last executing test programs: 1m1.97274396s ago: executing program 4 (id=610): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x602200, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 1m1.834302949s ago: executing program 4 (id=612): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@generic={0x1, 0x0, 0xa, "e08475fc", "472eb1c14d0b37b00154"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 59.363882865s ago: executing program 4 (id=633): r0 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 59.095039227s ago: executing program 4 (id=637): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 58.764031237s ago: executing program 4 (id=640): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 58.419837302s ago: executing program 4 (id=643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x3, "08bf40"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) 57.940809648s ago: executing program 32 (id=643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x3, "08bf40"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) 19.561284568s ago: executing program 0 (id=974): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) 19.265826065s ago: executing program 0 (id=978): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19.099288521s ago: executing program 0 (id=981): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x830, 0x0, 0x2, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x1733, 0x0, 0x0, 0x0, 0x0) 18.177315167s ago: executing program 0 (id=989): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x231) 17.895455128s ago: executing program 0 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) dup2(r1, r0) 17.124667505s ago: executing program 0 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000100)={0x1, 0x1, {0xe, 0x33, 0x17, 0x19, 0xb, 0x68, 0x20000003, 0x123}}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 16.370194933s ago: executing program 33 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000100)={0x1, 0x1, {0xe, 0x33, 0x17, 0x19, 0xb, 0x68, 0x20000003, 0x123}}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 4.949632652s ago: executing program 3 (id=1071): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 3.301509101s ago: executing program 5 (id=1080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x4044801}, 0x4000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 2.78013572s ago: executing program 2 (id=1083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x5a, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x3) 2.577727749s ago: executing program 2 (id=1084): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000540)=""/106, 0x6a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/83, 0x53}], 0x1}}], 0x2, 0x40024001, 0x0) 2.441947349s ago: executing program 2 (id=1085): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000002380)=[@wr_drn={0x6e, 0x20, {0x7, 0x40000000023}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x8000000000000001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x744, 0x1000080]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.277340207s ago: executing program 5 (id=1086): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2.256258378s ago: executing program 3 (id=1087): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0xb) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e) 2.193996362s ago: executing program 6 (id=999): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0xfffffffc, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.035720832s ago: executing program 5 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]}) 1.998255695s ago: executing program 2 (id=1089): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x7f}, 0x8) 1.997411296s ago: executing program 3 (id=1090): unshare(0x22020600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c591", 0x5) 1.852119578s ago: executing program 6 (id=1091): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 1.800058495s ago: executing program 2 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) unshare(0x2040400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) lseek(r0, 0x8, 0x2) 1.645767772s ago: executing program 5 (id=1093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x200, 0x70bd2b, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0x3, 0xe}, {0xffe8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x30048010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.507046166s ago: executing program 2 (id=1094): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.162936336s ago: executing program 5 (id=1097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040845}, 0x14000012) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 1.005409299s ago: executing program 5 (id=1098): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x2a4c00, 0x112) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x6cd, 0x5, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 986.187771ms ago: executing program 1 (id=1099): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) 759.889195ms ago: executing program 1 (id=1100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) listen(r0, 0x5ece) 622.09924ms ago: executing program 1 (id=1101): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)={0x100, 0x8000, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="9b71abb80ccee813cd6238d5f22a9fe81261b922ae80fb909c15c6bbc1149947f0", @nested={0xc1, 0x0, 0x0, 0x1, [@generic="b308062bb3eb6db2103d7bf69e1beb05d20799da539b86148b5def4185def2d0a01898891f1075909ee6c358c334dfeabd884e418717d87eecb0d1be7a32c9244e3bf79aa06cd0ce01379fd72dc80d5b7f418ad2", @generic="5fb76fab50b69913057c69d844512502fee8754d75b1993dce090c32365d9f8f7ba7dd1a18877654e0e0cd3e2fbf2374efa0d38816a92fb477bbf6c7f315cc58c78fd3beb32be01c2d5e748ac0f93766f1e8761c2d4292044fe1ba7e0ba9a32b3b53e8490bcc931aa6"]}]}, 0x100}], 0x1}, 0x0) 614.577541ms ago: executing program 3 (id=1102): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x53, 0xfffff004}, {0x6, 0xfe, 0x8, 0x1}]}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x400}) 456.067626ms ago: executing program 6 (id=1103): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 423.683555ms ago: executing program 1 (id=1104): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 275.39724ms ago: executing program 3 (id=1105): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f0000000180)='zr', 0x1}) 228.005677ms ago: executing program 6 (id=1106): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x1906) 180.974047ms ago: executing program 1 (id=1107): userfaultfd(0x80801) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 66.780932ms ago: executing program 1 (id=1108): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 0s ago: executing program 3 (id=1109): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): e0: port 1(bridge_slave_0) entered blocking state [ 105.929234][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.944645][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.951846][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.965760][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.034514][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.041818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.057198][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.082844][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.090045][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.127155][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.184974][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.225015][ T5888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.261530][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.268721][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.328778][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.335913][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.364745][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.376932][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.409392][ T5886] veth0_vlan: entered promiscuous mode [ 106.483365][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.497039][ T5886] veth1_vlan: entered promiscuous mode [ 106.535080][ T5888] veth0_vlan: entered promiscuous mode [ 106.586915][ T5888] veth1_vlan: entered promiscuous mode [ 106.614560][ T5883] veth0_vlan: entered promiscuous mode [ 106.690271][ T5883] veth1_vlan: entered promiscuous mode [ 106.705652][ T5887] veth0_vlan: entered promiscuous mode [ 106.717010][ T5886] veth0_macvtap: entered promiscuous mode [ 106.733969][ T5888] veth0_macvtap: entered promiscuous mode [ 106.745516][ T5888] veth1_macvtap: entered promiscuous mode [ 106.770274][ T5886] veth1_macvtap: entered promiscuous mode [ 106.783392][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.799344][ T5887] veth1_vlan: entered promiscuous mode [ 106.817128][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.858432][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.890083][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.899391][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.910610][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.945972][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.955720][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.971821][ T5887] veth0_macvtap: entered promiscuous mode [ 106.981446][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.002564][ T5883] veth0_macvtap: entered promiscuous mode [ 107.025224][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.037119][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.063574][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.072770][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.082571][ T5887] veth1_macvtap: entered promiscuous mode [ 107.102531][ T5883] veth1_macvtap: entered promiscuous mode [ 107.190544][ T5890] veth0_vlan: entered promiscuous mode [ 107.192655][ T5875] Bluetooth: hci3: command tx timeout [ 107.196088][ T5185] Bluetooth: hci2: command tx timeout [ 107.215773][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.225203][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.241179][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.257074][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.267708][ T5185] Bluetooth: hci0: command tx timeout [ 107.269140][ T5870] Bluetooth: hci4: command tx timeout [ 107.278781][ T5875] Bluetooth: hci1: command tx timeout [ 107.296522][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.323867][ T3005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.347106][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.363180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.375016][ T3005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.384546][ T3005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.399420][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.432014][ T3005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.458378][ T5890] veth1_vlan: entered promiscuous mode [ 107.485992][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.502663][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.517037][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.537754][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.549906][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.562647][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.588807][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.694018][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.763371][ T5890] veth0_macvtap: entered promiscuous mode [ 107.777983][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.790240][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.812490][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.837091][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.883891][ T5890] veth1_macvtap: entered promiscuous mode [ 107.902155][ T5959] kvm: MONITOR instruction emulated as NOP! [ 107.970371][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.003050][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.097126][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.116259][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.128961][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.136829][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.162609][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.235823][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.283937][ T205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.327858][ T205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.405097][ T3018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.449256][ T3018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.712078][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.741473][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.938671][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.946561][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.268524][ T5870] Bluetooth: hci2: command tx timeout [ 109.274146][ T5875] Bluetooth: hci3: command tx timeout [ 109.349730][ T5875] Bluetooth: hci4: command tx timeout [ 109.355305][ T5870] Bluetooth: hci1: command tx timeout [ 109.358558][ T5185] Bluetooth: hci0: command tx timeout [ 109.661594][ T5985] input: syz0 as /devices/virtual/input/input5 [ 110.610972][ T5997] process 'syz.3.15' launched './file1' with NULL argv: empty string added [ 110.918777][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 113.138834][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.300762][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 113.316878][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.351967][ T24] usb 1-1: config 0 has no interface number 0 [ 113.377448][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.432032][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 113.458013][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.479704][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.534799][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.534850][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.553277][ T24] usb 1-1: config 0 descriptor?? [ 113.591097][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 113.884251][ T5954] usb 1-1: USB disconnect, device number 2 [ 113.884446][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 113.952246][ T5954] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 114.507258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.703747][ T6063] usb usb8: usbfs: process 6063 (syz.0.42) did not claim interface 0 before use [ 115.008066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.068173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.077061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.218620][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.583027][ T5933] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.622019][ T5933] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.666387][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.707944][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.751840][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.796005][ T5933] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.829914][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.848681][ T5933] usb 4-1: Product: syz [ 115.852912][ T5933] usb 4-1: Manufacturer: syz [ 115.889022][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 115.904525][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 115.919441][ T5933] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 115.935643][ T5933] cdc_wdm 4-1:1.0: Unknown control protocol [ 116.051470][ T55] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.146756][ T5933] usb 4-1: USB disconnect, device number 2 [ 116.227541][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 116.249236][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.296994][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.340571][ T55] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.376325][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.416574][ T55] usb 3-1: Product: syz [ 116.422768][ T55] usb 3-1: Manufacturer: syz [ 116.439182][ T55] usb 3-1: SerialNumber: syz [ 116.467054][ T55] usb 3-1: config 0 descriptor?? [ 116.501313][ T55] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 116.538648][ T55] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 117.124526][ T55] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 117.168841][ T55] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 117.267986][ T981] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.431616][ T55] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 117.457920][ T55] em28xx 3-1:0.0: No AC97 audio processor [ 117.472330][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.497859][ T55] usb 3-1: USB disconnect, device number 2 [ 117.519346][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.555700][ T55] em28xx 3-1:0.0: Disconnecting em28xx [ 117.580307][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.591751][ T55] em28xx 3-1:0.0: Freeing device [ 117.647934][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.727391][ T981] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.777397][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.833127][ T981] usb 2-1: config 0 descriptor?? [ 118.303117][ T981] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 118.438695][ T981] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.676150][ T30] audit: type=1326 audit(1758842221.178:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 118.779137][ T30] audit: type=1326 audit(1758842221.188:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 118.946260][ T30] audit: type=1326 audit(1758842221.188:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 119.049454][ T30] audit: type=1326 audit(1758842221.198:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 119.456190][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.637821][ T24] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 119.646823][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 119.764648][ T6135] capability: warning: `syz.4.71' uses deprecated v2 capabilities in a way that may be insecure [ 120.387661][ T5956] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.526777][ T981] usb 2-1: USB disconnect, device number 2 [ 120.587982][ T5956] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 120.628763][ T5956] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 107, changing to 10 [ 120.669106][ T5956] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 40974, setting to 1024 [ 120.738037][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.764020][ T5956] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.832254][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.875764][ T5956] usb 5-1: Product: syz [ 120.891936][ T5956] usb 5-1: Manufacturer: syz [ 120.909444][ T5956] usb 5-1: SerialNumber: syz [ 120.926870][ T5956] usb 5-1: config 0 descriptor?? [ 120.956620][ T5956] hub 5-1:0.0: bad descriptor, ignoring hub [ 120.967198][ T5956] hub 5-1:0.0: probe with driver hub failed with error -5 [ 121.024639][ T5956] usb 5-1: selecting invalid altsetting 0 [ 121.215781][ T5956] usb 5-1: USB disconnect, device number 2 [ 121.353757][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.701219][ T6163] syz.3.84 uses obsolete (PF_INET,SOCK_PACKET) [ 121.731712][ T6163] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 121.765563][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.041957][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.067938][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 122.097162][ T5956] usb 5-1: can't read configurations, error -71 [ 122.430302][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.565899][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 122.589970][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 122.621239][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.638744][ T6186] Zero length message leads to an empty skb [ 122.647422][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.682576][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.716626][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.747701][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.787275][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.811673][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.827445][ T24] usb 2-1: Product: syz [ 122.837811][ T24] usb 2-1: Manufacturer: syz [ 122.862269][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 122.892095][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 122.926500][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 122.983923][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 123.283095][ T981] usb 2-1: USB disconnect, device number 3 [ 123.647568][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.836818][ T55] usb 4-1: config 0 has no interfaces? [ 123.873334][ T55] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 123.895577][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.014653][ T55] usb 4-1: Product: syz [ 124.022794][ T55] usb 4-1: Manufacturer: syz [ 124.028494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.037214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.045954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.054838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.068169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.087632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.088209][ T55] usb 4-1: SerialNumber: syz [ 124.208733][ T55] usb 4-1: config 0 descriptor?? [ 124.736808][ T55] usb 4-1: USB disconnect, device number 3 [ 124.967475][ T5956] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.148340][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 125.172029][ T5956] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.192766][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.226355][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.262142][ T5956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.277090][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.287550][ T5956] usb 2-1: Product: syz [ 125.312951][ T5956] usb 2-1: Manufacturer: syz [ 125.318421][ T5956] usb 2-1: SerialNumber: syz [ 125.748477][ T5956] usb 2-1: 0:2 : does not exist [ 126.348692][ T55] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.521263][ T55] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.536040][ T55] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.601174][ T55] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.643391][ T5956] usb 2-1: USB disconnect, device number 4 [ 126.644662][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.753421][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.911432][ T55] usb 4-1: usb_control_msg returned -32 [ 126.917109][ T55] usbtmc 4-1:16.0: can't read capabilities [ 127.198272][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.369656][ T5956] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 127.382689][ T5956] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 127.421552][ T5956] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 127.434479][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.461417][ T5956] usb 5-1: Product: syz [ 127.471402][ T5956] usb 5-1: Manufacturer: syz [ 127.479985][ T24] usb 4-1: USB disconnect, device number 4 [ 127.511022][ T5956] usb 5-1: SerialNumber: syz [ 127.531978][ T5956] usb 5-1: config 0 descriptor?? [ 127.541075][ T6263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.567258][ T6263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.811490][ T6263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.838990][ T6263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.272906][ T5956] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 128.424827][ T6284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.711866][ T30] audit: type=1326 audit(1758842231.228:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.0.133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f667a78eec9 code=0x0 [ 128.850033][ T6296] input: syz0 as /devices/virtual/input/input6 [ 128.885817][ T5956] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 128.929938][ T5956] usb 5-1: USB disconnect, device number 5 [ 129.064150][ T6301] hub 1-0:1.0: USB hub found [ 129.070295][ T6301] hub 1-0:1.0: 1 port detected [ 129.227616][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.397659][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 129.405245][ T5954] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 129.419237][ T5954] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 129.439388][ T5954] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 129.461968][ T5954] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 129.481874][ T5954] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 129.526342][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.805374][ T5954] usb 2-1: string descriptor 0 read error: -22 [ 130.025664][ T5977] usb 2-1: USB disconnect, device number 5 [ 130.076964][ T981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 130.127930][ T981] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.114977][ T55] IPVS: starting estimator thread 0... [ 133.227526][ T6388] IPVS: using max 24 ests per chain, 57600 per kthread [ 134.137855][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.157068][ T6428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.279181][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 134.289323][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 134.313679][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 134.313858][ T2981] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.322943][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 134.343337][ T2981] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.344907][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.360907][ T2981] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.370165][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.386152][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.386204][ T2981] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.408381][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.421925][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.436498][ T24] usb 2-1: config 0 descriptor?? [ 134.940222][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 135.845874][ T30] audit: type=1326 audit(1758842238.358:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f01fc385d67 code=0x0 [ 136.258836][ C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 136.308108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.960250][ T5955] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.069971][ T24] usb 2-1: USB disconnect, device number 6 [ 137.163463][ T5955] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.183949][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.215273][ T5955] usb 5-1: config 0 descriptor?? [ 137.233404][ T5955] cp210x 5-1:0.0: cp210x converter detected [ 137.375139][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.467758][ T6497] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.647002][ T5955] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 137.710140][ T5955] usb 5-1: cp210x converter now attached to ttyUSB0 [ 137.872983][ T5955] usb 5-1: USB disconnect, device number 6 [ 137.909753][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.994968][ T5955] cp210x 5-1:0.0: device disconnected [ 138.485888][ T6517] vxcan1: tx address claim with different name [ 139.917658][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.128513][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 140.159987][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.225204][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.259465][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.279652][ T24] usb 3-1: Product: syz [ 140.283966][ T24] usb 3-1: Manufacturer: syz [ 140.303503][ T24] usb 3-1: SerialNumber: syz [ 140.327393][ T5955] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.358646][ T24] usb 3-1: config 0 descriptor?? [ 140.382560][ T6545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.417814][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 140.434032][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 140.507580][ T5955] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.527133][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.543871][ T5955] usb 5-1: Product: syz [ 140.559704][ T5955] usb 5-1: Manufacturer: syz [ 140.564360][ T5955] usb 5-1: SerialNumber: syz [ 140.589843][ T6567] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 140.600216][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 140.610501][ T5955] usb 5-1: config 0 descriptor?? [ 140.622055][ T5955] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 140.678585][ T6567] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 140.679529][ T2981] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.689501][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.713497][ T2981] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.717433][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 140.736264][ T2981] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.742692][ T5955] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 140.764547][ T2981] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.780723][ T5955] usb 5-1: media controller created [ 140.825271][ T6557] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 140.859816][ T6557] dvb-usb: bulk message failed: -22 (7/0) [ 140.887230][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.108029][ T5955] DVB: Unable to find symbol mt352_attach() [ 141.253519][ T5955] DVB: Unable to find symbol nxt6000_attach() [ 141.266294][ T6545] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 141.277575][ T5955] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 141.315770][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 141.345088][ T5955] dvb-usb: schedule remote query interval to 1000 msecs. [ 141.355724][ T5955] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 141.373417][ T5955] dvb-usb: bulk message failed: -22 (7/0) [ 141.384171][ T5955] dvb-usb: bulk message failed: -22 (7/0) [ 141.434598][ T5955] usb 5-1: USB disconnect, device number 7 [ 141.448290][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.460538][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.543846][ T6545] usb 3-1: device firmware changed [ 141.574730][ T5956] usb 3-1: USB disconnect, device number 3 [ 141.692972][ T5955] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 141.787542][ T5956] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.021896][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 142.044970][ T5956] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.090684][ T5956] usb 3-1: string descriptor 0 read error: -22 [ 142.097195][ T5956] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.121243][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.149854][ T5956] usb 3-1: config 0 descriptor?? [ 142.214038][ T6570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.261633][ T5956] hub 3-1:0.0: bad descriptor, ignoring hub [ 142.287698][ T5956] hub 3-1:0.0: probe with driver hub failed with error -5 [ 142.709473][ T55] usb 3-1: USB disconnect, device number 4 [ 144.709742][ T6644] netlink: 104 bytes leftover after parsing attributes in process `syz.2.266'. [ 145.237589][ T5956] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.471487][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.507168][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.577762][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.617380][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.677408][ T5956] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.686533][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.766178][ T30] audit: type=1326 audit(1758842248.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faab952af79 code=0x7ffc0000 [ 145.806913][ T5956] usb 3-1: config 0 descriptor?? [ 145.905241][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.935556][ T30] audit: type=1326 audit(1758842248.268:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.019906][ T30] audit: type=1326 audit(1758842248.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.148449][ T30] audit: type=1326 audit(1758842248.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.177446][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 146.196459][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.214522][ T30] audit: type=1326 audit(1758842248.268:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faab952af79 code=0x7ffc0000 [ 146.254145][ T55] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 146.291939][ T30] audit: type=1326 audit(1758842248.268:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.292779][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.374753][ T5956] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 146.447152][ T30] audit: type=1326 audit(1758842248.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.478805][ T55] usb 5-1: config 0 descriptor?? [ 146.480128][ T5956] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.559799][ T30] audit: type=1326 audit(1758842248.278:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faab952af79 code=0x7ffc0000 [ 146.638051][ T30] audit: type=1326 audit(1758842248.278:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.684590][ T6672] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 146.699726][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 146.728115][ T30] audit: type=1326 audit(1758842248.278:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab958eec9 code=0x7ffc0000 [ 146.902834][ T55] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 146.937430][ T55] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 146.944778][ T55] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 147.042926][ T6677] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 147.051119][ T55] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 147.067753][ T6677] netlink: 252 bytes leftover after parsing attributes in process `syz.3.281'. [ 147.079107][ T55] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 147.141673][ T55] koneplus 0003:1E7D:2D51.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 147.173141][ T55] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 147.191906][ T55] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 147.243163][ T55] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 147.273301][ T55] usb 5-1: USB disconnect, device number 8 [ 147.482064][ T6680] fido_id[6680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 147.656877][ T5954] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.747275][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 147.829013][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 147.836322][ T5954] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 147.858066][ T5954] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.886071][ T5954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.917044][ T5954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.943524][ T5954] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.970887][ T5954] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.987600][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.108312][ T6697] bond1: entered allmulticast mode [ 148.114262][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.127946][ T6697] bridge0: port 3(bond1) entered blocking state [ 148.134627][ T6697] bridge0: port 3(bond1) entered disabled state [ 148.216890][ T5954] usb 4-1: GET_CAPABILITIES returned 0 [ 148.234204][ T5954] usbtmc 4-1:16.0: can't read capabilities [ 148.254222][ T6697] bond1: entered promiscuous mode [ 148.294357][ T6697] bridge0: port 3(bond1) entered blocking state [ 148.301376][ T6697] bridge0: port 3(bond1) entered forwarding state [ 148.359195][ T5956] usb 3-1: USB disconnect, device number 5 [ 148.380665][ T36] bridge0: port 3(bond1) entered disabled state [ 148.439777][ T5954] usb 4-1: USB disconnect, device number 5 [ 148.797597][ T5977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.957949][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 148.978501][ T5977] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.999608][ T5977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.049940][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.077892][ T5956] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.087381][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.117414][ T5977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.184625][ T5977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.242400][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.284315][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 149.316031][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.360910][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.427390][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.497046][ T5956] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.526950][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.550896][ T5977] usb 5-1: GET_CAPABILITIES returned 0 [ 149.556468][ T5977] usbtmc 5-1:16.0: can't read capabilities [ 149.562679][ T5956] usb 2-1: config 0 descriptor?? [ 149.905843][ T6710] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 149.915489][ T55] usb 5-1: USB disconnect, device number 9 [ 150.001739][ T5956] HID 045e:07da: Invalid code 65791 type 1 [ 150.049371][ T5956] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input8 [ 150.150123][ T5956] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 150.288537][ T5956] usb 2-1: USB disconnect, device number 7 [ 150.396839][ T6738] fido_id[6738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 150.827785][ T6750] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 151.090957][ T6750] bond2: entered promiscuous mode [ 151.110409][ T6750] bond2: entered allmulticast mode [ 151.190026][ T6753] bond2: (slave geneve2): making interface the new active one [ 151.225069][ T6753] geneve2: entered promiscuous mode [ 151.238228][ T6753] geneve2: entered allmulticast mode [ 151.245966][ T6753] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 151.467436][ T55] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.651751][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 151.680572][ T55] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 151.714652][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.758769][ T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.784642][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.808099][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.828377][ T55] usb 1-1: Product: syz [ 151.832619][ T55] usb 1-1: Manufacturer: syz [ 151.844214][ T55] usb 1-1: SerialNumber: syz [ 152.007564][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 152.029234][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.087669][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.127459][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.163551][ T5953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.207462][ T5953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.251245][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.284528][ T55] usb 1-1: 0:2 : does not exist [ 152.488073][ T5953] usb 4-1: GET_CAPABILITIES returned 0 [ 152.493867][ T5953] usbtmc 4-1:16.0: can't read capabilities [ 152.703240][ T55] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 152.713206][ T5954] usb 4-1: USB disconnect, device number 6 [ 152.809819][ T55] usb 1-1: USB disconnect, device number 3 [ 152.961157][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.875878][ T6806] syzkaller1: entered promiscuous mode [ 153.888988][ T6806] syzkaller1: entered allmulticast mode [ 153.910685][ T6806] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 154.205150][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 154.462603][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 154.462623][ T30] audit: type=1326 audit(1758842256.978:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f667a78eec9 code=0x0 [ 156.043832][ T6860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.515457][ T981] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.538706][ T6872] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 156.569902][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 156.603344][ T6872] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 156.625250][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 156.664272][ T6872] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 156.695014][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 156.727537][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 156.739807][ T981] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 156.767569][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.793127][ T981] usb 2-1: config 0 descriptor?? [ 156.807626][ T5954] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.817873][ T981] gspca_main: sunplus-2.14.0 probing 041e:400b [ 156.999763][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.037465][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.073345][ T5954] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 157.117683][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.168727][ T5954] usb 5-1: config 0 descriptor?? [ 157.415096][ T6884] mmap: syz.3.363 (6884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.681192][ T5954] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 157.743724][ T5954] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0007/input/input9 [ 157.846451][ T5954] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 157.965478][ T5954] usb 5-1: USB disconnect, device number 10 [ 158.058686][ T981] gspca_sunplus: reg_w_riv err -71 [ 158.064109][ T981] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 158.117876][ T981] usb 2-1: USB disconnect, device number 8 [ 158.196404][ T6891] fido_id[6891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 158.887409][ T5954] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.048035][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 159.079095][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.111962][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.137553][ T5954] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 159.171353][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.201472][ T5954] usb 3-1: config 0 descriptor?? [ 159.407455][ T5977] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.570132][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.612012][ T5977] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.641944][ T5954] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0008/input/input10 [ 159.656238][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.676798][ T5977] usb 1-1: config 0 descriptor?? [ 159.767036][ T5954] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0008/input/input11 [ 159.920176][ T5977] usbhid 1-1:0.0: can't add hid device: -71 [ 159.926322][ T5977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.972954][ T5954] kye 0003:0458:5012.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 160.011673][ T5977] usb 1-1: USB disconnect, device number 4 [ 160.056295][ T5954] usb 3-1: USB disconnect, device number 6 [ 160.200522][ T5956] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.293312][ T6929] fido_id[6929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 160.403936][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.430377][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.447518][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.467530][ T5956] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.476890][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.492470][ T5977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.511515][ T5956] usb 4-1: config 0 descriptor?? [ 160.687400][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 160.713102][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.748804][ T5977] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 160.797422][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.823702][ T5977] usb 1-1: config 0 descriptor?? [ 160.838151][ T5954] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.861381][ T5977] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.893848][ T5977] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 161.027728][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 161.035183][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.062499][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.089943][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.099091][ T5956] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.100423][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.142335][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.218887][ T5954] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.256584][ T5954] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.287414][ T5954] usb 3-1: Manufacturer: syz [ 161.310002][ T5954] usb 3-1: config 0 descriptor?? [ 161.402640][ T981] usb 1-1: USB disconnect, device number 5 [ 161.465099][ T981] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 161.525814][ T6945] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 161.697425][ T5954] rc_core: IR keymap rc-hauppauge not found [ 161.718295][ T5954] Registered IR keymap rc-empty [ 161.731725][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 161.769407][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 161.802142][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 161.825213][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 161.884144][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 161.917779][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 161.937592][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 161.967677][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.017707][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.061397][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.097765][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.127779][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.161935][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.201961][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 162.253232][ T5954] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 162.279029][ T5954] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 162.345343][ T5954] usb 3-1: USB disconnect, device number 7 [ 163.023149][ T5954] usb 4-1: USB disconnect, device number 7 [ 163.505734][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 163.638133][ T981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.817635][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 163.838825][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.870416][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.900074][ T981] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 163.920505][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.968006][ T981] usb 2-1: config 0 descriptor?? [ 164.840483][ T981] letsketch 0003:6161:4D15.000A: Device info: ᣠ[ 165.041626][ T981] letsketch 0003:6161:4D15.000A: Device info: à° [ 165.281263][ T981] usb 2-1: Max retries (5) exceeded reading string descriptor 202 [ 165.293474][ T981] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -71 [ 165.357227][ T981] usb 2-1: USB disconnect, device number 9 [ 165.749783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.768022][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 165.840214][ T5956] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 165.876133][ T7043] netlink: 'syz.3.425': attribute type 29 has an invalid length. [ 165.953036][ T7046] netlink: 'syz.3.425': attribute type 29 has an invalid length. [ 166.022271][ T7043] netlink: 500 bytes leftover after parsing attributes in process `syz.3.425'. [ 166.039546][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.049968][ T7043] unsupported nla_type 66 [ 166.077927][ T5956] usb 5-1: config 0 has no interfaces? [ 166.102296][ T5956] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.135837][ T5956] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.171272][ T5956] usb 5-1: Manufacturer: syz [ 166.199463][ T5956] usb 5-1: config 0 descriptor?? [ 166.457481][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.507955][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.575497][ T7039] netlink: 136 bytes leftover after parsing attributes in process `syz.4.423'. [ 166.620306][ T55] usb 5-1: USB disconnect, device number 11 [ 166.865366][ T7070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.478778][ T7087] veth0: entered promiscuous mode [ 167.506760][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 167.847708][ T5956] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 168.058807][ T5956] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.077782][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.086830][ T5956] usb 1-1: Product: syz [ 168.096971][ T5956] usb 1-1: Manufacturer: syz [ 168.104607][ T5956] usb 1-1: SerialNumber: syz [ 168.126185][ T5956] usb 1-1: config 0 descriptor?? [ 168.262869][ T7115] input: syz0 as /devices/virtual/input/input13 [ 168.352076][ T5956] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.571244][ T7120] netlink: 'syz.4.458': attribute type 22 has an invalid length. [ 168.593098][ T7120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.458'. [ 168.837518][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.036880][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 169.044927][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.063174][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.091238][ T981] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 169.113902][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.151838][ T981] usb 3-1: config 0 descriptor?? [ 169.362541][ T5956] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 169.397992][ T5956] usb 1-1: USB disconnect, device number 6 [ 169.606425][ T981] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 169.790957][ T981] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 169.993160][ T981] ft260 0003:0403:6030.000B: uart interface is not supported [ 170.229893][ T981] usb 3-1: USB disconnect, device number 8 [ 171.287463][ T5977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.477416][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 171.493597][ T5977] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 171.519788][ T5977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.531766][ T5977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.542336][ T5977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.567944][ T5955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.569518][ T5977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.621083][ T5977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.630518][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.744569][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.785277][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.804241][ T5955] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 171.815035][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.847097][ T5955] usb 4-1: config 0 descriptor?? [ 171.858078][ T5977] usb 3-1: GET_CAPABILITIES returned 0 [ 171.884510][ T5977] usbtmc 3-1:16.0: can't read capabilities [ 172.197312][ C0] hrtimer: interrupt took 63239 ns [ 172.209438][ T7198] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 172.210178][ T5956] usb 3-1: USB disconnect, device number 9 [ 172.347552][ T5977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.541343][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.564344][ T5977] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 172.592731][ T5977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.608357][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.628003][ T5977] usb 2-1: Product: syz [ 172.632305][ T5977] usb 2-1: Manufacturer: syz [ 172.636933][ T5977] usb 2-1: SerialNumber: syz [ 172.702408][ T5955] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 172.733351][ T5955] usb 4-1: USB disconnect, device number 8 [ 172.885019][ T7224] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 173.276692][ T30] audit: type=1326 audit(1758842275.788:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.4.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1d358eec9 code=0x0 [ 173.298476][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.537867][ T7224] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 173.766806][ T5977] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 173.786683][ T5977] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 173.809212][ T5977] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 173.976380][ T5977] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 173.997987][ T981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.046009][ T5977] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 174.140589][ T5977] usb 2-1: USB disconnect, device number 10 [ 174.153856][ T5977] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 174.168278][ T5955] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.193864][ T981] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 174.208298][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.237730][ T981] usb 4-1: config 0 descriptor?? [ 174.260712][ T981] gspca_main: spca508-2.14.0 probing 8086:0110 [ 174.349982][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.367846][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.390455][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.418060][ T5955] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.445128][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.468238][ T981] gspca_spca508: reg_read err -32 [ 174.487147][ T981] gspca_spca508: reg_read err -32 [ 174.498859][ T981] gspca_spca508: reg_read err -32 [ 174.505107][ T5955] usb 1-1: config 0 descriptor?? [ 174.512415][ T981] gspca_spca508: reg_read err -32 [ 174.724094][ T981] gspca_spca508: reg write: error -71 [ 174.751275][ T981] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 174.777076][ T981] usb 4-1: USB disconnect, device number 9 [ 174.970204][ T5955] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 175.003920][ T5955] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 175.237616][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.398337][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 175.412544][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 175.437549][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.448322][ T24] usb 5-1: config 0 has no interface number 0 [ 175.454613][ T24] usb 5-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.471611][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 175.484106][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 175.493902][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.502518][ T24] usb 5-1: Product: syz [ 175.506923][ T24] usb 5-1: Manufacturer: syz [ 175.512250][ T24] usb 5-1: SerialNumber: syz [ 175.521260][ T24] usb 5-1: config 0 descriptor?? [ 175.955038][ T24] f81534 5-1:0.12: required endpoints missing [ 175.999547][ T24] usb 5-1: USB disconnect, device number 12 [ 176.009128][ T7292] syz_tun: entered allmulticast mode [ 176.024049][ T7291] syz_tun: left allmulticast mode [ 176.257563][ T5956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 176.461850][ T5956] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 176.478721][ T5956] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 176.506594][ T5956] usb 2-1: config 0 has no interface number 0 [ 176.529937][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 176.557653][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.570563][ T7304] dlm: non-version read from control device 4 [ 176.583968][ T5956] usb 2-1: Product: syz [ 176.592278][ T5956] usb 2-1: Manufacturer: syz [ 176.596937][ T5956] usb 2-1: SerialNumber: syz [ 176.624397][ T5956] usb 2-1: config 0 descriptor?? [ 176.728818][ T30] audit: type=1326 audit(1758842279.248:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x0 [ 176.750513][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.060561][ T5954] usb 1-1: USB disconnect, device number 7 [ 177.071866][ T5956] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 177.090332][ T5956] usb 2-1: No valid video chain found. [ 177.120450][ T5956] usb 2-1: USB disconnect, device number 11 [ 179.758389][ T5956] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.930661][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.969079][ T5956] usb 1-1: config 0 has no interfaces? [ 179.984413][ T5956] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.008396][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.048192][ T5956] usb 1-1: config 0 descriptor?? [ 180.121494][ T5956] IPVS: starting estimator thread 0... [ 180.217867][ T7380] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 180.225359][ T7378] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.642240][ T7409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.972265][ T7411] netlink: 104 bytes leftover after parsing attributes in process `syz.4.574'. [ 182.494838][ T5956] usb 1-1: USB disconnect, device number 8 [ 182.977904][ T5956] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.157386][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 183.181346][ T5956] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.202817][ T5956] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 183.215714][ T5956] usb 1-1: config 4 has no interface number 0 [ 183.242401][ T5956] usb 1-1: config 4 interface 30 has no altsetting 0 [ 183.308196][ T5956] usb 1-1: string descriptor 0 read error: -22 [ 183.314778][ T5956] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 183.330467][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.339395][ T5955] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 183.387103][ T5956] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 183.404189][ T5956] dw2102: su3000_power_ctrl: 1, initialized 0 [ 183.424645][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 183.454500][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.478327][ T5956] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 183.496315][ T5956] usb 1-1: media controller created [ 183.506523][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.516539][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 183.538637][ T5956] dw2102: i2c transfer failed. [ 183.551516][ T5955] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.570954][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.576947][ T5955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.586047][ T5956] dw2102: i2c transfer failed. [ 183.597395][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.603192][ T5956] dw2102: i2c transfer failed. [ 183.622216][ T7419] dvb-usb: bulk message failed: -22 (5/0) [ 183.632181][ T5955] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.645411][ T7419] dw2102: i2c transfer failed. [ 183.662970][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.676611][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.692399][ T5955] usb 5-1: Product: syz [ 183.699562][ T5956] dw2102: i2c transfer failed. [ 183.716415][ T5955] usb 5-1: Manufacturer: syz [ 183.721369][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.731565][ T5955] usb 5-1: SerialNumber: syz [ 183.736328][ T5956] dw2102: i2c transfer failed. [ 183.744651][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 183.764108][ T5956] dw2102: i2c transfer failed. [ 183.797559][ T5956] dvb-usb: MAC address: 02:02:02:02:02:02 [ 183.840813][ T7441] loop9: detected capacity change from 0 to 7 [ 183.866688][ T7441] Dev loop9: unable to read RDB block 7 [ 183.886636][ T7441] loop9: AHDI p3 p4 [ 183.893871][ T7441] loop9: partition table partially beyond EOD, truncated [ 183.918298][ T7441] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 183.918655][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.987829][ T5955] usb 5-1: 0:2 : does not exist [ 184.018959][ T5955] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 184.030188][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 184.035989][ T5956] dw2102: command 0x0e transfer failed. [ 184.046084][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 184.065345][ T5956] dw2102: command 0x0e transfer failed. [ 184.098187][ T5955] usb 5-1: USB disconnect, device number 13 [ 184.147178][ T5868] udevd[5868]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 184.183734][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.388448][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 184.409139][ T5956] dw2102: command 0x0e transfer failed. [ 184.429490][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 184.436683][ T5956] dw2102: command 0x0e transfer failed. [ 184.443763][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 184.454533][ T5956] dw2102: command 0x51 transfer failed. [ 184.473223][ T5956] dvb-usb: bulk message failed: -22 (5/0) [ 184.497430][ T5956] dw2102: i2c probe for address 0x68 failed. [ 184.524026][ T5956] dvb-usb: bulk message failed: -22 (5/0) [ 184.539586][ T5956] dw2102: i2c probe for address 0x69 failed. [ 184.555995][ T5956] dvb-usb: bulk message failed: -22 (5/0) [ 184.569482][ T5956] dw2102: i2c probe for address 0x6a failed. [ 184.593479][ T5956] dw2102: probing for demodulator failed. Is the external power switched on? [ 184.644013][ T5956] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 184.797471][ T5956] rc_core: IR keymap rc-tt-1500 not found [ 184.817919][ T5956] Registered IR keymap rc-empty [ 184.859436][ T5956] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 184.901214][ T5956] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 184.983795][ T5956] dvb-usb: schedule remote query interval to 250 msecs. [ 185.017437][ T5956] dw2102: su3000_power_ctrl: 0, initialized 1 [ 185.036080][ T5956] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 185.106759][ T5956] usb 1-1: USB disconnect, device number 9 [ 185.363960][ T5956] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 185.753607][ T5956] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.897512][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.939326][ T5956] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.954308][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.995302][ T5956] usb 1-1: config 0 descriptor?? [ 186.024658][ T5956] cp210x 1-1:0.0: cp210x converter detected [ 186.049955][ T7501] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 186.069688][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 186.091141][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.104350][ T7501] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 186.136979][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.154673][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.174236][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.199753][ T24] usb 4-1: config 0 descriptor?? [ 186.235683][ T24] hub 4-1:0.0: USB hub found [ 186.247869][ T5977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.424594][ T24] hub 4-1:0.0: 1 port detected [ 186.437633][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 186.466646][ T5956] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 186.468640][ T5977] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.486625][ T5956] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.492175][ T5977] usb 5-1: config 179 has no interface number 0 [ 186.517376][ T5977] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.562834][ T5977] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.607670][ T5977] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.637367][ T5977] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.671131][ T5977] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.688944][ T5977] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.689548][ T5955] usb 1-1: USB disconnect, device number 10 [ 186.734513][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.743854][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.776654][ T7499] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.845381][ T5955] cp210x 1-1:0.0: device disconnected [ 187.053544][ T5977] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15 [ 187.067944][ T24] hub 4-1:0.0: activate --> -90 [ 187.235708][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.296700][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.475103][ T24] usb 4-1-port1: cannot disable (err = -71) [ 187.475890][ T5953] usb 4-1: USB disconnect, device number 10 [ 187.772075][ T7525] kvm: user requested TSC rate below hardware speed [ 187.828454][ T5953] usb 5-1: USB disconnect, device number 14 [ 187.828519][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.842874][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 188.196292][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 188.417876][ T5953] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.454146][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 188.587545][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 188.601835][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.617147][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.642490][ T5953] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.673146][ T5953] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.720312][ T5953] usb 1-1: Manufacturer: syz [ 188.758515][ T5953] usb 1-1: config 0 descriptor?? [ 188.902606][ T7559] netlink: 'syz.1.638': attribute type 29 has an invalid length. [ 188.912139][ T7559] netlink: 'syz.1.638': attribute type 29 has an invalid length. [ 188.926058][ T7559] netlink: 500 bytes leftover after parsing attributes in process `syz.1.638'. [ 189.414545][ T205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.453142][ T205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.664571][ T205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.687363][ T205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.786510][ T205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.817085][ T205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.119627][ T205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.187557][ T205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.729399][ T205] bond1: left promiscuous mode [ 190.736650][ T205] bridge0: port 3(bond1) entered disabled state [ 190.904911][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.917668][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.925830][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.990777][ T7596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.011899][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.020842][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.022504][ T205] bridge_slave_1: left allmulticast mode [ 191.073115][ T205] bridge_slave_1: left promiscuous mode [ 191.079237][ T205] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.345086][ T205] bridge_slave_0: left allmulticast mode [ 191.372784][ T205] bridge_slave_0: left promiscuous mode [ 191.419420][ T205] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.737702][ T5956] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.899616][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 191.936313][ T5956] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 191.962168][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.005596][ T5956] usb 3-1: config 0 descriptor?? [ 192.025464][ T5956] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 192.647660][ T5953] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.746109][ T205] bond2 (unregistering): (slave geneve2): Releasing active interface [ 192.767547][ T205] geneve2 (unregistering): left promiscuous mode [ 192.801393][ T205] geneve2 (unregistering): left allmulticast mode [ 192.821102][ T5953] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.847361][ T5953] usb 2-1: config 0 has no interface number 0 [ 192.877503][ T5953] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.886705][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.933900][ T5953] usb 2-1: config 0 descriptor?? [ 192.950141][ T5953] cp210x 2-1:0.1: cp210x converter detected [ 193.107489][ T5875] Bluetooth: hci3: command tx timeout [ 193.243947][ T5956] gspca_vc032x: reg_w err -71 [ 193.252714][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.264307][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.270222][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.282720][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.297960][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.303410][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.309261][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.324856][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.330632][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.336974][ T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.346060][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.355891][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.367549][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.373186][ T5953] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 193.377941][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.393096][ T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.401885][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.407241][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.420542][ T205] bond0 (unregistering): Released all slaves [ 193.437129][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.451980][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.477389][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.488795][ T5956] gspca_vc032x: Unknown sensor... [ 193.509749][ T5956] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 193.545668][ T5956] usb 3-1: USB disconnect, device number 10 [ 193.620720][ T5953] usb 2-1: cp210x converter now attached to ttyUSB0 [ 193.759656][ T205] bond1 (unregistering): Released all slaves [ 193.799400][ T205] bond2 (unregistering): Released all slaves [ 193.832446][ T5953] usb 2-1: USB disconnect, device number 12 [ 193.867438][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.925753][ T5953] cp210x 2-1:0.1: device disconnected [ 195.188598][ T5875] Bluetooth: hci3: command tx timeout [ 195.655778][ T205] hsr_slave_0: left promiscuous mode [ 195.683962][ T205] hsr_slave_1: left promiscuous mode [ 195.710090][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.748599][ T205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.779908][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.799930][ T205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.915888][ T205] veth1_macvtap: left promiscuous mode [ 195.925632][ T205] veth0_macvtap: left promiscuous mode [ 195.932981][ T205] veth1_vlan: left promiscuous mode [ 195.939151][ T205] veth0_vlan: left promiscuous mode [ 196.058039][ T5953] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 196.252375][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.265755][ T5953] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.303947][ T5953] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 196.326301][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.366773][ T5953] usb 3-1: config 0 descriptor?? [ 196.394723][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 196.403099][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 196.436152][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.464539][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.512299][ T5953] usb 3-1: media controller created [ 196.533301][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.568078][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 196.612361][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.618339][ T7682] dvb-usb: bulk message failed: -22 (2/0) [ 196.648892][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 196.701506][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 196.728156][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.892365][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 196.901913][ T5953] dvb-usb: error while querying for an remote control event. [ 197.067810][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 197.086584][ T5953] dvb-usb: error while querying for an remote control event. [ 197.215367][ T5953] usb 3-1: USB disconnect, device number 11 [ 197.267889][ T5875] Bluetooth: hci3: command tx timeout [ 197.309554][ T5953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.535172][ T205] team0 (unregistering): Port device team_slave_1 removed [ 197.647732][ T5953] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.701926][ T205] team0 (unregistering): Port device team_slave_0 removed [ 197.843616][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 197.866624][ T5953] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 197.876094][ T5953] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.895633][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.933412][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.959769][ T5953] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.979385][ T5953] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.997835][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.137544][ T5956] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.253526][ T5953] usb 3-1: usb_control_msg returned -32 [ 198.276034][ T5953] usbtmc 3-1:16.0: can't read capabilities [ 198.310587][ T5956] usb 2-1: config 0 has no interfaces? [ 198.324578][ T5956] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 198.337406][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.355882][ T5956] usb 2-1: Product: syz [ 198.360659][ T5956] usb 2-1: Manufacturer: syz [ 198.371656][ T5956] usb 2-1: SerialNumber: syz [ 198.390982][ T5956] usb 2-1: config 0 descriptor?? [ 198.670553][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 198.679210][ T7729] netlink: 'syz.1.689': attribute type 16 has an invalid length. [ 198.709881][ T7729] netlink: 'syz.1.689': attribute type 17 has an invalid length. [ 198.791649][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.803756][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.997629][ T7729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.020985][ T7735] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 199.229626][ T5956] usb 3-1: USB disconnect, device number 12 [ 199.347967][ T5875] Bluetooth: hci3: command tx timeout [ 199.538784][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.544537][ T5956] usb 2-1: USB disconnect, device number 13 [ 199.557206][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.569478][ T7599] bridge_slave_0: entered allmulticast mode [ 199.578160][ T7599] bridge_slave_0: entered promiscuous mode [ 199.631547][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.651443][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.659777][ T7599] bridge_slave_1: entered allmulticast mode [ 199.668325][ T7599] bridge_slave_1: entered promiscuous mode [ 199.700531][ T205] IPVS: stop unused estimator thread 0... [ 199.817217][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.887736][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.966144][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.994801][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.070781][ T7599] team0: Port device team_slave_0 added [ 200.107677][ T7599] team0: Port device team_slave_1 added [ 200.259254][ T7767] kernel read not supported for file /eth0 (pid: 7767 comm: syz.1.701) [ 200.287436][ T30] audit: type=1800 audit(1758842302.798:115): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.701" name="eth0" dev="mqueue" ino=19177 res=0 errno=0 [ 200.307219][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.617824][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.624843][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.687073][ T5977] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.698445][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.784813][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.811671][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.857456][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.878675][ T5977] usb 2-1: Using ep0 maxpacket: 8 [ 200.901018][ T5977] usb 2-1: config 0 has no interfaces? [ 200.909345][ T5977] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 200.927394][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.935646][ T5977] usb 2-1: Product: syz [ 200.955845][ T5977] usb 2-1: Manufacturer: syz [ 200.975115][ T5977] usb 2-1: SerialNumber: syz [ 201.011796][ T5977] usb 2-1: config 0 descriptor?? [ 201.083659][ T7786] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.706'. [ 201.231866][ T7599] hsr_slave_0: entered promiscuous mode [ 201.259601][ T7599] hsr_slave_1: entered promiscuous mode [ 201.307580][ T5956] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 201.479493][ T5956] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.517725][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.577948][ T5956] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.587068][ T5956] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.619823][ T5956] usb 3-1: Manufacturer: syz [ 201.643915][ T5956] usb 3-1: config 0 descriptor?? [ 201.787442][ T5956] rc_core: IR keymap rc-hauppauge not found [ 201.807326][ T5956] Registered IR keymap rc-empty [ 201.813595][ T5956] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.871399][ T5956] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 201.952350][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 201.983928][ T5956] usb 3-1: USB disconnect, device number 13 [ 202.234967][ T7599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.260227][ T7599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.287190][ T7599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.316401][ T7599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.704596][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.850981][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.872301][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.879034][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.895724][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.921144][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.928473][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.952134][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.011491][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.018754][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.218559][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.305368][ T7599] veth0_vlan: entered promiscuous mode [ 203.320835][ T5977] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 203.334597][ T7599] veth1_vlan: entered promiscuous mode [ 203.392760][ T7599] veth0_macvtap: entered promiscuous mode [ 203.403771][ T7599] veth1_macvtap: entered promiscuous mode [ 203.436941][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.470777][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.489356][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 203.495211][ T5933] usb 2-1: USB disconnect, device number 14 [ 203.519520][ T5977] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 203.537952][ T5977] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 203.546529][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.579045][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.591473][ T5977] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 203.632039][ T5977] usb 3-1: config 250 has no interface number 0 [ 203.650058][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.652368][ T5977] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 203.694852][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.701825][ T5977] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 203.744323][ T5977] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.780625][ T5977] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.838097][ T5977] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 203.868663][ T5977] usb 3-1: config 250 interface 228 has no altsetting 0 [ 203.879405][ T5977] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 203.915222][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 203.933887][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.937837][ T5977] usb 3-1: Product: syz [ 203.964256][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.971813][ T5933] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 203.972227][ T5977] usb 3-1: SerialNumber: syz [ 204.031260][ T5977] hub 3-1:250.228: bad descriptor, ignoring hub [ 204.044683][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.055347][ T5977] hub 3-1:250.228: probe with driver hub failed with error -5 [ 204.064397][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.157558][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 204.179051][ T5933] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 204.190731][ T5933] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.215472][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.260933][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.289120][ T5977] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 204.297794][ T5933] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.386253][ T5933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.429422][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.586278][ T5977] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 204.675851][ T5933] usb 2-1: GET_CAPABILITIES returned 0 [ 204.707189][ T5933] usbtmc 2-1:16.0: can't read capabilities [ 205.337365][ T5977] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 205.340286][ T5933] usb 3-1: USB disconnect, device number 14 [ 205.370662][ T5933] usblp0: removed [ 205.523370][ T5977] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 205.533953][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.546441][ T5977] usb 6-1: Product: syz [ 205.553731][ T5977] usb 6-1: Manufacturer: syz [ 205.563377][ T5977] usb 6-1: SerialNumber: syz [ 205.582631][ T5977] usb 6-1: config 0 descriptor?? [ 206.011743][ T5977] airspy 6-1:0.0: Board ID: 00 [ 206.016842][ T5977] airspy 6-1:0.0: Firmware version: [ 206.665165][ T5954] usb 2-1: USB disconnect, device number 15 [ 206.759537][ T7900] vlan2: entered allmulticast mode [ 206.776162][ T7900] macvtap0: entered allmulticast mode [ 206.785486][ T7900] veth0_macvtap: entered allmulticast mode [ 206.828827][ T5977] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 206.859334][ T5977] airspy 6-1:0.0: Registered as swradio24 [ 206.865796][ T5977] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 206.893024][ T5977] usb 6-1: USB disconnect, device number 2 [ 207.018519][ T5853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 207.057209][ T7907] loop2: detected capacity change from 0 to 7 [ 207.074314][ T7907] Dev loop2: unable to read RDB block 7 [ 207.084961][ T7907] loop2: unable to read partition table [ 207.101234][ T7907] loop2: partition table beyond EOD, truncated [ 207.121358][ T7907] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.193586][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 207.222344][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.253734][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.299478][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.347090][ T5853] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.373672][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.455161][ T5853] usb 3-1: config 0 descriptor?? [ 207.582357][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 207.607808][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 207.637574][ T7918] netlink: 'syz.3.748': attribute type 15 has an invalid length. [ 207.665741][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 207.732429][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 207.762069][ T7918] netlink: 'syz.3.748': attribute type 15 has an invalid length. [ 207.825333][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.857657][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.891142][ T7904] random: crng reseeded on system resumption [ 208.013543][ T5853] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 208.162519][ T5853] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 208.184817][ T5853] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 208.266065][ T5954] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.288843][ T5853] usb 3-1: USB disconnect, device number 15 [ 208.302249][ T5954] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.364716][ T5954] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.406889][ T5954] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 209.121186][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.158308][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.953925][ T7988] input: syz1 as /devices/virtual/input/input19 [ 210.817448][ T5933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 211.013804][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 211.079429][ T5933] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.107466][ T5933] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.247388][ T5933] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.256712][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.293672][ T5933] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.294283][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.338396][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.346467][ T5933] usb 6-1: Product: syz [ 211.397904][ T5933] usb 6-1: Manufacturer: syz [ 211.402586][ T5933] usb 6-1: SerialNumber: syz [ 211.879423][ T5933] usb 6-1: 0:2 : does not exist [ 212.332099][ T8028] kvm: emulating exchange as write [ 212.700032][ T5853] usb 6-1: USB disconnect, device number 3 [ 212.865078][ T8030] delete_channel: no stack [ 213.373974][ T8050] trusted_key: syz.0.803 sent an empty control message without MSG_MORE. [ 213.806140][ T8067] bridge0: port 3(gretap0) entered blocking state [ 213.859330][ T8067] bridge0: port 3(gretap0) entered disabled state [ 213.906429][ T8067] gretap0: entered allmulticast mode [ 213.951943][ T8067] gretap0: entered promiscuous mode [ 213.961745][ T8067] bridge0: port 3(gretap0) entered blocking state [ 213.968675][ T8067] bridge0: port 3(gretap0) entered forwarding state [ 214.042183][ T8075] gretap0: left allmulticast mode [ 214.056473][ T8075] gretap0: left promiscuous mode [ 214.101468][ T8075] bridge0: port 3(gretap0) entered disabled state [ 215.549487][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.583557][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.803718][ T8128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.042806][ T8134] team_slave_0: entered promiscuous mode [ 216.048869][ T8134] team_slave_1: entered promiscuous mode [ 216.091342][ T8134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.190048][ T8134] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 217.745717][ T8201] loop2: detected capacity change from 0 to 7 [ 217.786650][ T8201] Dev loop2: unable to read RDB block 7 [ 217.800954][ T8201] loop2: AHDI p1 p2 p3 [ 217.811063][ T8201] loop2: partition table partially beyond EOD, truncated [ 217.827222][ T8201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 217.845405][ T8201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 218.298277][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 219.437736][ T8249] netlink: 'syz.5.865': attribute type 1 has an invalid length. [ 220.306507][ T5954] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.497274][ T8289] input: syz0 as /devices/virtual/input/input20 [ 220.518122][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 220.531616][ T5954] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.548471][ T5954] usb 2-1: config 0 has no interface number 0 [ 220.555114][ T5954] usb 2-1: config 0 interface 184 has no altsetting 0 [ 220.582300][ T5954] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.603083][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.667597][ T5954] usb 2-1: Product: syz [ 220.673409][ T5954] usb 2-1: Manufacturer: syz [ 220.692280][ T5954] usb 2-1: SerialNumber: syz [ 220.723394][ T5954] usb 2-1: config 0 descriptor?? [ 220.765761][ T5954] smsc75xx v1.0.0 [ 221.124067][ T5954] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 221.172219][ T5954] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 221.223444][ T5954] usb 2-1: USB disconnect, device number 16 [ 221.658926][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 221.743616][ T8328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.814591][ T8328] bond1: (slave batadv1): Opening slave failed [ 222.506049][ T8353] netlink: 'syz.2.903': attribute type 3 has an invalid length. [ 222.556132][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 225.138087][ T5933] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.297380][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 225.321801][ T5933] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 225.346591][ T5933] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.371469][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.404355][ T5933] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 225.431607][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 225.438810][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 225.444915][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 225.451674][ T5881] Bluetooth: hci4: command 0x0406 tx timeout [ 225.468717][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.482056][ T5933] usb 4-1: Product: syz [ 225.486363][ T5933] usb 4-1: Manufacturer: syz [ 225.496050][ T5933] usb 4-1: SerialNumber: syz [ 225.739226][ T5933] usb 4-1: 0:2 : does not exist [ 225.802758][ T5933] usb 4-1: USB disconnect, device number 11 [ 225.893230][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.084583][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 226.485669][ T8463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.493433][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 226.687383][ T5977] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.884908][ T5977] usb 2-1: Using ep0 maxpacket: 8 [ 226.930074][ T5977] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.947556][ T5977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.977433][ T5977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.012563][ T5977] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.063999][ T5977] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.084780][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.119138][ T8484] warning: `syz.3.959' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.322022][ T5977] usb 2-1: GET_CAPABILITIES returned 0 [ 227.343965][ T5977] usbtmc 2-1:16.0: can't read capabilities [ 227.544528][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.554063][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.563220][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.572353][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.581871][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.604602][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.613783][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.622950][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.632090][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.641196][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.657002][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.666173][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.675318][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.684464][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.693655][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.702697][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.711875][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.721024][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.733381][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 227.752143][ T5933] usb 2-1: USB disconnect, device number 17 [ 228.026289][ T8509] netlink: 'syz.0.970': attribute type 9 has an invalid length. [ 228.042124][ T8509] netlink: 'syz.0.970': attribute type 7 has an invalid length. [ 228.056949][ T8509] netlink: 'syz.0.970': attribute type 8 has an invalid length. [ 228.472797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.549610][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 228.598277][ T8524] xfrm1: entered promiscuous mode [ 228.603397][ T8524] xfrm1: entered allmulticast mode [ 228.664674][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 229.181551][ T8540] input: syz0 as /devices/virtual/input/input21 [ 229.354341][ T8542] netlink: 67 bytes leftover after parsing attributes in process `syz.3.986'. [ 230.124637][ T8557] loop3: detected capacity change from 0 to 1 [ 230.186936][ T8557] Dev loop3: unable to read RDB block 1 [ 230.197358][ T8557] loop3: unable to read partition table [ 230.203292][ T8557] loop3: partition table beyond EOD, truncated [ 230.267986][ T8557] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.521444][ T5955] usb 1-1: USB disconnect, device number 11 [ 230.924249][ T2981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.091239][ T2981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.215152][ T2981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.356976][ T2981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.829907][ T2981] bridge_slave_1: left allmulticast mode [ 231.851984][ T2981] bridge_slave_1: left promiscuous mode [ 231.870175][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.003634][ T2981] bridge_slave_0: left allmulticast mode [ 232.023602][ T2981] bridge_slave_0: left promiscuous mode [ 232.053330][ T2981] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.117636][ T8579] input: syz0 as /devices/virtual/input/input22 [ 232.505397][ T8591] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1007'. [ 232.755503][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.774657][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.801134][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.818857][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.827702][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.938768][ T5955] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 233.117380][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 233.125076][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.144278][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.174393][ T5955] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.195886][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.239028][ T5955] usb 6-1: config 0 descriptor?? [ 233.264573][ T5955] hub 6-1:0.0: USB hub found [ 233.460525][ T5955] hub 6-1:0.0: 1 port detected [ 233.777874][ T2981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.811885][ T2981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.844113][ T2981] bond0 (unregistering): Released all slaves [ 233.995917][ T2981] bond1 (unregistering): Released all slaves [ 234.007742][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 234.087639][ T5977] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 234.117851][ T5955] hub 6-1:0.0: activate --> -90 [ 234.177103][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.199790][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.210249][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.224096][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.234827][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.249006][ T24] usb 3-1: config 0 descriptor?? [ 234.279664][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 234.297121][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.322458][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.345760][ T5977] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 234.355593][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.422016][ T5977] usb 4-1: config 0 descriptor?? [ 234.511915][ T5955] usb 6-1-port1: cannot reset (err = -71) [ 234.523412][ T5933] usb 6-1: USB disconnect, device number 4 [ 234.531692][ T5955] usb 6-1-port1: cannot reset (err = -71) [ 234.540067][ T5955] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad? [ 234.550006][ T5955] usb 6-1-port1: attempt power cycle [ 234.610465][ T2981] hsr_slave_0: left promiscuous mode [ 234.616918][ T2981] hsr_slave_1: left promiscuous mode [ 234.623828][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.637373][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.648146][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.656822][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.714895][ T24] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 234.749593][ T2981] veth1_macvtap: left promiscuous mode [ 234.756295][ T2981] veth0_macvtap: left promiscuous mode [ 234.781941][ T2981] veth1_vlan: left promiscuous mode [ 234.789242][ T2981] veth0_vlan: left promiscuous mode [ 234.870357][ T5880] Bluetooth: hci4: command tx timeout [ 234.979536][ T5977] savu 0003:1E7D:2D5A.0010: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 235.177396][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 235.374654][ T5954] usb 2-1: config 0 has no interfaces? [ 235.399516][ T5954] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 235.427525][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.435596][ T5954] usb 2-1: Product: syz [ 235.450369][ T5954] usb 2-1: Manufacturer: syz [ 235.466862][ T5954] usb 2-1: SerialNumber: syz [ 235.506131][ T5954] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.533148][ T5954] r8152-cfgselector 2-1: config 0 descriptor?? [ 235.818702][ T5933] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 235.836828][ T5954] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 235.977494][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 235.986912][ T5933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.996505][ T5933] usb 6-1: config 0 has no interface number 0 [ 236.002940][ T5933] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.003469][ T2981] team0 (unregistering): Port device team_slave_1 removed [ 236.015788][ C1] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 236.032957][ T5933] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.039720][ T5977] usb 4-1: USB disconnect, device number 12 [ 236.056705][ T5933] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 236.076523][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.099275][ T5933] usb 6-1: config 0 descriptor?? [ 236.145364][ T2981] team0 (unregistering): Port device team_slave_0 removed [ 236.739585][ T5933] input: HID 28bd:0094 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.0011/input/input23 [ 236.777078][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.800572][ T5853] usb 3-1: USB disconnect, device number 16 [ 236.856996][ T5933] uclogic 0003:28BD:0094.0011: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 236.944581][ T5933] usb 6-1: USB disconnect, device number 9 [ 236.957542][ T5880] Bluetooth: hci4: command tx timeout [ 237.116060][ T8660] fido_id[8660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 237.508738][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 238.200828][ T30] audit: type=1326 audit(1758842340.718:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167012af79 code=0x7ffc0000 [ 238.296403][ T30] audit: type=1326 audit(1758842340.748:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167012af79 code=0x7ffc0000 [ 238.354459][ T30] audit: type=1326 audit(1758842340.748:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 238.382647][ T30] audit: type=1326 audit(1758842340.748:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 238.525805][ T30] audit: type=1326 audit(1758842340.748:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 238.569721][ T30] audit: type=1326 audit(1758842340.748:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167012af79 code=0x7ffc0000 [ 238.741494][ T30] audit: type=1326 audit(1758842340.748:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 238.814614][ T30] audit: type=1326 audit(1758842340.748:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167012af79 code=0x7ffc0000 [ 238.877939][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 238.901318][ T30] audit: type=1326 audit(1758842340.748:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167012af79 code=0x7ffc0000 [ 239.003504][ T30] audit: type=1326 audit(1758842340.748:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167018eec9 code=0x7ffc0000 [ 239.041506][ T5880] Bluetooth: hci4: command tx timeout [ 239.344193][ T8713] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 239.410133][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.421236][ T2981] IPVS: stop unused estimator thread 0... [ 239.428763][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.438277][ T8606] bridge_slave_0: entered allmulticast mode [ 239.478800][ T8606] bridge_slave_0: entered promiscuous mode [ 239.490527][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.517481][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.563660][ T8606] bridge_slave_1: entered allmulticast mode [ 239.609448][ T8606] bridge_slave_1: entered promiscuous mode [ 239.867111][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.915890][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.234555][ T8606] team0: Port device team_slave_0 added [ 240.296124][ T8606] team0: Port device team_slave_1 added [ 240.695632][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.704586][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.797317][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.014404][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.052175][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.109060][ T5880] Bluetooth: hci4: command tx timeout [ 241.146209][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.265015][ T8606] hsr_slave_0: entered promiscuous mode [ 241.278980][ T8606] hsr_slave_1: entered promiscuous mode [ 241.293322][ T8606] debugfs: 'hsr0' already exists in 'hsr' [ 241.311002][ T8606] Cannot create hsr debugfs directory [ 241.407485][ T8768] capability: warning: `syz.2.1060' uses 32-bit capabilities (legacy support in use) [ 242.575718][ T8606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 242.732224][ T8606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.814740][ T8606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.873753][ T8606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.230682][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.305612][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.405309][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.412572][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.522271][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.529541][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.661990][ T8822] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.152229][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.454313][ T8606] veth0_vlan: entered promiscuous mode [ 244.540814][ T8606] veth1_vlan: entered promiscuous mode [ 244.704450][ T8606] veth0_macvtap: entered promiscuous mode [ 244.744877][ T8606] veth1_macvtap: entered promiscuous mode [ 244.794570][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.863398][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.917245][ T3005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.945068][ T2981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.980594][ T2981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.012573][ T2981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.252526][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.278749][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.366046][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.393595][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.706610][ T8866] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.999'. [ 246.058379][ T8879] @: renamed from vlan0 (while UP) [ 246.319262][ T8885] netlink: 'syz.5.1093': attribute type 9 has an invalid length. [ 246.354430][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 246.439905][ T8885] netlink: 'syz.5.1093': attribute type 9 has an invalid length. [ 246.450486][ T205] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.474068][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 246.479270][ T205] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.515321][ T205] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.540354][ T205] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.607411][ T5933] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 246.777482][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 246.811311][ T5933] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.845601][ T5933] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.884971][ T5933] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.923364][ T5933] usb 3-1: config 1 interface 0 has no altsetting 0 [ 246.941756][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.961223][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.979979][ T5933] usb 3-1: Product: syz [ 246.991202][ T5933] usb 3-1: Manufacturer: syz [ 247.001564][ T5933] usb 3-1: SerialNumber: syz [ 247.117543][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 247.240015][ T5933] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 247.287512][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 247.315166][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.365906][ T55] usb 6-1: config 0 has no interfaces? [ 247.369998][ T8910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.377340][ T55] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 247.412129][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.438442][ T55] usb 6-1: config 0 descriptor?? [ 247.579959][ T8889] usblp0:failed reading printer status (-32) [ 247.611296][ T55] usb 3-1: USB disconnect, device number 17 [ 247.654528][ T55] usblp0: removed [ 247.694001][ T5955] usb 6-1: USB disconnect, device number 10 [ 247.764305][ T8923] [ 247.766701][ T8923] ===================================================== [ 247.773659][ T8923] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 247.781179][ T8923] syzkaller #0 Not tainted [ 247.785619][ T8923] ----------------------------------------------------- [ 247.792567][ T8923] syz.3.1109/8923 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 247.800237][ T8923] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 247.802089][ T8925] input: syz1 as /devices/virtual/input/input24 [ 247.808988][ T8923] [ 247.808988][ T8923] and this task is already holding: [ 247.809000][ T8923] ffff888027e8c920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 247.831331][ T8923] which would create a new lock dependency: [ 247.837221][ T8923] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 247.844827][ T8923] [ 247.844827][ T8923] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 247.854288][ T8923] (&dev->event_lock#2){..-.}-{3:3} [ 247.854331][ T8923] [ 247.854331][ T8923] ... which became SOFTIRQ-irq-safe at: [ 247.867245][ T8923] lock_acquire+0x120/0x360 [ 247.871905][ T8923] _raw_spin_lock_irqsave+0xa7/0xf0 [ 247.877245][ T8923] input_event+0x76/0xe0 [ 247.881593][ T8923] xpad360_process_packet+0x1fe/0xdd0 [ 247.887076][ T8923] xpad_irq_in+0x1583/0x2590 [ 247.891793][ T8923] __usb_hcd_giveback_urb+0x376/0x540 [ 247.897258][ T8923] dummy_timer+0x862/0x4550 [ 247.901853][ T8923] __hrtimer_run_queues+0x529/0xc60 [ 247.907141][ T8923] hrtimer_run_softirq+0x187/0x2b0 [ 247.912343][ T8923] handle_softirqs+0x283/0x870 [ 247.917197][ T8923] __irq_exit_rcu+0xca/0x1f0 [ 247.921892][ T8923] irq_exit_rcu+0x9/0x30 [ 247.926226][ T8923] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 247.931977][ T8923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.938046][ T8923] _raw_spin_unlock_irq+0x29/0x50 [ 247.943153][ T8923] process_scheduled_works+0x8ce/0x17b0 [ 247.948790][ T8923] worker_thread+0x8a0/0xda0 [ 247.953467][ T8923] kthread+0x70e/0x8a0 [ 247.957630][ T8923] ret_from_fork+0x439/0x7d0 [ 247.962321][ T8923] ret_from_fork_asm+0x1a/0x30 [ 247.967304][ T8923] [ 247.967304][ T8923] to a SOFTIRQ-irq-unsafe lock: [ 247.974338][ T8923] (tasklist_lock){.+.+}-{3:3} [ 247.974371][ T8923] [ 247.974371][ T8923] ... which became SOFTIRQ-irq-unsafe at: [ 247.987009][ T8923] ... [ 247.987020][ T8923] lock_acquire+0x120/0x360 [ 247.994211][ T8923] _raw_read_lock+0x36/0x50 [ 247.998850][ T8923] __do_wait+0xde/0x740 [ 248.003108][ T8923] do_wait+0x1f8/0x520 [ 248.007275][ T8923] kernel_wait+0xab/0x170 [ 248.011696][ T8923] call_usermodehelper_exec_work+0xbe/0x230 [ 248.017686][ T8923] process_scheduled_works+0xae1/0x17b0 [ 248.023324][ T8923] worker_thread+0x8a0/0xda0 [ 248.027998][ T8923] kthread+0x70e/0x8a0 [ 248.032159][ T8923] ret_from_fork+0x439/0x7d0 [ 248.036837][ T8923] ret_from_fork_asm+0x1a/0x30 [ 248.041781][ T8923] [ 248.041781][ T8923] other info that might help us debug this: [ 248.041781][ T8923] [ 248.052092][ T8923] Chain exists of: [ 248.052092][ T8923] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 248.052092][ T8923] [ 248.065201][ T8923] Possible interrupt unsafe locking scenario: [ 248.065201][ T8923] [ 248.073541][ T8923] CPU0 CPU1 [ 248.078912][ T8923] ---- ---- [ 248.084275][ T8923] lock(tasklist_lock); [ 248.088525][ T8923] local_irq_disable(); [ 248.095280][ T8923] lock(&dev->event_lock#2); [ 248.102492][ T8923] lock(&f_owner->lock); [ 248.109345][ T8923] [ 248.112805][ T8923] lock(&dev->event_lock#2); [ 248.117666][ T8923] [ 248.117666][ T8923] *** DEADLOCK *** [ 248.117666][ T8923] [ 248.125822][ T8923] 2 locks held by syz.3.1109/8923: [ 248.130941][ T8923] #0: ffff8880312cfdc8 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 248.139499][ T8923] #1: ffff888027e8c920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 248.148667][ T8923] [ 248.148667][ T8923] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 248.159078][ T8923] -> (&dev->event_lock#2){..-.}-{3:3} { [ 248.165112][ T8923] IN-SOFTIRQ-W at: [ 248.169454][ T8923] lock_acquire+0x120/0x360 [ 248.176151][ T8923] _raw_spin_lock_irqsave+0xa7/0xf0 [ 248.183548][ T8923] input_event+0x76/0xe0 [ 248.190064][ T8923] xpad360_process_packet+0x1fe/0xdd0 [ 248.197614][ T8923] xpad_irq_in+0x1583/0x2590 [ 248.204386][ T8923] __usb_hcd_giveback_urb+0x376/0x540 [ 248.211928][ T8923] dummy_timer+0x862/0x4550 [ 248.218604][ T8923] __hrtimer_run_queues+0x529/0xc60 [ 248.225975][ T8923] hrtimer_run_softirq+0x187/0x2b0 [ 248.233277][ T8923] handle_softirqs+0x283/0x870 [ 248.240303][ T8923] __irq_exit_rcu+0xca/0x1f0 [ 248.247068][ T8923] irq_exit_rcu+0x9/0x30 [ 248.253483][ T8923] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.261301][ T8923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.269543][ T8923] _raw_spin_unlock_irq+0x29/0x50 [ 248.276827][ T8923] process_scheduled_works+0x8ce/0x17b0 [ 248.284554][ T8923] worker_thread+0x8a0/0xda0 [ 248.291324][ T8923] kthread+0x70e/0x8a0 [ 248.297575][ T8923] ret_from_fork+0x439/0x7d0 [ 248.304336][ T8923] ret_from_fork_asm+0x1a/0x30 [ 248.311288][ T8923] INITIAL USE at: [ 248.315463][ T8923] lock_acquire+0x120/0x360 [ 248.322086][ T8923] _raw_spin_lock_irqsave+0xa7/0xf0 [ 248.329407][ T8923] input_inject_event+0xa5/0x340 [ 248.336447][ T8923] kbd_led_trigger_activate+0xbc/0x100 [ 248.344014][ T8923] led_trigger_set+0x52d/0x950 [ 248.350870][ T8923] led_trigger_set_default+0x260/0x2a0 [ 248.358421][ T8923] led_classdev_register_ext+0x73d/0x930 [ 248.366141][ T8923] input_leds_connect+0x517/0x790 [ 248.373268][ T8923] input_register_device+0xcfd/0x1140 [ 248.380750][ T8923] atkbd_connect+0x72e/0xa00 [ 248.387437][ T8923] serio_driver_probe+0x82/0xd0 [ 248.394375][ T8923] really_probe+0x26a/0x9e0 [ 248.400980][ T8923] __driver_probe_device+0x18c/0x2f0 [ 248.408443][ T8923] driver_probe_device+0x4f/0x430 [ 248.415560][ T8923] __driver_attach+0x452/0x700 [ 248.422417][ T8923] bus_for_each_dev+0x230/0x2b0 [ 248.429359][ T8923] serio_handle_event+0x1f9/0x8d0 [ 248.436476][ T8923] process_scheduled_works+0xae1/0x17b0 [ 248.444127][ T8923] worker_thread+0x8a0/0xda0 [ 248.450819][ T8923] kthread+0x70e/0x8a0 [ 248.456982][ T8923] ret_from_fork+0x439/0x7d0 [ 248.463663][ T8923] ret_from_fork_asm+0x1a/0x30 [ 248.470525][ T8923] } [ 248.473295][ T8923] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 248.482596][ T8923] -> (&client->buffer_lock){....}-{3:3} { [ 248.488521][ T8923] INITIAL USE at: [ 248.492588][ T8923] lock_acquire+0x120/0x360 [ 248.499015][ T8923] _raw_spin_lock+0x2e/0x40 [ 248.505438][ T8923] evdev_pass_values+0xb9/0xbd0 [ 248.512207][ T8923] evdev_events+0x1e6/0x340 [ 248.518624][ T8923] input_pass_values+0x285/0x890 [ 248.525478][ T8923] input_event_dispose+0x330/0x6b0 [ 248.532508][ T8923] input_inject_event+0x1dd/0x340 [ 248.539452][ T8923] evdev_write+0x2fc/0x480 [ 248.545787][ T8923] vfs_write+0x27e/0xb30 [ 248.551946][ T8923] ksys_write+0x145/0x250 [ 248.558187][ T8923] do_syscall_64+0xfa/0x3b0 [ 248.564604][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.572414][ T8923] } [ 248.575096][ T8923] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 248.583429][ T8923] ... acquired at: [ 248.587412][ T8923] lock_acquire+0x120/0x360 [ 248.592126][ T8923] _raw_spin_lock+0x2e/0x40 [ 248.596811][ T8923] evdev_pass_values+0xb9/0xbd0 [ 248.601867][ T8923] evdev_events+0x1e6/0x340 [ 248.606547][ T8923] input_pass_values+0x285/0x890 [ 248.611656][ T8923] input_event_dispose+0x330/0x6b0 [ 248.616943][ T8923] input_inject_event+0x1dd/0x340 [ 248.622148][ T8923] evdev_write+0x2fc/0x480 [ 248.626771][ T8923] vfs_write+0x27e/0xb30 [ 248.631199][ T8923] ksys_write+0x145/0x250 [ 248.635701][ T8923] do_syscall_64+0xfa/0x3b0 [ 248.640648][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.646912][ T8923] [ 248.649234][ T8923] -> (&new->fa_lock){....}-{3:3} { [ 248.654454][ T8923] INITIAL USE at: [ 248.658435][ T8923] lock_acquire+0x120/0x360 [ 248.664693][ T8923] _raw_write_lock_irq+0xa2/0xf0 [ 248.671379][ T8923] fasync_remove_entry+0xf1/0x1c0 [ 248.678150][ T8923] lease_modify+0x1ca/0x3c0 [ 248.684400][ T8923] locks_remove_file+0x4bf/0xea0 [ 248.691097][ T8923] __fput+0x3ab/0xa70 [ 248.696826][ T8923] task_work_run+0x1d1/0x260 [ 248.703171][ T8923] exit_to_user_mode_loop+0xec/0x110 [ 248.710215][ T8923] do_syscall_64+0x2bd/0x3b0 [ 248.716544][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.724172][ T8923] INITIAL READ USE at: [ 248.728590][ T8923] lock_acquire+0x120/0x360 [ 248.735356][ T8923] _raw_read_lock_irqsave+0xaf/0x100 [ 248.742816][ T8923] kill_fasync+0x199/0x4d0 [ 248.749415][ T8923] lease_break_callback+0x26/0x30 [ 248.756626][ T8923] __break_lease+0x6a5/0x1620 [ 248.763480][ T8923] do_dentry_open+0x8b7/0x13f0 [ 248.770442][ T8923] vfs_open+0x3b/0x340 [ 248.776680][ T8923] path_openat+0x2ee5/0x3830 [ 248.783454][ T8923] do_filp_open+0x1fa/0x410 [ 248.790138][ T8923] do_sys_openat2+0x121/0x1c0 [ 248.796991][ T8923] __x64_sys_open+0x11e/0x150 [ 248.803841][ T8923] do_syscall_64+0xfa/0x3b0 [ 248.810519][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.818581][ T8923] } [ 248.821162][ T8923] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 248.829944][ T8923] ... acquired at: [ 248.833843][ T8923] lock_acquire+0x120/0x360 [ 248.838538][ T8923] _raw_read_lock_irqsave+0xaf/0x100 [ 248.843999][ T8923] kill_fasync+0x199/0x4d0 [ 248.848606][ T8923] evdev_pass_values+0x627/0xbd0 [ 248.853721][ T8923] evdev_events+0x1e6/0x340 [ 248.858400][ T8923] input_pass_values+0x285/0x890 [ 248.863534][ T8923] input_event_dispose+0x330/0x6b0 [ 248.868828][ T8923] input_inject_event+0x1dd/0x340 [ 248.874039][ T8923] evdev_write+0x2fc/0x480 [ 248.878633][ T8923] vfs_write+0x27e/0xb30 [ 248.883246][ T8923] ksys_write+0x145/0x250 [ 248.887756][ T8923] do_syscall_64+0xfa/0x3b0 [ 248.892449][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.898513][ T8923] [ 248.900854][ T8923] -> (&f_owner->lock){....}-{3:3} { [ 248.906086][ T8923] INITIAL USE at: [ 248.909980][ T8923] lock_acquire+0x120/0x360 [ 248.916055][ T8923] _raw_write_lock_irq+0xa2/0xf0 [ 248.922645][ T8923] __f_setown+0x67/0x370 [ 248.928454][ T8923] generic_setlease+0xd5d/0x1240 [ 248.934965][ T8923] fcntl_setlease+0x3a2/0x4c0 [ 248.941209][ T8923] do_fcntl+0x6a9/0x1910 [ 248.947016][ T8923] __se_sys_fcntl+0xc8/0x150 [ 248.953173][ T8923] do_syscall_64+0xfa/0x3b0 [ 248.959244][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.966789][ T8923] INITIAL READ USE at: [ 248.971125][ T8923] lock_acquire+0x120/0x360 [ 248.977648][ T8923] _raw_read_lock_irqsave+0xaf/0x100 [ 248.984951][ T8923] send_sigio+0x38/0x370 [ 248.991196][ T8923] kill_fasync+0x24d/0x4d0 [ 248.997622][ T8923] lease_break_callback+0x26/0x30 [ 249.004666][ T8923] __break_lease+0x6a5/0x1620 [ 249.011346][ T8923] do_dentry_open+0x8b7/0x13f0 [ 249.018116][ T8923] vfs_open+0x3b/0x340 [ 249.024181][ T8923] path_openat+0x2ee5/0x3830 [ 249.030776][ T8923] do_filp_open+0x1fa/0x410 [ 249.037369][ T8923] do_sys_openat2+0x121/0x1c0 [ 249.044048][ T8923] __x64_sys_open+0x11e/0x150 [ 249.050728][ T8923] do_syscall_64+0xfa/0x3b0 [ 249.057232][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.065127][ T8923] } [ 249.067712][ T8923] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 249.076582][ T8923] ... acquired at: [ 249.080379][ T8923] lock_acquire+0x120/0x360 [ 249.085073][ T8923] _raw_read_lock_irqsave+0xaf/0x100 [ 249.090532][ T8923] send_sigio+0x38/0x370 [ 249.094951][ T8923] kill_fasync+0x24d/0x4d0 [ 249.099543][ T8923] lease_break_callback+0x26/0x30 [ 249.104755][ T8923] __break_lease+0x6a5/0x1620 [ 249.109608][ T8923] do_dentry_open+0x8b7/0x13f0 [ 249.114544][ T8923] vfs_open+0x3b/0x340 [ 249.118785][ T8923] path_openat+0x2ee5/0x3830 [ 249.123548][ T8923] do_filp_open+0x1fa/0x410 [ 249.128230][ T8923] do_sys_openat2+0x121/0x1c0 [ 249.133083][ T8923] __x64_sys_open+0x11e/0x150 [ 249.137931][ T8923] do_syscall_64+0xfa/0x3b0 [ 249.142608][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.148676][ T8923] [ 249.150998][ T8923] [ 249.150998][ T8923] the dependencies between the lock to be acquired [ 249.151007][ T8923] and SOFTIRQ-irq-unsafe lock: [ 249.164519][ T8923] -> (tasklist_lock){.+.+}-{3:3} { [ 249.169656][ T8923] HARDIRQ-ON-R at: [ 249.173651][ T8923] lock_acquire+0x120/0x360 [ 249.179823][ T8923] _raw_read_lock+0x36/0x50 [ 249.185977][ T8923] __do_wait+0xde/0x740 [ 249.191790][ T8923] do_wait+0x1f8/0x520 [ 249.197530][ T8923] kernel_wait+0xab/0x170 [ 249.203522][ T8923] call_usermodehelper_exec_work+0xbe/0x230 [ 249.211167][ T8923] process_scheduled_works+0xae1/0x17b0 [ 249.218392][ T8923] worker_thread+0x8a0/0xda0 [ 249.224646][ T8923] kthread+0x70e/0x8a0 [ 249.230384][ T8923] ret_from_fork+0x439/0x7d0 [ 249.236632][ T8923] ret_from_fork_asm+0x1a/0x30 [ 249.243053][ T8923] SOFTIRQ-ON-R at: [ 249.247034][ T8923] lock_acquire+0x120/0x360 [ 249.253214][ T8923] _raw_read_lock+0x36/0x50 [ 249.259400][ T8923] __do_wait+0xde/0x740 [ 249.265244][ T8923] do_wait+0x1f8/0x520 [ 249.270970][ T8923] kernel_wait+0xab/0x170 [ 249.277150][ T8923] call_usermodehelper_exec_work+0xbe/0x230 [ 249.284720][ T8923] process_scheduled_works+0xae1/0x17b0 [ 249.291924][ T8923] worker_thread+0x8a0/0xda0 [ 249.298173][ T8923] kthread+0x70e/0x8a0 [ 249.303902][ T8923] ret_from_fork+0x439/0x7d0 [ 249.310233][ T8923] ret_from_fork_asm+0x1a/0x30 [ 249.316745][ T8923] INITIAL USE at: [ 249.320678][ T8923] lock_acquire+0x120/0x360 [ 249.326756][ T8923] _raw_write_lock_irq+0xa2/0xf0 [ 249.333262][ T8923] copy_process+0x224f/0x3c00 [ 249.339526][ T8923] kernel_clone+0x21e/0x840 [ 249.345609][ T8923] user_mode_thread+0xdd/0x140 [ 249.351942][ T8923] rest_init+0x23/0x300 [ 249.357674][ T8923] start_kernel+0x3a9/0x410 [ 249.363755][ T8923] x86_64_start_reservations+0x24/0x30 [ 249.370791][ T8923] x86_64_start_kernel+0x143/0x1c0 [ 249.377478][ T8923] common_startup_64+0x13e/0x147 [ 249.384005][ T8923] INITIAL READ USE at: [ 249.388339][ T8923] lock_acquire+0x120/0x360 [ 249.394851][ T8923] _raw_read_lock+0x36/0x50 [ 249.401384][ T8923] __do_wait+0xde/0x740 [ 249.407551][ T8923] do_wait+0x1f8/0x520 [ 249.413641][ T8923] kernel_wait+0xab/0x170 [ 249.419996][ T8923] call_usermodehelper_exec_work+0xbe/0x230 [ 249.427899][ T8923] process_scheduled_works+0xae1/0x17b0 [ 249.435439][ T8923] worker_thread+0x8a0/0xda0 [ 249.442033][ T8923] kthread+0x70e/0x8a0 [ 249.448121][ T8923] ret_from_fork+0x439/0x7d0 [ 249.454710][ T8923] ret_from_fork_asm+0x1a/0x30 [ 249.461570][ T8923] } [ 249.464074][ T8923] ... key at: [] tasklist_lock+0x18/0x40 [ 249.471828][ T8923] ... acquired at: [ 249.475631][ T8923] lock_acquire+0x120/0x360 [ 249.480338][ T8923] _raw_read_lock+0x36/0x50 [ 249.485023][ T8923] send_sigurg+0x12b/0x420 [ 249.489622][ T8923] sk_send_sigurg+0x6c/0x2e0 [ 249.494432][ T8923] queue_oob+0x420/0x4f0 [ 249.498858][ T8923] unix_stream_sendmsg+0xc3f/0xdf0 [ 249.504156][ T8923] __sock_sendmsg+0x219/0x270 [ 249.509022][ T8923] ____sys_sendmsg+0x52d/0x830 [ 249.513978][ T8923] ___sys_sendmsg+0x21f/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.518832][ T8923] __sys_sendmmsg+0x227/0x430 [ 249.523692][ T8923] __x64_sys_sendmmsg+0xa0/0xc0 [ 249.528726][ T8923] do_syscall_64+0xfa/0x3b0 [ 249.533414][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.539500][ T8923] [ 249.541821][ T8923] [ 249.541821][ T8923] stack backtrace: [ 249.547762][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.3.1109 Not tainted syzkaller #0 PREEMPT(full) [ 249.547784][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.547815][ T8923] Call Trace: [ 249.547826][ T8923] [ 249.547836][ T8923] dump_stack_lvl+0x189/0x250 [ 249.547860][ T8923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.547885][ T8923] ? __pfx__printk+0x10/0x10 [ 249.547915][ T8923] validate_chain+0x1f05/0x2140 [ 249.547943][ T8923] __lock_acquire+0xab9/0xd20 [ 249.547971][ T8923] ? send_sigurg+0x12b/0x420 [ 249.547990][ T8923] lock_acquire+0x120/0x360 [ 249.548034][ T8923] ? send_sigurg+0x12b/0x420 [ 249.548059][ T8923] ? _raw_read_lock_irqsave+0xbb/0x100 [ 249.548081][ T8923] _raw_read_lock+0x36/0x50 [ 249.548096][ T8923] ? send_sigurg+0x12b/0x420 [ 249.548114][ T8923] send_sigurg+0x12b/0x420 [ 249.548135][ T8923] sk_send_sigurg+0x6c/0x2e0 [ 249.548164][ T8923] queue_oob+0x420/0x4f0 [ 249.548193][ T8923] ? __pfx_queue_oob+0x10/0x10 [ 249.548224][ T8923] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 249.548250][ T8923] unix_stream_sendmsg+0xc3f/0xdf0 [ 249.548278][ T8923] ? rcu_is_watching+0x15/0xb0 [ 249.548298][ T8923] ? __schedule+0x17ae/0x4cc0 [ 249.548316][ T8923] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 249.548349][ T8923] ? aa_sock_msg_perm+0xda/0x1d0 [ 249.548369][ T8923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.548387][ T8923] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 249.548414][ T8923] __sock_sendmsg+0x219/0x270 [ 249.548443][ T8923] ____sys_sendmsg+0x52d/0x830 [ 249.548467][ T8923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.548493][ T8923] ? import_iovec+0x74/0xa0 [ 249.548519][ T8923] ___sys_sendmsg+0x21f/0x2a0 [ 249.548542][ T8923] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.548578][ T8923] ? __fget_files+0x2a/0x420 [ 249.548593][ T8923] ? __fget_files+0x3a0/0x420 [ 249.548611][ T8923] __sys_sendmmsg+0x227/0x430 [ 249.548635][ T8923] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.548656][ T8923] ? do_futex+0x333/0x420 [ 249.548690][ T8923] ? rcu_is_watching+0x15/0xb0 [ 249.548710][ T8923] __x64_sys_sendmmsg+0xa0/0xc0 [ 249.548733][ T8923] do_syscall_64+0xfa/0x3b0 [ 249.548752][ T8923] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.548770][ T8923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.548787][ T8923] ? clear_bhb_loop+0x60/0xb0 [ 249.548806][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.548828][ T8923] RIP: 0033:0x7f01fc38eec9 [ 249.548854][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.548870][ T8923] RSP: 002b:00007f01fd143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.548890][ T8923] RAX: ffffffffffffffda RBX: 00007f01fc5e5fa0 RCX: 00007f01fc38eec9 [ 249.548903][ T8923] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 249.548914][ T8923] RBP: 00007f01fc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.548925][ T8923] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 249.548936][ T8923] R13: 00007f01fc5e6038 R14: 00007f01fc5e5fa0 R15: 00007f01fc70fa28 [ 249.548956][ T8923] [ 249.562454][ T5954] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.568401][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.863921][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.952214][ T5954] usb 7-1: Using ep0 maxpacket: 16 [ 250.621261][ T5954] usb 7-1: device descriptor read/all, error -71 [ 250.651814][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.765255][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.824156][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.903941][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.994166][ T68] bridge_slave_1: left allmulticast mode [ 251.000005][ T68] bridge_slave_1: left promiscuous mode [ 251.005684][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.014789][ T68] bridge_slave_0: left allmulticast mode [ 251.021325][ T68] bridge_slave_0: left promiscuous mode [ 251.027033][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.124994][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.136080][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.146974][ T68] bond0 (unregistering): Released all slaves [ 251.373641][ T68] hsr_slave_0: left promiscuous mode [ 251.382425][ T68] hsr_slave_1: left promiscuous mode [ 251.388648][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.396065][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.407195][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.414889][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.432112][ T68] veth1_macvtap: left promiscuous mode [ 251.449216][ T68] veth0_macvtap: left promiscuous mode [ 251.457653][ T68] veth1_vlan: left promiscuous mode [ 251.470622][ T68] veth0_vlan: left promiscuous mode [ 251.635451][ T68] team0 (unregistering): Port device team_slave_1 removed [ 251.659390][ T68] team0 (unregistering): Port device team_slave_0 removed [ 252.026371][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.042966][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.084788][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.095566][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.133233][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.145199][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.210851][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.222670][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.358198][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.371556][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.454173][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.466686][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.523250][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.534220][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.582685][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.594281][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.696497][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.755302][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.823741][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.859992][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.942237][ T68] bridge_slave_1: left allmulticast mode [ 252.949957][ T68] bridge_slave_1: left promiscuous mode [ 252.956625][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.968138][ T68] bridge_slave_0: left allmulticast mode [ 252.973825][ T68] bridge_slave_0: left promiscuous mode [ 252.979985][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.990485][ T68] bridge_slave_1: left allmulticast mode [ 252.996160][ T68] bridge_slave_1: left promiscuous mode [ 253.002837][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.015004][ T68] bridge_slave_0: left allmulticast mode [ 253.021479][ T68] bridge_slave_0: left promiscuous mode [ 253.027171][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.040060][ T68] bridge_slave_1: left allmulticast mode [ 253.045756][ T68] bridge_slave_1: left promiscuous mode [ 253.052086][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.065332][ T68] bridge_slave_0: left allmulticast mode [ 253.074251][ T68] bridge_slave_0: left promiscuous mode [ 253.080071][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.303912][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.314148][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.323799][ T68] bond0 (unregistering): Released all slaves [ 253.393975][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.405341][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.415045][ T68] bond0 (unregistering): Released all slaves [ 253.501536][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.511596][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.522289][ T68] bond0 (unregistering): Released all slaves [ 254.043447][ T68] hsr_slave_0: left promiscuous mode [ 254.050066][ T68] hsr_slave_1: left promiscuous mode [ 254.055956][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.069226][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.077179][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.086267][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.099520][ T68] hsr_slave_0: left promiscuous mode [ 254.105540][ T68] hsr_slave_1: left promiscuous mode [ 254.112021][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.119787][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.129528][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.137032][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.151271][ T68] hsr_slave_0: left promiscuous mode [ 254.157140][ T68] hsr_slave_1: left promiscuous mode [ 254.164967][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.173071][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.182033][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.190670][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.211620][ T68] veth1_macvtap: left promiscuous mode [ 254.217171][ T68] veth0_macvtap: left allmulticast mode [ 254.224088][ T68] veth0_macvtap: left promiscuous mode [ 254.230349][ T68] veth1_vlan: left promiscuous mode [ 254.235661][ T68] veth0_vlan: left promiscuous mode [ 254.244448][ T68] veth1_macvtap: left promiscuous mode [ 254.250984][ T68] veth0_macvtap: left promiscuous mode [ 254.256599][ T68] veth1_vlan: left promiscuous mode [ 254.263976][ T68] veth0_vlan: left promiscuous mode [ 254.271303][ T68] veth1_macvtap: left promiscuous mode [ 254.276851][ T68] veth0_macvtap: left promiscuous mode [ 254.283983][ T68] veth1_vlan: left promiscuous mode [ 254.289696][ T68] veth0_vlan: left promiscuous mode [ 254.532431][ T68] team0 (unregistering): Port device team_slave_1 removed [ 254.558538][ T68] team0 (unregistering): Port device team_slave_0 removed [ 254.742127][ T68] team0 (unregistering): Port device team_slave_1 removed [ 254.765315][ T68] team0 (unregistering): Port device team_slave_0 removed [ 254.946353][ T68] team0 (unregistering): Port device team_slave_1 removed [ 254.971110][ T68] team0 (unregistering): Port device team_slave_0 removed