578.684716][ T5908] usb 8-1: config 0 has no interface number 0 [ 578.718026][ T5908] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d [ 578.734967][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.749092][ T5908] usb 8-1: Product: syz [ 578.753890][ T5908] usb 8-1: Manufacturer: syz [ 578.774908][ T5908] usb 8-1: SerialNumber: syz [ 578.781812][ T5908] usb 8-1: config 0 descriptor?? [ 578.789897][ T5908] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 578.857035][T22605] Set syz1 is full, maxelem 1023 reached [ 578.881376][T22660] veth5: entered allmulticast mode [ 579.279151][T22680] binder: 22679:22680 ioctl 4018620d 0 returned -22 [ 579.600104][ T5908] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input155 [ 579.659664][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6909'. [ 579.669230][T22698] bridge_slave_1: left allmulticast mode [ 579.675623][T22698] bridge_slave_1: left promiscuous mode [ 579.681561][T22698] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.691259][T22698] bridge_slave_0: left allmulticast mode [ 579.697908][T22698] bridge_slave_0: left promiscuous mode [ 579.704048][T22698] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.813431][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.820506][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.827786][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.834872][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.841833][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.848793][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.855746][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.862725][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.869738][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.876781][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.883787][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.890888][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.897839][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.904901][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.911853][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.918870][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.925822][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.932792][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.939787][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.946799][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.953945][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.961103][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.968086][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.975139][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.982614][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.989581][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 579.996535][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.003493][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.010488][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.017457][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.024523][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.031670][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.038652][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.045692][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.052655][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.059650][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.066608][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.073584][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.080596][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.087565][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.094538][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.101508][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.108671][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.116076][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.123122][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.130291][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.137353][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.144323][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.151288][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.158278][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.165305][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.172261][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.179242][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.186284][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.193246][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.200254][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.207218][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.214172][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.221140][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.228557][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.235546][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.242407][ T5908] usb 8-1: USB disconnect, device number 17 [ 580.248440][ C0] gspca_pac7302 8-1:0.56: URB error -71, resubmitting [ 580.248457][ C0] gspca_main: Resubmit URB failed with error -19 [ 580.644049][T22732] binder: 22731:22732 ioctl 4018620d 0 returned -22 [ 580.774713][ T5908] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 580.924717][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 580.931530][ T5908] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 580.941021][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.951554][ T5908] usb 8-1: config 0 descriptor?? [ 581.161365][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 581.170025][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.180012][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 581.187310][ T5908] usb 8-1: media controller created [ 581.199076][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.364171][ T5908] az6027: usb out operation failed. (-71) [ 581.371756][ T5908] az6027: usb out operation failed. (-71) [ 581.378168][ T5908] stb0899_attach: Driver disabled by Kconfig [ 581.384372][ T5908] az6027: no front-end attached [ 581.384372][ T5908] [ 581.391967][ T5908] az6027: usb out operation failed. (-71) [ 581.397869][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 581.407043][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input156 [ 581.444998][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 581.451950][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 581.476434][ T5908] usb 8-1: USB disconnect, device number 18 [ 581.508462][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 581.571558][ T30] audit: type=1804 audit(1768338842.092:1672): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6927" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=103705 res=1 errno=0 [ 581.675111][ T24] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 581.857190][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 581.868768][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.880367][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.891197][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 581.906489][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 581.915780][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 581.923888][ T24] usb 6-1: Manufacturer: syz [ 581.935102][ T24] usb 6-1: config 0 descriptor?? [ 582.044331][ T30] audit: type=1326 audit(1768338842.562:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22760 comm="syz.7.6937" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4539 code=0x0 [ 582.351327][ T24] appleir 0003:05AC:8243.00A3: unknown main item tag 0x0 [ 582.361595][ T24] appleir 0003:05AC:8243.00A3: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 582.616784][ T24] usb 6-1: USB disconnect, device number 85 [ 583.347152][ T24] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 583.413341][T22801] binder: 22800:22801 ioctl c0306201 80000b40 returned -14 [ 583.536017][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.547985][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.558217][ T24] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 583.567348][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.577216][ T24] usb 8-1: config 0 descriptor?? [ 583.989427][ T24] elan 0003:04F3:0755.00A4: unknown main item tag 0x0 [ 583.997455][ T24] elan 0003:04F3:0755.00A4: unknown main item tag 0x0 [ 584.004709][ T24] elan 0003:04F3:0755.00A4: unknown main item tag 0x0 [ 584.011637][ T24] elan 0003:04F3:0755.00A4: unknown main item tag 0x0 [ 584.018510][ T24] elan 0003:04F3:0755.00A4: unknown main item tag 0x0 [ 584.026025][ T24] elan 0003:04F3:0755.00A4: failed to start in urb: -90 [ 584.034189][ T24] elan 0003:04F3:0755.00A4: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 584.203003][ T5908] usb 8-1: USB disconnect, device number 19 [ 585.185662][ T5908] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 585.274309][T22833] input: syz1 as /devices/virtual/input/input157 [ 585.346945][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 585.354014][ T5908] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 585.365746][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 585.384090][ T5908] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 585.395331][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.403997][ T5908] usb 8-1: Product: syz [ 585.408664][ T5908] usb 8-1: Manufacturer: syz [ 585.413360][ T5908] usb 8-1: SerialNumber: syz [ 585.422243][ T5908] usb 8-1: config 0 descriptor?? [ 585.435258][ T5908] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 585.448570][ T30] audit: type=1326 audit(1768338845.972:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22838 comm="syz.0.6971" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 585.470196][ T5908] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 585.564648][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 585.714676][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 585.721938][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 585.733212][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 585.742553][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.750735][ T24] usb 4-1: Product: syz [ 585.754959][ T24] usb 4-1: Manufacturer: syz [ 585.759548][ T24] usb 4-1: SerialNumber: syz [ 585.766679][ T24] usb 4-1: config 0 descriptor?? [ 585.775144][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 585.962453][T22844] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6973'. [ 586.037556][ T5908] em28xx 8-1:0.0: chip ID is em2874 [ 586.257357][ T5908] usb 8-1: USB disconnect, device number 20 [ 586.264296][ T5908] em28xx 8-1:0.0: Disconnecting em28xx [ 586.282086][ T5908] em28xx 8-1:0.0: Freeing device [ 586.685701][T22866] binder: 22865:22866 ioctl c0306201 800002c0 returned -14 [ 586.785583][ T24] gspca_zc3xx: reg_w_i err -71 [ 587.384658][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 587.391664][ T24] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 587.402576][ T24] usb 4-1: USB disconnect, device number 121 [ 587.556779][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6999'. [ 587.568628][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6999'. [ 587.615622][ T5908] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 587.774631][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 587.781220][ T5908] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 587.789655][ T5908] usb 8-1: config 0 has no interface number 0 [ 587.798614][ T5908] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 587.811080][ T5908] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 587.820331][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.828363][ T5908] usb 8-1: Product: syz [ 587.832539][ T5908] usb 8-1: Manufacturer: syz [ 587.837218][ T5908] usb 8-1: SerialNumber: syz [ 587.843361][ T5908] usb 8-1: config 0 descriptor?? [ 587.851024][ T5908] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 587.860923][ T5908] em28xx 8-1:0.132: Video interface 132 found: [ 587.867159][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 588.034671][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 588.041723][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.053302][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.064891][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 588.074136][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.092155][ T10] usb 4-1: config 0 descriptor?? [ 588.253293][ T5908] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 588.468745][ T5908] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 588.481238][ T5908] em28xx 8-1:0.132: board has no eeprom [ 588.516737][ T10] ft260 0003:0403:6030.00A5: unknown main item tag 0x7 [ 588.545427][ T5908] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 588.557045][ T5908] em28xx 8-1:0.132: analog set to bulk mode. [ 588.581407][ T5908] usb 8-1: USB disconnect, device number 21 [ 588.587956][ T9] em28xx 8-1:0.132: Registering V4L2 extension [ 588.598290][ T5908] em28xx 8-1:0.132: Disconnecting em28xx [ 588.664988][ T9] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 588.672511][ T9] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 588.680840][ T9] em28xx 8-1:0.132: No AC97 audio processor [ 588.691518][ T9] usb 8-1: Decoder not found [ 588.696385][ T9] em28xx 8-1:0.132: failed to create media graph [ 588.702857][ T9] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 588.711670][ T10] ft260 0003:0403:6030.00A5: chip code: 6424 8183 [ 588.720240][ T9] em28xx 8-1:0.132: Remote control support is not available for this card. [ 588.730046][ T5908] em28xx 8-1:0.132: Closing input extension [ 588.741722][ T5908] em28xx 8-1:0.132: Freeing device [ 588.911077][ T10] ft260 0003:0403:6030.00A5: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 589.321122][ T10] ft260 0003:0403:6030.00A5: failed to retrieve status: -71 [ 589.346792][ T10] ft260 0003:0403:6030.00A5: failed to reset I2C controller: -71 [ 589.390497][ T10] usb 4-1: USB disconnect, device number 122 [ 589.621722][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.639368][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.650569][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.658431][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.664377][T22942] bridge0: entered promiscuous mode [ 589.672690][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.678359][T22942] bridge0: entered allmulticast mode [ 589.692418][T22942] team0: Port device bridge0 added [ 589.744141][T22942] bridge0: port 1(team0) entered blocking state [ 589.759182][T22942] bridge0: port 1(team0) entered disabled state [ 589.768331][T22942] team0: entered allmulticast mode [ 589.773486][T22942] team_slave_0: entered allmulticast mode [ 589.780206][T22942] team_slave_1: entered allmulticast mode [ 589.796468][T22942] team0: left allmulticast mode [ 589.801452][T22942] team_slave_0: left allmulticast mode [ 589.807307][T22942] team_slave_1: left allmulticast mode [ 590.022051][T22957] netlink: 'syz.6.7025': attribute type 1 has an invalid length. [ 590.102156][T22957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.110733][ T3975] bridge_slave_1: left allmulticast mode [ 590.116517][ T3975] bridge_slave_1: left promiscuous mode [ 590.123356][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.131965][ T3975] bridge_slave_0: left allmulticast mode [ 590.137667][ T3975] bridge_slave_0: left promiscuous mode [ 590.143392][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.284795][ T5908] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 590.497430][ T5908] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 590.506942][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.516419][ T5908] usb 6-1: Product: syz [ 590.520700][ T5908] usb 6-1: Manufacturer: syz [ 590.525710][ T5908] usb 6-1: SerialNumber: syz [ 590.536255][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.538524][ T5908] usb 6-1: config 0 descriptor?? [ 590.551502][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.561161][ T3975] bond0 (unregistering): Released all slaves [ 590.582521][T22963] bond1: (slave ip6erspan0): making interface the new active one [ 590.592121][T22963] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 590.879703][T22943] chnl_net:caif_netlink_parms(): no params data found [ 590.921594][T22980] kernel read not supported for file /$@ (pid: 22980 comm: syz.3.7030) [ 590.934327][ T30] audit: type=1800 audit(1768338851.452:1675): pid=22980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7030" name="$@" dev="mqueue" ino=104418 res=0 errno=0 [ 591.015932][ T3975] hsr_slave_0: left promiscuous mode [ 591.022456][ T3975] hsr_slave_1: left promiscuous mode [ 591.045500][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.075384][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.411184][T23004] netlink: 'syz.3.7035': attribute type 1 has an invalid length. [ 591.706437][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7036'. [ 591.714809][ T5828] Bluetooth: hci2: command tx timeout [ 591.770639][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 591.828128][ T3975] team0 (unregistering): Port device C removed [ 592.603485][ T5908] usb 6-1: f81604_read: reg: 100e failed: -EPROTO [ 592.611294][T23004] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 592.671019][ T5908] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 592.733412][ T5908] usb 6-1: USB disconnect, device number 86 [ 592.738729][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7040'. [ 592.761211][ T5908] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 592.823802][ T5495] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 592.866350][ T5908] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 592.923462][T22943] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.946586][T22943] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.954013][T22943] bridge_slave_0: entered allmulticast mode [ 592.961974][T22943] bridge_slave_0: entered promiscuous mode [ 592.972252][T22943] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.980924][T22943] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.989691][T22943] bridge_slave_1: entered allmulticast mode [ 592.997670][T22943] bridge_slave_1: entered promiscuous mode [ 593.091012][T22943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.117491][T22943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.238770][T22943] team0: Port device team_slave_0 added [ 593.261571][T22943] team0: Port device team_slave_1 added [ 593.390954][T22943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.420692][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.469498][T22943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.486461][T22943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.493701][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.521518][T22943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.665980][T22943] hsr_slave_0: entered promiscuous mode [ 593.672587][T22943] hsr_slave_1: entered promiscuous mode [ 593.685472][T22943] debugfs: 'hsr0' already exists in 'hsr' [ 593.695631][ T24] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 593.702089][T22943] Cannot create hsr debugfs directory [ 593.787144][ T5828] Bluetooth: hci2: command tx timeout [ 593.868015][ T24] usb 6-1: config 0 has no interfaces? [ 593.879408][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 593.894615][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.914684][ T24] usb 6-1: Product: syz [ 593.918907][ T24] usb 6-1: Manufacturer: syz [ 593.934671][ T24] usb 6-1: SerialNumber: syz [ 593.950036][ T24] usb 6-1: config 0 descriptor?? [ 594.231128][ T5908] usb 6-1: USB disconnect, device number 87 [ 594.602155][T22943] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 594.612977][T22943] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 594.639217][T22943] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 594.658892][T22943] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 594.988759][T22943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.029137][T22943] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.079342][ T2072] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.086576][ T2072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.125319][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.132690][ T2072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.225086][T22943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.324004][T22943] veth0_vlan: entered promiscuous mode [ 595.339673][T22943] veth1_vlan: entered promiscuous mode [ 595.398809][T22943] veth0_macvtap: entered promiscuous mode [ 595.410434][T22943] veth1_macvtap: entered promiscuous mode [ 595.431360][T22943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.458909][T22943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.483124][T18647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.501931][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 595.541926][T18647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.551995][T18647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.564239][T18647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.654943][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 595.662320][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.673488][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.686678][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.698273][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.715086][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.740810][T18647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.751939][T18647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.759733][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.786890][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.819429][ T24] usb 4-1: config 0 descriptor?? [ 595.867707][ T5828] Bluetooth: hci2: command tx timeout [ 596.289444][ T24] microsoft 0003:045E:07DA.00A6: ignoring exceeding usage max [ 596.380873][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00A6/input/input159 [ 596.665240][ T5922] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 596.788176][ T24] microsoft 0003:045E:07DA.00A6: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 596.856829][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.899214][ T24] usb 4-1: USB disconnect, device number 123 [ 596.936134][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.007842][ T5922] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 597.028164][T23162] fido_id[23162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 597.065805][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.126126][ T5922] usb 6-1: config 0 descriptor?? [ 597.388911][T23182] netlink: 'syz.7.7075': attribute type 4 has an invalid length. [ 597.414499][T23182] netlink: 'syz.7.7075': attribute type 4 has an invalid length. [ 597.548525][ T5922] cm6533_jd 0003:0D8C:0022.00A7: unknown main item tag 0x0 [ 597.594803][ T5922] cm6533_jd 0003:0D8C:0022.00A7: unknown main item tag 0x0 [ 597.614813][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.00A7/input/input160 [ 597.685875][ T5922] cm6533_jd 0003:0D8C:0022.00A7: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 597.805603][ T5922] usb 6-1: USB disconnect, device number 88 [ 597.934970][ T980] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 597.944908][ T5828] Bluetooth: hci2: command tx timeout [ 598.104007][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.118605][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.128528][ T980] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.141537][ T980] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.150605][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.161503][ T980] usb 8-1: config 0 descriptor?? [ 598.596453][ T980] plantronics 0003:047F:FFFF.00A8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 598.632839][ T5908] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 598.796230][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.799204][T23240] netlink: 'syz.3.7091': attribute type 1 has an invalid length. [ 598.817275][ T5908] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 598.826735][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.837611][ T5908] usb 6-1: config 0 descriptor?? [ 598.856244][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 598.882601][T23240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.947930][T23242] bond2: (slave geneve4): making interface the new active one [ 598.971799][T23242] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 599.032561][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.042664][ T1005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.062644][ T1005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.113722][ T1005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.229245][ C1] plantronics 0003:047F:FFFF.00A8: hid_field_extract() called with n (132) > 32! (kworker/u8:8) [ 599.261574][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 599.286432][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 599.301099][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 599.432144][ T10] usb 8-1: USB disconnect, device number 22 [ 599.520205][ T5908] pwc: recv_control_msg error -71 req 04 val 1300 [ 599.541987][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 599.550759][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 599.557976][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 599.566518][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 599.573503][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 599.580891][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 599.588104][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 599.606685][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 599.623819][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 599.632283][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 599.639833][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.655877][ T5908] pwc: Registered as video103. [ 599.681214][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input162 [ 599.729510][ T5908] usb 6-1: USB disconnect, device number 89 [ 599.766424][T23262] loop9: detected capacity change from 0 to 7 [ 599.794483][ T5817] Dev loop9: unable to read RDB block 7 [ 599.805474][ T5817] loop9: AHDI p2 [ 599.809678][ T5817] loop9: partition table partially beyond EOD, truncated [ 599.835824][T23262] Dev loop9: unable to read RDB block 7 [ 599.843669][T23262] loop9: AHDI p2 [ 599.848610][T23262] loop9: partition table partially beyond EOD, truncated [ 600.058857][T23275] input: syz0 as /devices/virtual/input/input163 [ 600.170096][ T5922] hid-generic 0000:0000:0000.00A9: unknown main item tag 0x0 [ 600.197779][ T5922] hid-generic 0000:0000:0000.00A9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 600.334687][ T24] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 600.364638][ T5922] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 600.486488][ T24] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 600.515076][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 600.534019][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 600.545411][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 600.551183][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 600.563198][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 600.573560][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 600.582057][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.595036][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.615027][ T24] usb 8-1: Product: syz [ 600.622377][ T24] usb 8-1: Manufacturer: syz [ 600.629129][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 600.642376][ T24] usb 8-1: SerialNumber: syz [ 600.650132][ T24] usb 8-1: config 0 descriptor?? [ 600.661138][ T5922] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 600.674443][T23276] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 600.682013][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.695639][ T24] usb 8-1: selecting invalid altsetting 0 [ 600.706931][ T5922] usb 6-1: config 0 descriptor?? [ 600.734620][ T5908] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 600.894684][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 600.908072][ T5908] usb 4-1: config 0 has no interfaces? [ 600.916842][T23276] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 600.932839][T23276] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 600.933614][ T5908] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.942478][T23276] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 600.958594][T23276] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 600.962089][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.969073][T23276] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 600.984649][ T5908] usb 4-1: Product: syz [ 600.988932][ T24] usb 8-1: USB disconnect, device number 23 [ 600.991567][ T5908] usb 4-1: Manufacturer: syz [ 601.006648][ T5908] usb 4-1: SerialNumber: syz [ 601.017223][ T5908] usb 4-1: config 0 descriptor?? [ 601.135748][ T5922] logitech 0003:046D:C293.00AA: nested delimiters [ 601.143600][ T5922] logitech 0003:046D:C293.00AA: item 0 4 2 10 parsing failed [ 601.152481][ T5922] logitech 0003:046D:C293.00AA: parse failed [ 601.158857][ T5922] logitech 0003:046D:C293.00AA: probe with driver logitech failed with error -22 [ 601.339039][ T10] usb 6-1: USB disconnect, device number 90 [ 601.589898][T23320] netlink: 'syz.7.7125': attribute type 1 has an invalid length. [ 601.603157][T23320] ip6gre1: entered promiscuous mode [ 601.692553][T23323] netlink: 'syz.7.7126': attribute type 1 has an invalid length. [ 601.759376][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7128'. [ 601.768951][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7128'. [ 602.494655][ T5908] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 602.509545][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7140'. [ 602.518778][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7140'. [ 602.666072][ T5908] usb 8-1: config 0 has no interfaces? [ 602.676011][ T5908] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 602.686553][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.695112][ T5908] usb 8-1: Product: syz [ 602.699535][ T5908] usb 8-1: Manufacturer: syz [ 602.704197][ T5908] usb 8-1: SerialNumber: syz [ 602.714118][ T5908] usb 8-1: config 0 descriptor?? [ 603.058279][ T5908] usb 8-1: USB disconnect, device number 24 [ 603.509314][ T10] usb 4-1: USB disconnect, device number 124 [ 603.687669][T23388] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7155'. [ 603.707298][T23388] netlink: 'syz.3.7155': attribute type 6 has an invalid length. [ 603.723990][T23388] netlink: 'syz.3.7155': attribute type 5 has an invalid length. [ 603.742295][T23388] netlink: 'syz.3.7155': attribute type 4 has an invalid length. [ 603.742358][ T5908] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 603.945656][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 603.953765][ T5908] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 603.979558][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.004807][ T5908] usb 6-1: Product: syz [ 604.009712][ T5908] usb 6-1: Manufacturer: syz [ 604.044359][ T5908] usb 6-1: SerialNumber: syz [ 604.062712][ T5908] usb 6-1: config 0 descriptor?? [ 604.083630][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 604.245822][T23407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7163'. [ 604.256038][T23407] netlink: 'syz.7.7163': attribute type 14 has an invalid length. [ 604.295232][T23407] vxlan0: entered promiscuous mode [ 604.308069][ T2072] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.317485][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 604.326755][ T2072] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.342988][ T2072] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.354692][ T2072] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.476614][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 604.485672][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.497887][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 604.507288][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.522273][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 604.531972][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 604.540272][ T10] usb 4-1: Product: syz [ 604.547076][ T10] usb 4-1: Manufacturer: syz [ 604.558061][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 604.563826][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 604.573928][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 604.581594][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 604.798971][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 604.805580][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 604.812051][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 604.818763][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 604.825254][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 604.831838][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 604.838205][ T10] usb 4-1: USB disconnect, device number 125 [ 604.844983][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 604.851588][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 604.857638][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 605.309029][ T5908] gspca_sonixj: reg_w1 err -71 [ 605.354721][ T5908] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 605.379986][ T5908] usb 6-1: USB disconnect, device number 91 [ 605.624630][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 605.660703][T23447] ALSA: seq fatal error: cannot create timer (-16) [ 605.786784][ T10] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 605.797838][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.811316][ T10] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 605.822232][ T10] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 605.830525][ T10] usb 8-1: Manufacturer: syz [ 605.844130][ T10] usb 8-1: config 0 descriptor?? [ 605.907049][ T10] rc_core: IR keymap rc-hauppauge not found [ 605.913214][ T10] Registered IR keymap rc-empty [ 605.920675][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 605.933237][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input165 [ 606.012686][T23468] netlink: 'syz.3.7188': attribute type 33 has an invalid length. [ 606.022421][T23468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7188'. [ 606.037764][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7188'. [ 606.066047][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 606.072984][ T24] usb 8-1: USB disconnect, device number 25 [ 606.831880][ T30] audit: type=1326 audit(1768338867.352:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 606.874072][ T30] audit: type=1326 audit(1768338867.352:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 606.899137][ T30] audit: type=1326 audit(1768338867.352:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 606.925157][ T30] audit: type=1326 audit(1768338867.352:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000 [ 606.950709][ T30] audit: type=1326 audit(1768338867.352:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000 [ 606.975701][ T30] audit: type=1326 audit(1768338867.352:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 607.007923][ T30] audit: type=1326 audit(1768338867.382:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000 [ 607.032528][ T30] audit: type=1326 audit(1768338867.382:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 607.090874][ T30] audit: type=1326 audit(1768338867.382:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000 [ 607.114315][ T30] audit: type=1326 audit(1768338867.382:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.7.7197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 607.148060][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.434112][T23517] geneve1: Caught tx_queue_len zero misconfig [ 607.716831][T23527] kernel read not supported for file /file0 (pid: 23527 comm: syz.7.7211) [ 607.744999][ T10] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 607.918184][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 607.937155][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.952775][ T10] usb 6-1: Product: syz [ 607.957790][ T10] usb 6-1: Manufacturer: syz [ 607.962396][ T10] usb 6-1: SerialNumber: syz [ 607.975987][ T10] usb 6-1: config 0 descriptor?? [ 608.407811][ T5922] hid-generic 0000:0000:0000.00AB: unknown main item tag 0x0 [ 608.409019][ T10] airspy 6-1:0.0: Board ID: 00 [ 608.420959][ T10] airspy 6-1:0.0: Firmware version: [ 608.430079][ T5922] hid-generic 0000:0000:0000.00AB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 608.898800][T23571] sctp: [Deprecated]: syz.7.7230 (pid 23571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.898800][T23571] Use struct sctp_sack_info instead [ 609.216722][ T10] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 609.226465][ T10] airspy 6-1:0.0: Registered as swradio24 [ 609.233213][ T10] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 609.261049][ T10] usb 6-1: USB disconnect, device number 92 [ 609.560844][T23581] pim6reg1: entered promiscuous mode [ 609.566345][T23581] pim6reg1: entered allmulticast mode [ 609.753778][T23588] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 609.946190][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7241'. [ 609.988041][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7241'. [ 610.190298][T23608] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 610.208082][T23608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.271424][T23608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.414156][T23614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 610.420404][T23614] syzkaller1: Refused to change device type [ 611.534689][ T5908] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 611.584651][ T5922] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 611.614668][ T5898] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 611.685780][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 611.693563][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 611.707284][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 611.718078][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.728159][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.741262][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.742052][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 611.750362][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.769464][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.780505][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 611.786309][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.796846][ T5922] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 611.806699][ T5898] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 611.815417][ T5898] usb 4-1: config 0 has no interface number 0 [ 611.822964][ T5898] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 611.833402][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.843670][ T5898] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 611.853001][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.861757][ T5898] usb 4-1: Product: syz [ 611.867097][ T5922] usb 8-1: config 0 descriptor?? [ 611.872305][ T5898] usb 4-1: Manufacturer: syz [ 611.881972][ T5898] usb 4-1: SerialNumber: syz [ 611.889913][ T5898] usb 4-1: config 0 descriptor?? [ 611.971162][ T5908] usb 6-1: GET_CAPABILITIES returned 0 [ 611.979124][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 612.182821][ T5908] usb 6-1: USB disconnect, device number 93 [ 612.249489][T23694] batadv_slave_1: entered promiscuous mode [ 612.257629][T23693] batadv_slave_1: left promiscuous mode [ 612.291633][ T5922] ft260 0003:0403:6030.00AC: unknown main item tag 0x7 [ 612.393228][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 612.393242][ T30] audit: type=1326 audit(1768338872.912:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23697 comm="syz.6.7286" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23539 code=0x0 [ 612.485789][ T5922] ft260 0003:0403:6030.00AC: chip code: b200 0000 [ 612.507624][ T5898] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 612.524098][ T5898] usb 4-1: USB disconnect, device number 126 [ 612.634692][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7288'. [ 612.649891][T23704] vxlan0: entered promiscuous mode [ 612.656335][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.665857][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.674951][T18647] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.685906][T18647] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.695210][ T5922] ft260 0003:0403:6030.00AC: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 612.896234][ T5922] ft260 0003:0403:6030.00AC: failed to retrieve status: -71, no wakeup [ 612.907846][ T5922] ft260 0003:0403:6030.00AC: failed to retrieve status: -71 [ 612.917287][ T5922] ft260 0003:0403:6030.00AC: failed to reset I2C controller: -71 [ 612.935185][ T5922] usb 8-1: USB disconnect, device number 26 [ 613.044667][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 613.206784][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.219370][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.234638][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.264743][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.284016][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.300292][ T10] usb 6-1: config 0 descriptor?? [ 613.680443][T23742] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 613.727771][ T10] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 613.904798][ T5922] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 614.035380][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 614.058817][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.070951][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.081133][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.094488][ T5922] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.103577][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.114023][ T5922] usb 4-1: config 0 descriptor?? [ 614.194888][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 614.201728][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.213688][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.223866][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 614.237082][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 614.246870][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.266543][ T10] usb 8-1: config 0 descriptor?? [ 614.311527][T23763] netlink: 'syz.6.7311': attribute type 4 has an invalid length. [ 614.331241][T23763] netlink: 'syz.6.7311': attribute type 4 has an invalid length. [ 614.540312][ T5922] plantronics 0003:047F:FFFF.00AE: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 614.682666][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 614.690480][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.00AF/input/input168 [ 614.718499][ T10] microsoft 0003:045E:07DA.00AF: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 614.911528][ T5922] usb 8-1: USB disconnect, device number 27 [ 614.938813][ T5877] usb 4-1: USB disconnect, device number 127 [ 615.705661][ T5906] usb 6-1: USB disconnect, device number 94 [ 616.766318][T23820] cgroup: fork rejected by pids controller in /syz7 [ 617.322221][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 617.334294][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 617.346458][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 617.358295][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 617.367216][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 617.550122][T23837] chnl_net:caif_netlink_parms(): no params data found [ 617.604245][T23837] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.611593][T23837] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.619284][T23837] bridge_slave_0: entered allmulticast mode [ 617.627997][T23837] bridge_slave_0: entered promiscuous mode [ 617.640480][T23837] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.649036][T23837] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.656729][T23837] bridge_slave_1: entered allmulticast mode [ 617.672136][T23837] bridge_slave_1: entered promiscuous mode [ 617.714361][T23837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.731042][T23837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.772943][T23837] team0: Port device team_slave_0 added [ 617.781421][T23837] team0: Port device team_slave_1 added [ 617.821174][T23837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.828539][T23837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.856369][T23837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.869554][T23837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.876853][T23837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.903174][T23837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.958876][T23837] hsr_slave_0: entered promiscuous mode [ 617.966305][T23837] hsr_slave_1: entered promiscuous mode [ 617.972816][T23837] debugfs: 'hsr0' already exists in 'hsr' [ 617.979962][T23837] Cannot create hsr debugfs directory [ 618.148619][T23837] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.160778][T23837] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.255438][T23837] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.261783][T23864] netlink: 'syz.6.7351': attribute type 3 has an invalid length. [ 618.266013][T23837] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.286759][T23864] netlink: 136 bytes leftover after parsing attributes in process `syz.6.7351'. [ 618.373811][T23837] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.384883][T23837] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.473290][T23837] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.483746][T23837] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.664005][T23837] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.679833][T23837] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.697951][T23837] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.711513][T23837] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.804010][T23837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.822800][T23837] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.835677][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.842837][T18647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.857314][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.864576][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.919712][T23837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.953089][T23837] veth0_vlan: entered promiscuous mode [ 618.963216][T23837] veth1_vlan: entered promiscuous mode [ 618.992144][T23837] veth0_macvtap: entered promiscuous mode [ 619.001017][T23837] veth1_macvtap: entered promiscuous mode [ 619.019512][T23837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.032142][T23837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.044125][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.053894][ T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.066905][ T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.076647][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.148145][T20866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.160277][T20866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.181871][T20866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.190447][T20866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.432930][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7360'. [ 619.465950][ T5828] Bluetooth: hci2: command tx timeout [ 619.514746][T23498] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 619.688159][T23498] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.716690][T23498] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 619.743399][T23498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.774266][T23498] usb 8-1: config 0 descriptor?? [ 620.214331][T23498] holtek 0003:1241:5015.00B0: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.7-1/input0 [ 620.226087][T23498] holtek 0003:1241:5015.00B0: no inputs found [ 620.430035][T23498] usb 8-1: USB disconnect, device number 28 [ 621.472823][T23957] batman_adv: batadv0: Adding interface: ip6gretap1 [ 621.479781][T23957] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 621.501769][T23957] batman_adv: batadv0: Interface activated: ip6gretap1 [ 621.544707][ T5828] Bluetooth: hci2: command tx timeout [ 623.256645][T24016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 623.624898][ T5828] Bluetooth: hci2: command tx timeout [ 623.754915][T23498] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 623.852366][T24032] vivid-000: disconnect [ 623.879918][T24029] vivid-000: reconnect [ 623.909581][T23498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.920805][T23498] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.932624][T23498] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 623.952631][T23498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.963880][T23498] usb 4-1: Product: syz [ 623.968189][T23498] usb 4-1: Manufacturer: syz [ 623.974851][T23498] usb 4-1: SerialNumber: syz [ 623.991722][T23498] usb 4-1: config 0 descriptor?? [ 624.010675][T23498] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 624.017184][T24036] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7420'. [ 624.030279][T24036] netlink: Conntrack attr has 3 unknown bytes [ 624.038242][T23498] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.065866][T23498] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 624.082794][T23498] usb 4-1: media controller created [ 624.101240][T23498] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.224417][T23498] DVB: Unable to find symbol tda10046_attach() [ 624.238577][T23498] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 624.250616][T23498] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 624.268520][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.277364][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.579374][T24055] vlan0: entered promiscuous mode [ 624.585421][T24055] gretap0: entered promiscuous mode [ 625.277278][T23498] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 625.291229][T23498] usb 4-1: USB disconnect, device number 2 [ 625.464912][ T5906] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 625.616355][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.630980][ T5906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.640741][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.649185][ T5906] usb 6-1: Product: syz [ 625.653429][ T5906] usb 6-1: Manufacturer: syz [ 625.658069][ T5906] usb 6-1: SerialNumber: syz [ 625.704882][ T5828] Bluetooth: hci2: command tx timeout [ 626.084619][T23498] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 626.244718][T23498] usb 4-1: Using ep0 maxpacket: 8 [ 626.262315][T23498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 626.278364][T23498] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 626.296488][T23498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.306831][T23498] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.324866][T23498] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 626.335463][T23498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.343546][T23498] usb 4-1: Product: syz [ 626.347897][T23498] usb 4-1: Manufacturer: syz [ 626.352620][T23498] usb 4-1: SerialNumber: syz [ 626.360549][T23498] usb 4-1: config 0 descriptor?? [ 626.368048][T23498] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 626.592577][T23498] usb 4-1: USB disconnect, device number 3 [ 626.691227][ T5906] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 626.697948][ T5906] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 626.706748][ T5906] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 626.891977][ T5906] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 626.904176][ T5906] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 626.918969][ T5906] usb 6-1: USB disconnect, device number 95 [ 626.932289][ T5906] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 627.163882][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7453'. [ 627.186852][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7453'. [ 627.367322][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7458'. [ 627.418269][T24134] syzkaller1: entered promiscuous mode [ 627.424178][T24134] syzkaller1: entered allmulticast mode [ 627.804689][ T9] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 627.970696][ T9] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 627.979077][ T9] usb 8-1: config 0 has no interface number 0 [ 627.996436][ T9] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 628.005638][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.013638][ T9] usb 8-1: Product: syz [ 628.017960][ T9] usb 8-1: Manufacturer: syz [ 628.022653][ T9] usb 8-1: SerialNumber: syz [ 628.029572][ T9] usb 8-1: config 0 descriptor?? [ 628.453838][ T9] usb 8-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 628.668620][ T9] usb 8-1: failed to fetch extended address, random address set [ 628.729622][ T9] usb 8-1: USB disconnect, device number 29 [ 629.454690][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 629.484657][T23498] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 629.624925][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 629.630763][ T5906] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 629.640702][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.652191][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.662894][T23498] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 629.672153][T23498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.681460][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.693518][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.703970][T23498] usb 8-1: config 0 descriptor?? [ 629.711179][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.724689][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.736852][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.748134][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.759567][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 629.768706][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 629.776845][ T5906] usb 4-1: SerialNumber: syz [ 629.786658][ T5906] usb 4-1: config 0 descriptor?? [ 629.797586][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input169 [ 630.010166][ T5185] bcm5974 4-1:0.0: could not read from device [ 630.020573][ T5185] bcm5974 4-1:0.0: could not read from device [ 630.023881][ T5906] usb 4-1: USB disconnect, device number 4 [ 630.076393][ T5877] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 630.237323][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.248463][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.258269][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.271328][ T5877] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.280447][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.290635][ T5877] usb 6-1: config 0 descriptor?? [ 630.742538][ T5877] plantronics 0003:047F:FFFF.00B1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 630.794565][ T30] audit: type=1326 audit(1768338891.312:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24192 comm="syz.0.7486" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 630.935381][T23498] usb 8-1: Cannot set autoneg [ 630.940631][T23498] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 630.967542][T23498] usb 8-1: USB disconnect, device number 30 [ 631.354822][T23498] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 631.506556][T23498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.518837][T23498] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 631.529296][T23498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.540802][T23498] usb 4-1: config 0 descriptor?? [ 631.979769][T23498] holtek 0003:1241:5015.00B2: hidraw1: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 632.000886][T23498] holtek 0003:1241:5015.00B2: no inputs found [ 632.031408][ C1] plantronics 0003:047F:FFFF.00B1: usb_submit_urb(ctrl) failed: -1 [ 632.208048][ T5906] usb 4-1: USB disconnect, device number 5 [ 632.385121][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 632.546154][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.568956][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.598750][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 632.609231][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 632.617439][ T9] usb 8-1: SerialNumber: syz [ 632.682177][T24257] vivid-000: disconnect [ 632.687205][T24256] vivid-000: reconnect [ 632.819293][T23498] usb 6-1: USB disconnect, device number 96 [ 632.841759][ T9] usb 8-1: 0:2 : does not exist [ 632.883224][ T9] usb 8-1: USB disconnect, device number 31 [ 632.918624][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.980362][T24271] netlink: 'syz.3.7529': attribute type 3 has an invalid length. [ 632.988651][T24271] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7529'. [ 632.998822][T24271] netlink: 'syz.3.7529': attribute type 3 has an invalid length. [ 633.007444][T24271] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7529'. [ 633.126537][T24274] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 633.817351][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 633.883045][ T1005] bridge_slave_1: left allmulticast mode [ 633.890073][ T1005] bridge_slave_1: left promiscuous mode [ 633.896469][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.921623][ T1005] bridge_slave_0: left allmulticast mode [ 633.936599][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.974842][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 633.985684][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.998991][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.031258][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.054837][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.063303][ T10] usb 4-1: Product: syz [ 634.097479][ T10] usb 4-1: Manufacturer: syz [ 634.120042][ T10] usb 4-1: SerialNumber: syz [ 634.381225][ T10] usb 4-1: 0:2 : does not exist [ 634.422013][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 634.498034][ T10] usb 4-1: USB disconnect, device number 6 [ 634.595725][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.924945][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.936204][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.947026][ T1005] bond0 (unregistering): Released all slaves [ 635.255300][ T1005] hsr_slave_0: left promiscuous mode [ 635.261915][ T1005] hsr_slave_1: left promiscuous mode [ 635.268372][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.278469][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.318529][ T1005] veth1_macvtap: left promiscuous mode [ 635.324153][ T1005] veth0_macvtap: left promiscuous mode [ 635.335373][ T1005] veth1_vlan: left promiscuous mode [ 635.340866][ T1005] veth0_vlan: left promiscuous mode [ 635.944858][T23498] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 636.013201][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 636.067993][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 636.119067][T23498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.143220][T23498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.153929][T23498] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 636.169442][T23498] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 636.180258][T23498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.195202][T23498] usb 4-1: config 0 descriptor?? [ 636.629345][T23498] plantronics 0003:047F:FFFF.00B3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 636.932709][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7572'. [ 636.946277][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7572'. [ 636.958450][T24381] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7572'. [ 636.969580][T24381] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7572'. [ 637.285204][T23498] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 637.448484][T23498] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 637.461316][T23498] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 637.473684][T23498] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 637.485382][T23498] usb 8-1: config 0 interface 0 has no altsetting 0 [ 637.495265][T23498] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.504751][T23498] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.512966][T23498] usb 8-1: Product: syz [ 637.519118][T23498] usb 8-1: Manufacturer: syz [ 637.523764][T23498] usb 8-1: SerialNumber: syz [ 637.535101][T23498] usb 8-1: config 0 descriptor?? [ 637.540860][T24387] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 637.553548][T23498] usb 8-1: selecting invalid altsetting 0 [ 637.865928][ T10] usb 8-1: USB disconnect, device number 32 [ 638.430571][T24434] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7587'. [ 638.767797][T24442] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 638.827635][T24446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7593'. [ 638.965589][ T10] usb 4-1: USB disconnect, device number 7 [ 639.089986][T24463] tipc: Started in network mode [ 639.096872][T24463] tipc: Node identity ac14142f, cluster identity 4711 [ 639.104448][T24463] tipc: New replicast peer: 0.0.0.0 [ 639.110224][T24463] tipc: Enabled bearer , priority 10 [ 639.120993][T24463] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 639.594827][T23498] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 639.746773][T23498] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.756982][T23498] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.770317][T23498] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.779576][T23498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.002844][T23498] usb 6-1: usb_control_msg returned -32 [ 640.009742][T23498] usbtmc 6-1:16.0: can't read capabilities [ 640.226173][T23498] tipc: Node number set to 2886997039 [ 641.761851][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7640'. [ 641.778113][T24558] tipc: Started in network mode [ 641.783799][T24558] tipc: Node identity ac14140f, cluster identity 4711 [ 641.797500][T24558] tipc: New replicast peer: 255.255.255.255 [ 641.806495][T24558] tipc: Enabled bearer , priority 10 [ 641.948069][T24567] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7645'. [ 641.961343][T24567] netlink: 'syz.7.7645': attribute type 7 has an invalid length. [ 641.970392][T24567] netlink: 'syz.7.7645': attribute type 8 has an invalid length. [ 641.989098][T24567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7645'. [ 642.052349][T24573] loop3: detected capacity change from 0 to 16384 [ 642.123406][ C0] blk_print_req_error: 21 callbacks suppressed [ 642.123438][ C0] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 642.142124][ C0] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.152211][ C0] buffer_io_error: 21 callbacks suppressed [ 642.152226][ C0] Buffer I/O error on dev loop3, logical block 1025, async page read [ 642.185125][ C0] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.195015][ C0] Buffer I/O error on dev loop3, logical block 1025, async page read [ 642.390504][ T5908] usb 6-1: USB disconnect, device number 97 [ 642.774632][ T5908] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 642.927551][ T9] tipc: Node number set to 2886997007 [ 642.936721][ T5908] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 642.983436][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.015692][ T5908] usb 6-1: config 0 descriptor?? [ 643.140153][T24613] vivid-000: disconnect [ 643.197203][ T9] vivid-000: reconnect [ 644.156704][ T30] audit: type=1326 audit(1768338904.682:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24655 comm="syz.0.7678" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 644.253792][ T5908] pegasus 6-1:0.0: can't reset MAC [ 644.282492][ T5908] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 644.331826][ T5908] usb 6-1: USB disconnect, device number 98 [ 644.998483][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7692'. [ 645.024678][T24684] netlink: 'syz.5.7692': attribute type 13 has an invalid length. [ 645.466624][ T5898] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 645.646357][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.695076][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.727169][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.747385][ T5898] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.759961][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.780712][ T5898] usb 8-1: config 0 descriptor?? [ 646.004603][ T980] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 646.187213][ T980] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 646.199144][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.215586][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.228462][ T5898] plantronics 0003:047F:FFFF.00B4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 646.232016][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 646.285734][ T980] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 646.301583][ T980] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 646.310519][ T980] usb 4-1: Manufacturer: syz [ 646.325058][ T980] usb 4-1: config 0 descriptor?? [ 646.403501][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7702'. [ 646.745974][ T980] appleir 0003:05AC:8243.00B5: unknown main item tag 0x0 [ 646.801654][ T980] appleir 0003:05AC:8243.00B5: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 647.111647][ T980] usb 4-1: USB disconnect, device number 8 [ 647.675045][ T30] audit: type=1326 audit(1768338908.192:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24733 comm="syz.5.7712" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f72539 code=0x0 [ 647.865205][ T30] audit: type=1804 audit(1768338908.382:1726): pid=24740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7714" name="/newroot/1472/file1" dev="tmpfs" ino=7531 res=1 errno=0 [ 648.315992][ T5908] usb 8-1: USB disconnect, device number 33 [ 648.795624][T23498] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 648.976207][T23498] usb 6-1: config 0 has no interfaces? [ 648.983246][T23498] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.993589][T23498] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.021296][T23498] usb 6-1: Product: syz [ 649.036613][T23498] usb 6-1: Manufacturer: syz [ 649.064394][T23498] usb 6-1: config 0 descriptor?? [ 649.295139][T23498] usb 6-1: USB disconnect, device number 99 [ 649.358678][ T30] audit: type=1326 audit(1768338909.882:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24793 comm="syz.3.7737" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75539 code=0x0 [ 649.934675][ T980] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 650.117647][ T980] usb 6-1: config 0 has no interfaces? [ 650.125000][ T980] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.134159][ T980] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.142540][ T980] usb 6-1: Product: syz [ 650.147396][ T980] usb 6-1: Manufacturer: syz [ 650.155290][ T980] usb 6-1: config 0 descriptor?? [ 650.373044][T23498] usb 6-1: USB disconnect, device number 100 [ 651.115596][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7750'. [ 651.455459][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7761'. [ 651.478200][T24853] vxlan0: entered promiscuous mode [ 651.486182][ T980] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 651.494021][ T37] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.507079][ T37] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.517394][ T37] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.527403][ T37] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.688735][ T980] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 651.699782][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.711004][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.744631][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.752167][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.762061][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.773949][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.785399][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.801235][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.812206][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.820991][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.844576][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.864719][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.885656][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.904597][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.924643][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.934644][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.950429][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.962039][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.970434][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 651.979656][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 651.990626][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.998733][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.007981][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.019156][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 652.028229][ T980] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 652.038045][ T980] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 652.046720][ T980] usb 6-1: Product: syz [ 652.050988][ T980] usb 6-1: Manufacturer: syz [ 652.055804][ T980] usb 6-1: SerialNumber: syz [ 652.063387][ T980] usb 6-1: config 0 descriptor?? [ 652.073634][ T980] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 652.386903][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 652.411294][T23498] usb 6-1: USB disconnect, device number 101 [ 652.434235][T23498] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 652.707489][T24897] netlink: 'syz.3.7776': attribute type 1 has an invalid length. [ 652.774029][T24901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.787807][T24901] bond3: (slave bond4): making interface the new active one [ 652.795889][T24901] bond3: (slave bond4): Enslaving as an active interface with an up link [ 653.542476][T24942] loop3: detected capacity change from 0 to 16384 [ 653.606309][ C0] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 653.616595][ C1] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.626504][ C1] Buffer I/O error on dev loop3, logical block 1025, async page read [ 653.638945][ C1] I/O error, dev loop3, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.648797][ C1] Buffer I/O error on dev loop3, logical block 1025, async page read [ 653.949633][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7800'. [ 654.114611][T23498] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 654.277017][T23498] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.285925][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.297595][T23498] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.310603][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.322335][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.336031][T23498] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.345807][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.357084][T23498] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.369689][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.381571][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.398446][T23498] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 654.404859][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7805'. [ 654.406521][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.426631][T23498] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.438844][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.450481][T23498] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.464617][T23498] usb 8-1: string descriptor 0 read error: -22 [ 654.472166][T23498] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 654.481608][T23498] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.483943][T24970] bond5: option all_slaves_active: invalid value (106) [ 654.504308][T24970] bond5 (unregistering): Released all slaves [ 654.514389][T23498] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 654.846908][ T980] usb 8-1: USB disconnect, device number 34 [ 654.853021][T24976] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 654.980627][T24983] loop3: detected capacity change from 0 to 16384 [ 655.045454][ C1] I/O error, dev loop3, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 655.055861][ C1] I/O error, dev loop3, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 655.078541][ C1] I/O error, dev loop3, sector 11520 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.088551][ C1] Buffer I/O error on dev loop3, logical block 1440, async page read [ 655.097266][ C1] I/O error, dev loop3, sector 11528 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.107264][ C1] Buffer I/O error on dev loop3, logical block 1441, async page read [ 655.115527][ C1] I/O error, dev loop3, sector 11536 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.125458][ C1] Buffer I/O error on dev loop3, logical block 1442, async page read [ 655.133603][ C1] I/O error, dev loop3, sector 11544 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.143724][ C1] Buffer I/O error on dev loop3, logical block 1443, async page read [ 655.151894][ C1] I/O error, dev loop3, sector 11552 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.161909][ C1] Buffer I/O error on dev loop3, logical block 1444, async page read [ 655.170074][ C1] Buffer I/O error on dev loop3, logical block 1445, async page read [ 655.178248][ C1] Buffer I/O error on dev loop3, logical block 1446, async page read [ 655.186422][ C1] Buffer I/O error on dev loop3, logical block 1447, async page read [ 655.711858][T25002] input: syz1 as /devices/virtual/input/input171 [ 655.804926][ T980] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 656.038112][ T980] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 656.047719][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.062533][ T980] usb 6-1: Product: syz [ 656.066823][ T980] usb 6-1: Manufacturer: syz [ 656.075738][ T980] usb 6-1: SerialNumber: syz [ 656.082308][ T980] usb 6-1: config 0 descriptor?? [ 656.132648][ T30] audit: type=1326 audit(1768338916.652:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25018 comm="syz.6.7824" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f23539 code=0x0 [ 656.318094][T25026] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 656.505393][ T980] usb 6-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 656.587367][T25032] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.624588][T23498] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 656.717177][ T980] usb 6-1: no permanent extended address found, random address set [ 656.734326][ T980] usb 6-1: atusb_probe: initialization failed, error = -524 [ 656.752889][ T980] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 656.796095][T23498] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.807320][T23498] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.818037][T23498] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 656.828393][T23498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 656.837559][T23498] usb 8-1: SerialNumber: syz [ 656.938375][ T980] usb 6-1: USB disconnect, device number 102 [ 657.052022][T23498] usb 8-1: 0:2 : does not exist [ 657.057143][T23498] usb 8-1: usbmixer: too many channels (61) in unit 5 [ 657.083828][T23498] usb 8-1: USB disconnect, device number 35 [ 657.111731][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.293266][T25055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.312984][T25059] netlink: 'syz.0.7842': attribute type 9 has an invalid length. [ 657.322551][T25059] netlink: 'syz.0.7842': attribute type 11 has an invalid length. [ 657.331173][T25059] netlink: 'syz.0.7842': attribute type 12 has an invalid length. [ 657.339456][T25059] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7842'. [ 657.349166][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7842'. [ 657.397254][T25062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7843'. [ 657.406456][T25062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7843'. [ 657.824659][T23498] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 657.889011][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7854'. [ 657.901505][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7854'. [ 657.912243][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7854'. [ 658.002709][T23498] usb 6-1: config 0 has no interfaces? [ 658.015141][T23498] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 658.034722][T23498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.052965][T23498] usb 6-1: Product: syz [ 658.074697][T23498] usb 6-1: Manufacturer: syz [ 658.079433][T23498] usb 6-1: SerialNumber: syz [ 658.107401][T23498] usb 6-1: config 0 descriptor?? [ 658.201416][T25097] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 658.207991][T25097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.217384][T25097] vhci_hcd vhci_hcd.0: Device attached [ 658.238675][T25099] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 658.265960][ T3926] vhci_hcd vhci_hcd.3: stop threads [ 658.271746][ T3926] vhci_hcd vhci_hcd.3: release socket [ 658.281133][ T3926] vhci_hcd vhci_hcd.3: disconnect device [ 658.430744][T25068] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 658.442003][ T5908] usb 6-1: USB disconnect, device number 103 [ 658.659951][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7863'. [ 658.734259][T25118] bond2: option all_slaves_active: invalid value (106) [ 658.747417][T25118] bond2 (unregistering): Released all slaves [ 659.745219][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7873'. [ 660.004228][T25160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7880'. [ 660.063328][T25160] bond2: option all_slaves_active: invalid value (106) [ 660.073463][T25160] bond2 (unregistering): Released all slaves [ 660.590234][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.602874][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.613237][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.622662][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.632785][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.817994][T25178] chnl_net:caif_netlink_parms(): no params data found [ 660.913085][T25178] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.920748][T25178] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.924779][ T980] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 660.929216][T25178] bridge_slave_0: entered allmulticast mode [ 660.943191][T25178] bridge_slave_0: entered promiscuous mode [ 660.950925][T25178] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.958288][T25178] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.965648][T25178] bridge_slave_1: entered allmulticast mode [ 660.972469][T25178] bridge_slave_1: entered promiscuous mode [ 660.999337][T25178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.011127][T25178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.037708][T25178] team0: Port device team_slave_0 added [ 661.047663][T25178] team0: Port device team_slave_1 added [ 661.070437][T25178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.077967][T25178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.103997][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 661.109246][T25178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.121452][ T980] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 661.131593][T25178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.138709][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.147224][T25178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.176616][T25178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.189298][ T980] pvrusb2: Hardware description: Terratec Grabster AV400 [ 661.196468][ T980] pvrusb2: ********** [ 661.200473][ T980] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 661.210875][ T980] pvrusb2: Important functionality might not be entirely working. [ 661.219686][ T980] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 661.232859][ T980] pvrusb2: ********** [ 661.265738][T25178] hsr_slave_0: entered promiscuous mode [ 661.272402][T25178] hsr_slave_1: entered promiscuous mode [ 661.279204][T25178] debugfs: 'hsr0' already exists in 'hsr' [ 661.285190][T25178] Cannot create hsr debugfs directory [ 661.393292][ T2341] pvrusb2: Invalid write control endpoint [ 661.455782][T25178] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 661.461303][ T2341] pvrusb2: Invalid write control endpoint [ 661.468901][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 661.473114][T25178] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 661.484800][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 661.493144][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 661.499296][T25178] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 661.510010][ T2341] pvrusb2: Device being rendered inoperable [ 661.519101][ T2341] cx25840 6-0044: Unable to detect h/w, assuming cx23887 [ 661.524828][T25178] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 661.527453][ T2341] cx25840 6-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 661.542728][ T2341] pvrusb2: Attached sub-driver cx25840 [ 661.548528][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 661.560625][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 661.616823][ T980] usb 4-1: USB disconnect, device number 9 [ 661.638603][T25178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.660961][T25178] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.677648][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.684930][T18647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.700015][T20866] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.707224][T20866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.776745][T25178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.822795][T25178] veth0_vlan: entered promiscuous mode [ 661.835879][T25178] veth1_vlan: entered promiscuous mode [ 661.881078][T25178] veth0_macvtap: entered promiscuous mode [ 661.892119][T25178] veth1_macvtap: entered promiscuous mode [ 661.932373][T25178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.961889][T25178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.981996][ T1149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.993734][ T1149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.020307][ T1149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.058040][ T1149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.117323][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.135327][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.190194][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.201588][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.448002][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 662.606052][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.628490][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.639483][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.651515][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.664920][ T5828] Bluetooth: hci2: command tx timeout [ 662.677381][T25221] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 662.694799][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.891474][ T10] usb 4-1: USB disconnect, device number 10 [ 663.143456][T25261] [ 663.145817][T25261] ===================================================== [ 663.152832][T25261] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 663.160297][T25261] syzkaller #0 Tainted: G L [ 663.166258][T25261] ----------------------------------------------------- [ 663.173271][T25261] syz.6.7916/25261 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 663.180993][T25261] ffff888058e53de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 663.189781][T25261] [ 663.189781][T25261] and this task is already holding: [ 663.197131][T25261] ffff8880298e4028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 663.206915][T25261] which would create a new lock dependency: [ 663.213429][T25261] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 663.221536][T25261] [ 663.221536][T25261] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 663.230973][T25261] (&client->buffer_lock){..-.}-{3:3} [ 663.230994][T25261] [ 663.230994][T25261] ... which became SOFTIRQ-irq-safe at: [ 663.244034][T25261] lock_acquire+0x107/0x340 [ 663.248625][T25261] _raw_spin_lock+0x2e/0x40 [ 663.253294][T25261] evdev_pass_values+0xb9/0xbd0 [ 663.258226][T25261] evdev_events+0x1e6/0x340 [ 663.262794][T25261] input_pass_values+0x288/0x890 [ 663.267970][T25261] input_event_dispose+0x3e5/0x6b0 [ 663.273144][T25261] input_event+0x89/0xe0 [ 663.277451][T25261] hidinput_hid_event+0x145e/0x1e50 [ 663.282719][T25261] hid_process_event+0x4be/0x620 [ 663.287817][T25261] hid_report_raw_event+0xe91/0x1720 [ 663.293190][T25261] hid_input_report+0x44b/0x580 [ 663.298128][T25261] hid_irq_in+0x47e/0x6d0 [ 663.302530][T25261] __usb_hcd_giveback_urb+0x376/0x540 [ 663.307973][T25261] dummy_timer+0x85f/0x45b0 [ 663.312769][T25261] __hrtimer_run_queues+0x51c/0xc30 [ 663.318049][T25261] hrtimer_run_softirq+0x187/0x2b0 [ 663.323321][T25261] handle_softirqs+0x22b/0x7c0 [ 663.328151][T25261] do_softirq+0x76/0xd0 [ 663.332460][T25261] __local_bh_enable_ip+0xf8/0x130 [ 663.337632][T25261] batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 663.343629][T25261] batadv_bla_periodic_work+0xc7/0xac0 [ 663.349153][T25261] process_scheduled_works+0xad1/0x1770 [ 663.354770][T25261] worker_thread+0x8a0/0xda0 [ 663.359447][T25261] kthread+0x711/0x8a0 [ 663.363587][T25261] ret_from_fork+0x510/0xa50 [ 663.368245][T25261] ret_from_fork_asm+0x1a/0x30 [ 663.373084][T25261] [ 663.373084][T25261] to a SOFTIRQ-irq-unsafe lock: [ 663.380161][T25261] (tasklist_lock){.+.+}-{3:3} [ 663.380183][T25261] [ 663.380183][T25261] ... which became SOFTIRQ-irq-unsafe at: [ 663.392877][T25261] ... [ 663.392889][T25261] lock_acquire+0x107/0x340 [ 663.400024][T25261] _raw_read_lock+0x36/0x50 [ 663.404606][T25261] __do_wait+0xde/0x740 [ 663.408957][T25261] do_wait+0x1e8/0x4f0 [ 663.413114][T25261] kernel_wait+0xab/0x170 [ 663.417537][T25261] call_usermodehelper_exec_work+0xbe/0x230 [ 663.423514][T25261] process_scheduled_works+0xad1/0x1770 [ 663.429153][T25261] worker_thread+0x8a0/0xda0 [ 663.433824][T25261] kthread+0x711/0x8a0 [ 663.437978][T25261] ret_from_fork+0x510/0xa50 [ 663.442647][T25261] ret_from_fork_asm+0x1a/0x30 [ 663.447493][T25261] [ 663.447493][T25261] other info that might help us debug this: [ 663.447493][T25261] [ 663.457713][T25261] Chain exists of: [ 663.457713][T25261] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 663.457713][T25261] [ 663.470916][T25261] Possible interrupt unsafe locking scenario: [ 663.470916][T25261] [ 663.479221][T25261] CPU0 CPU1 [ 663.484567][T25261] ---- ---- [ 663.489906][T25261] lock(tasklist_lock); [ 663.494125][T25261] local_irq_disable(); [ 663.500872][T25261] lock(&client->buffer_lock); [ 663.508310][T25261] lock(&new->fa_lock); [ 663.515048][T25261] [ 663.518479][T25261] lock(&client->buffer_lock); [ 663.523494][T25261] [ 663.523494][T25261] *** DEADLOCK *** [ 663.523494][T25261] [ 663.531718][T25261] 7 locks held by syz.6.7916/25261: [ 663.536897][T25261] #0: ffff888029c8c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 663.546021][T25261] #1: ffff88801cf13230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 663.556109][T25261] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 663.565752][T25261] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 663.575298][T25261] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 663.584503][T25261] #5: ffff8880298e4028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 663.594662][T25261] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 663.603706][T25261] [ 663.603706][T25261] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 663.614448][T25261] -> (&client->buffer_lock){..-.}-{3:3} { [ 663.620170][T25261] IN-SOFTIRQ-W at: [ 663.624129][T25261] lock_acquire+0x107/0x340 [ 663.630295][T25261] _raw_spin_lock+0x2e/0x40 [ 663.636528][T25261] evdev_pass_values+0xb9/0xbd0 [ 663.643105][T25261] evdev_events+0x1e6/0x340 [ 663.649255][T25261] input_pass_values+0x288/0x890 [ 663.655836][T25261] input_event_dispose+0x3e5/0x6b0 [ 663.662596][T25261] input_event+0x89/0xe0 [ 663.668469][T25261] hidinput_hid_event+0x145e/0x1e50 [ 663.675297][T25261] hid_process_event+0x4be/0x620 [ 663.681972][T25261] hid_report_raw_event+0xe91/0x1720 [ 663.688885][T25261] hid_input_report+0x44b/0x580 [ 663.695452][T25261] hid_irq_in+0x47e/0x6d0 [ 663.701429][T25261] __usb_hcd_giveback_urb+0x376/0x540 [ 663.708611][T25261] dummy_timer+0x85f/0x45b0 [ 663.714787][T25261] __hrtimer_run_queues+0x51c/0xc30 [ 663.721634][T25261] hrtimer_run_softirq+0x187/0x2b0 [ 663.728565][T25261] handle_softirqs+0x22b/0x7c0 [ 663.734975][T25261] do_softirq+0x76/0xd0 [ 663.740873][T25261] __local_bh_enable_ip+0xf8/0x130 [ 663.747632][T25261] batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 663.755172][T25261] batadv_bla_periodic_work+0xc7/0xac0 [ 663.762306][T25261] process_scheduled_works+0xad1/0x1770 [ 663.769482][T25261] worker_thread+0x8a0/0xda0 [ 663.775701][T25261] kthread+0x711/0x8a0 [ 663.781485][T25261] ret_from_fork+0x510/0xa50 [ 663.787700][T25261] ret_from_fork_asm+0x1a/0x30 [ 663.794332][T25261] INITIAL USE at: [ 663.798252][T25261] lock_acquire+0x107/0x340 [ 663.804315][T25261] _raw_spin_lock+0x2e/0x40 [ 663.810368][T25261] evdev_pass_values+0xb9/0xbd0 [ 663.816849][T25261] evdev_events+0x1e6/0x340 [ 663.823278][T25261] input_pass_values+0x288/0x890 [ 663.829857][T25261] input_event_dispose+0x330/0x6b0 [ 663.836541][T25261] input_inject_event+0x1dd/0x340 [ 663.843212][T25261] evdev_write+0x2fc/0x480 [ 663.849216][T25261] vfs_write+0x27e/0xb30 [ 663.855004][T25261] ksys_write+0x145/0x250 [ 663.860895][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 663.867637][T25261] do_fast_syscall_32+0x34/0x80 [ 663.874026][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.881897][T25261] } [ 663.884456][T25261] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 663.892673][T25261] [ 663.892673][T25261] the dependencies between the lock to be acquired [ 663.892680][T25261] and SOFTIRQ-irq-unsafe lock: [ 663.906166][T25261] -> (tasklist_lock){.+.+}-{3:3} { [ 663.911448][T25261] HARDIRQ-ON-R at: [ 663.915581][T25261] lock_acquire+0x107/0x340 [ 663.922125][T25261] _raw_read_lock+0x36/0x50 [ 663.928636][T25261] __do_wait+0xde/0x740 [ 663.934874][T25261] do_wait+0x1e8/0x4f0 [ 663.940942][T25261] kernel_wait+0xab/0x170 [ 663.947262][T25261] call_usermodehelper_exec_work+0xbe/0x230 [ 663.955134][T25261] process_scheduled_works+0xad1/0x1770 [ 663.962657][T25261] worker_thread+0x8a0/0xda0 [ 663.969243][T25261] kthread+0x711/0x8a0 [ 663.975411][T25261] ret_from_fork+0x510/0xa50 [ 663.981992][T25261] ret_from_fork_asm+0x1a/0x30 [ 663.989097][T25261] SOFTIRQ-ON-R at: [ 663.993327][T25261] lock_acquire+0x107/0x340 [ 663.999968][T25261] _raw_read_lock+0x36/0x50 [ 664.006456][T25261] __do_wait+0xde/0x740 [ 664.012882][T25261] do_wait+0x1e8/0x4f0 [ 664.018958][T25261] kernel_wait+0xab/0x170 [ 664.025394][T25261] call_usermodehelper_exec_work+0xbe/0x230 [ 664.033343][T25261] process_scheduled_works+0xad1/0x1770 [ 664.040872][T25261] worker_thread+0x8a0/0xda0 [ 664.047518][T25261] kthread+0x711/0x8a0 [ 664.053563][T25261] ret_from_fork+0x510/0xa50 [ 664.060126][T25261] ret_from_fork_asm+0x1a/0x30 [ 664.066873][T25261] INITIAL USE at: [ 664.070928][T25261] lock_acquire+0x107/0x340 [ 664.077402][T25261] _raw_write_lock_irq+0x3d/0x50 [ 664.084224][T25261] copy_process+0x2185/0x3950 [ 664.090793][T25261] kernel_clone+0x21e/0x820 [ 664.097203][T25261] user_mode_thread+0xdd/0x140 [ 664.104155][T25261] rest_init+0x23/0x300 [ 664.110241][T25261] start_kernel+0x381/0x3d0 [ 664.116648][T25261] x86_64_start_reservations+0x24/0x30 [ 664.124035][T25261] x86_64_start_kernel+0x143/0x1c0 [ 664.131129][T25261] common_startup_64+0x13e/0x147 [ 664.137962][T25261] INITIAL READ USE at: [ 664.142653][T25261] lock_acquire+0x107/0x340 [ 664.149483][T25261] _raw_read_lock+0x36/0x50 [ 664.156327][T25261] __do_wait+0xde/0x740 [ 664.162806][T25261] do_wait+0x1e8/0x4f0 [ 664.169196][T25261] kernel_wait+0xab/0x170 [ 664.175870][T25261] call_usermodehelper_exec_work+0xbe/0x230 [ 664.184087][T25261] process_scheduled_works+0xad1/0x1770 [ 664.191994][T25261] worker_thread+0x8a0/0xda0 [ 664.198922][T25261] kthread+0x711/0x8a0 [ 664.205333][T25261] ret_from_fork+0x510/0xa50 [ 664.212262][T25261] ret_from_fork_asm+0x1a/0x30 [ 664.219381][T25261] } [ 664.222048][T25261] ... key at: [] tasklist_lock+0x18/0x40 [ 664.230029][T25261] ... acquired at: [ 664.233995][T25261] _raw_read_lock+0x36/0x50 [ 664.238654][T25261] send_sigurg+0x12b/0x420 [ 664.243345][T25261] sk_send_sigurg+0x6c/0x2e0 [ 664.248095][T25261] queue_oob+0x420/0x4f0 [ 664.252490][T25261] unix_stream_sendmsg+0xc32/0xde0 [ 664.257751][T25261] __sock_sendmsg+0x21c/0x270 [ 664.262581][T25261] ____sys_sendmsg+0x52d/0x820 [ 664.267492][T25261] ___sys_sendmsg+0x21f/0x2a0 [ 664.272493][T25261] __sys_sendmmsg+0x28e/0x430 [ 664.277405][T25261] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 664.283201][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.288656][T25261] do_fast_syscall_32+0x34/0x80 [ 664.293684][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.300268][T25261] [ 664.302588][T25261] -> (&f_owner->lock){....}-{3:3} { [ 664.308099][T25261] INITIAL USE at: [ 664.312076][T25261] lock_acquire+0x107/0x340 [ 664.318423][T25261] _raw_write_lock_irq+0x3d/0x50 [ 664.325381][T25261] __f_setown+0x67/0x370 [ 664.331448][T25261] do_fcntl+0x173f/0x1a50 [ 664.337501][T25261] do_compat_fcntl64+0x477/0x720 [ 664.344174][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.351150][T25261] do_fast_syscall_32+0x34/0x80 [ 664.357721][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.365763][T25261] INITIAL READ USE at: [ 664.370151][T25261] lock_acquire+0x107/0x340 [ 664.376799][T25261] _raw_read_lock_irq+0x45/0x60 [ 664.383795][T25261] do_fcntl+0x2f9/0x1a50 [ 664.390240][T25261] do_compat_fcntl64+0x477/0x720 [ 664.397326][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.404757][T25261] do_fast_syscall_32+0x34/0x80 [ 664.411755][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.420281][T25261] } [ 664.422841][T25261] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 664.431928][T25261] ... acquired at: [ 664.435796][T25261] _raw_read_lock_irqsave+0x48/0x60 [ 664.441214][T25261] send_sigio+0x38/0x370 [ 664.445609][T25261] kill_fasync+0x24d/0x4d0 [ 664.450175][T25261] lease_break_callback+0x26/0x30 [ 664.455354][T25261] __break_lease+0x6e3/0x1490 [ 664.460179][T25261] do_dentry_open+0x73a/0x1420 [ 664.465097][T25261] vfs_open+0x3b/0x340 [ 664.469341][T25261] path_openat+0x340e/0x3dd0 [ 664.474164][T25261] do_filp_open+0x1fa/0x410 [ 664.478816][T25261] do_sys_openat2+0x121/0x200 [ 664.483835][T25261] __ia32_compat_sys_open+0x117/0x140 [ 664.489378][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.494749][T25261] do_fast_syscall_32+0x34/0x80 [ 664.499762][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.506271][T25261] [ 664.508608][T25261] -> (&new->fa_lock){....}-{3:3} { [ 664.513857][T25261] INITIAL USE at: [ 664.517751][T25261] lock_acquire+0x107/0x340 [ 664.523802][T25261] _raw_write_lock_irq+0x3d/0x50 [ 664.530292][T25261] fasync_remove_entry+0xf1/0x1c0 [ 664.536885][T25261] do_fcntl+0x11d2/0x1a50 [ 664.542769][T25261] do_compat_fcntl64+0x477/0x720 [ 664.549255][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.555997][T25261] do_fast_syscall_32+0x34/0x80 [ 664.562482][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.570352][T25261] INITIAL READ USE at: [ 664.574686][T25261] lock_acquire+0x107/0x340 [ 664.581261][T25261] _raw_read_lock_irqsave+0x48/0x60 [ 664.588431][T25261] kill_fasync+0x199/0x4d0 [ 664.594834][T25261] lease_break_callback+0x26/0x30 [ 664.601859][T25261] __break_lease+0x6e3/0x1490 [ 664.608521][T25261] do_dentry_open+0x73a/0x1420 [ 664.615271][T25261] vfs_open+0x3b/0x340 [ 664.621335][T25261] path_openat+0x340e/0x3dd0 [ 664.627904][T25261] do_filp_open+0x1fa/0x410 [ 664.634404][T25261] do_sys_openat2+0x121/0x200 [ 664.641081][T25261] __ia32_compat_sys_open+0x117/0x140 [ 664.648477][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.655834][T25261] do_fast_syscall_32+0x34/0x80 [ 664.662659][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.670965][T25261] } [ 664.673458][T25261] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 664.682140][T25261] ... acquired at: [ 664.685935][T25261] _raw_read_lock_irqsave+0x48/0x60 [ 664.691315][T25261] kill_fasync+0x199/0x4d0 [ 664.695908][T25261] evdev_pass_values+0x627/0xbd0 [ 664.701013][T25261] evdev_events+0x1e6/0x340 [ 664.705678][T25261] input_pass_values+0x288/0x890 [ 664.710766][T25261] input_event_dispose+0x330/0x6b0 [ 664.716030][T25261] input_inject_event+0x1dd/0x340 [ 664.721212][T25261] evdev_write+0x2fc/0x480 [ 664.725787][T25261] vfs_write+0x27e/0xb30 [ 664.730196][T25261] ksys_write+0x145/0x250 [ 664.734773][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.740142][T25261] do_fast_syscall_32+0x34/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 664.745274][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.751769][T25261] [ 664.754071][T25261] [ 664.754071][T25261] stack backtrace: [ 664.759941][T25261] CPU: 0 UID: 0 PID: 25261 Comm: syz.6.7916 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.759972][T25261] Tainted: [L]=SOFTLOCKUP [ 664.759981][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.759994][T25261] Call Trace: [ 664.760003][T25261] [ 664.760009][T25261] dump_stack_lvl+0xe8/0x150 [ 664.760027][T25261] __lock_acquire+0x2a95/0x2cf0 [ 664.760046][T25261] ? kill_fasync+0x199/0x4d0 [ 664.760063][T25261] lock_acquire+0x107/0x340 [ 664.760073][T25261] ? kill_fasync+0x199/0x4d0 [ 664.760089][T25261] ? do_raw_spin_lock+0x121/0x290 [ 664.760103][T25261] ? evdev_pass_values+0xb9/0xbd0 [ 664.760117][T25261] _raw_read_lock_irqsave+0x48/0x60 [ 664.760129][T25261] ? kill_fasync+0x199/0x4d0 [ 664.760144][T25261] kill_fasync+0x199/0x4d0 [ 664.760158][T25261] ? kill_fasync+0x53/0x4d0 [ 664.760174][T25261] evdev_pass_values+0x627/0xbd0 [ 664.760187][T25261] ? evdev_pass_values+0x601/0xbd0 [ 664.760205][T25261] evdev_events+0x1e6/0x340 [ 664.760216][T25261] ? evdev_events+0x79/0x340 [ 664.760226][T25261] ? input_pass_values+0x8d/0x890 [ 664.760237][T25261] input_pass_values+0x288/0x890 [ 664.760250][T25261] ? input_handle_event+0x70c/0xf30 [ 664.760265][T25261] input_event_dispose+0x330/0x6b0 [ 664.760281][T25261] input_inject_event+0x1dd/0x340 [ 664.760296][T25261] ? input_inject_event+0xb6/0x340 [ 664.760310][T25261] evdev_write+0x2fc/0x480 [ 664.760323][T25261] ? __pfx_evdev_write+0x10/0x10 [ 664.760335][T25261] ? bpf_lsm_file_permission+0x9/0x20 [ 664.760347][T25261] ? security_file_permission+0x75/0x290 [ 664.760360][T25261] ? rw_verify_area+0x255/0x4d0 [ 664.760376][T25261] ? __pfx_evdev_write+0x10/0x10 [ 664.760388][T25261] vfs_write+0x27e/0xb30 [ 664.760400][T25261] ? __pfx_vfs_write+0x10/0x10 [ 664.760413][T25261] ? __fget_files+0x2a/0x420 [ 664.760428][T25261] ? __fget_files+0x2a/0x420 [ 664.760441][T25261] ? __fget_files+0x3a0/0x420 [ 664.760502][T25261] ? __fget_files+0x2a/0x420 [ 664.760522][T25261] ksys_write+0x145/0x250 [ 664.760536][T25261] ? __pfx_ksys_write+0x10/0x10 [ 664.760549][T25261] __do_fast_syscall_32+0x1dc/0x570 [ 664.760564][T25261] ? lockdep_hardirqs_on+0x7b/0x110 [ 664.760576][T25261] ? do_fast_syscall_32+0x34/0x80 [ 664.760589][T25261] ? irqentry_exit+0x10f/0x670 [ 664.760601][T25261] do_fast_syscall_32+0x34/0x80 [ 664.760614][T25261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.760629][T25261] RIP: 0023:0xf7f23539 [ 664.760643][T25261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 664.760655][T25261] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 664.760669][T25261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 664.760678][T25261] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.760685][T25261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.760693][T25261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 664.760700][T25261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.760713][T25261] [ 665.090325][ T5824] Bluetooth: hci2: command tx timeout [ 665.842226][T18647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.866247][T18647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.960845][T18647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.971605][T18647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.028190][T18647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.038994][T18647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.080240][T18647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.090658][T18647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.434661][T18647] bond0 (unregistering): Released all slaves [ 666.572424][T18647] bond1 (unregistering): Released all slaves [ 666.816480][T18647] hsr_slave_0: left promiscuous mode [ 666.822478][T18647] hsr_slave_1: left promiscuous mode [ 666.832628][T18647] veth1_macvtap: left promiscuous mode [ 666.838427][T18647] veth0_macvtap: left promiscuous mode [ 667.492320][T18647] IPVS: stop unused estimator thread 0... [ 667.859388][T18647] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.937118][T18647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.024573][T18647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.096993][T18647] tipc: Disabling bearer [ 668.104325][T18647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.199009][T18647] bridge_slave_1: left allmulticast mode [ 668.205709][T18647] bridge_slave_1: left promiscuous mode [ 668.211530][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.222300][T18647] bridge_slave_0: left allmulticast mode [ 668.228825][T18647] bridge_slave_0: left promiscuous mode [ 668.237382][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.247692][T18647] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 668.292274][T18647] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 668.669038][T18647] bond0 (unregistering): left promiscuous mode [ 668.675477][T18647] bond_slave_0: left promiscuous mode [ 668.681033][T18647] bond_slave_1: left promiscuous mode [ 668.687442][T18647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.696799][T18647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.705996][T18647] bond0 (unregistering): Released all slaves [ 668.716668][T18647] bond1 (unregistering): Released all slaves [ 668.760841][T18647] batman_adv: batadv0: Removing interface: ip6gretap1 [ 668.856201][T18647] bond2 (unregistering): (slave geneve4): Releasing active interface [ 668.951748][T18647] batman_adv: batadv0: Removing interface: macvlan2 [ 668.959830][T18647] bond0 (unregistering): Released all slaves [ 669.122452][T18647] bond1 (unregistering): Released all slaves [ 669.132539][T18647] bond2 (unregistering): Released all slaves [ 669.142628][T18647] bond3 (unregistering): (slave bond4): Releasing backup interface [ 669.151431][T18647] bond3 (unregistering): Released all slaves [ 669.297967][T18647] bond4 (unregistering): Released all slaves [ 669.385263][T18647] tipc: Left network mode [ 669.685119][T18647] dummy0: left promiscuous mode [ 669.691627][T18647] hsr_slave_0: left promiscuous mode [ 669.698386][T18647] hsr_slave_1: left promiscuous mode [ 669.704341][T18647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.712608][T18647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.722005][T18647] hsr_slave_0: left promiscuous mode [ 669.728067][T18647] hsr_slave_1: left promiscuous mode [ 669.756954][T18647] team0 (unregistering): Port device vlan0 removed [ 670.101801][T18647] team0 (unregistering): Port device team_slave_1 removed [ 670.152455][T18647] team0 (unregistering): Port device team_slave_0 removed [ 671.727384][T18647] IPVS: stop unused estimator thread 0... [ 671.780514][T18647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.812490][T18647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.860426][T18647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.919479][T18647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.992277][T18647] bridge_slave_1: left allmulticast mode [ 671.999136][T18647] bridge_slave_1: left promiscuous mode [ 672.007038][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.016043][T18647] bridge_slave_0: left allmulticast mode [ 672.021700][T18647] bridge_slave_0: left promiscuous mode [ 672.027524][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.120151][T18647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.130066][T18647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.139305][T18647] bond0 (unregistering): Released all slaves [ 672.319312][T18647] hsr_slave_0: left promiscuous mode [ 672.325138][T18647] hsr_slave_1: left promiscuous mode [ 672.330888][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.340084][T18647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.348635][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.356131][T18647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.366117][T18647] veth1_macvtap: left promiscuous mode [ 672.371658][T18647] veth0_macvtap: left promiscuous mode [ 672.377260][T18647] veth1_vlan: left promiscuous mode [ 672.382530][T18647] veth0_vlan: left promiscuous mode [ 672.512020][T18647] team0 (unregistering): Port device team_slave_1 removed [ 672.541405][T18647] team0 (unregistering): Port device team_slave_0 removed