last executing test programs: 8.642261818s ago: executing program 2 (id=8444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newchain={0x34, 0x64, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe}, {0xffe0, 0x4}, {0x7, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="52010000b1bd2f087d0403508c2f01"], 0x0) close(0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x3}, {0x20}, {0x28, 0x0, 0x81, 0x3}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0x1, 0x5, 0xffffffff}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000002530b55496288535c9cdf2d5f78952ace9f88010499ee77fdfe081a0fe6bfaad33a715720db00e91c5e2785423e03f9c9dc57205b796561b9ea872a3b72e1f125b0f8dc8a80b98224ff6d2a70fcd824d540123bcebe28e2f7ece2401a9b3b512a8c7b76a14b948233b00a315efc9b90c44d1c25e02da69fcc0152316ba5aeea8bf6edf47b16b746b"], 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000bc0)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000600)={r8, 0xff, 0x8, 0x1}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x136, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x3, 0xb6, 0x6, 0x8, 0x81}, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000008000710b24433c441c217406fefb989c7e3de69372238ea74baf4d5706a4288c34c676df5f16e8cd6ce9abb2c398e18b41684892bcae28c7e304a8217805f3168473654a9a7ce28a3a4a73c42418f530ed1516ac1acb859723ae5866ccd5d01e7138cd74ff6d908ea3938884ca1cd865d2c9aa06defed336bad8c23b0c34be767ce5ed04df3e2817732dec60adf26f7a88271b5c"], 0x1, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x427}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x13) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000a00)=0x1) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r10, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r11 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x2f) setsockopt$MRT_PIM(r10, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r9, r10, 0x4, r6}, 0x10) 5.41252269s ago: executing program 2 (id=8469): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xc8bb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'tunl0\x00', {}, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) listen(r1, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 5.204484333s ago: executing program 4 (id=8470): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) 5.099165535s ago: executing program 2 (id=8471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xb}, {0x5, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x4010004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.946651433s ago: executing program 4 (id=8472): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xfe}], 0x1, 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c9", 0x3c}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.870443494s ago: executing program 2 (id=8473): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 4.681078023s ago: executing program 2 (id=8475): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31861, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.548663407s ago: executing program 2 (id=8476): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$unix(0x1, 0x2, 0x0) preadv(r4, 0x0, 0x0, 0x1f1, 0x0) socket$inet(0x2, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r6, 0x400454cd, 0x337) 4.285446297s ago: executing program 4 (id=8478): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000) 4.188603537s ago: executing program 4 (id=8479): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.796347407s ago: executing program 0 (id=8484): syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x30d}, &(0x7f0000000340), &(0x7f0000000300)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10000, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)=' ', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.638636707s ago: executing program 0 (id=8486): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31861, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.268349452s ago: executing program 0 (id=8488): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xfe}], 0x1, 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c9", 0x3c}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.758014354s ago: executing program 0 (id=8491): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398add"], 0x1000f) 2.572598161s ago: executing program 0 (id=8492): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.862300386s ago: executing program 1 (id=8499): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) 1.709715751s ago: executing program 1 (id=8501): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x4e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xfe}], 0x1, 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d", 0x40}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.64178679s ago: executing program 0 (id=8502): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909", 0x1c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) getgid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f505cb103f00510000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 1.522458005s ago: executing program 3 (id=8504): socket$inet6(0xa, 0x800000000000002, 0x0) close(0xffffffffffffffff) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10, 0x400) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000001c0)={0x7, 'bond_slave_1\x00', {}, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x48, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) 1.417990167s ago: executing program 4 (id=8505): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000500)=""/131, 0x83) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0x5, [{{0x0, 0x4, 0x2a6, 0x100000000, 0x3, 0x0, {0x5, 0x10001, 0x3, 0x101, 0x80000001, 0xf483, 0x7, 0x99a, 0x8, 0x1000, 0x5, r2, r3, 0x4, 0x4}}, {0x6, 0x1, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) 1.304562071s ago: executing program 3 (id=8506): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x80000, 0x8000, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0x9, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x1, 0x0, 0x7, 0xfffffffc, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x4, 0x9, 0x8, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x103, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x5, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000009, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c0000000800000014"], 0x40}], 0x1}, 0x0) 1.303861981s ago: executing program 1 (id=8507): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}}, 0x28000) 1.233396288s ago: executing program 3 (id=8508): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 1.207800189s ago: executing program 4 (id=8509): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x7e2, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002400000000001190787f000001e000000100154e2000109078223d000000000000"], 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) 1.155203767s ago: executing program 1 (id=8510): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31861, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.063996693s ago: executing program 3 (id=8511): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 958.470181ms ago: executing program 1 (id=8512): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 868.944087ms ago: executing program 3 (id=8513): socket$inet(0x2, 0x3, 0xd) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r1], 0x38}}, 0x10) 811.978993ms ago: executing program 3 (id=8514): openat$audio(0xffffffffffffff9c, 0x0, 0x4fc401, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket(0xb, 0xa, 0x81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x81, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @time={0xd9c, 0x5}, {}, {}, @raw32}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000a00)) openat$nvram(0xffffffffffffff9c, 0x0, 0x20202, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=8515): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/150, 0x96, 0x0, &(0x7f0000000cc0)=""/4096, 0x1000}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0xe}) kernel console output (not intermixed with test programs): ng preconfigured BSSID 50:50:50:50:50:50 [ 1662.716671][T24232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.781853][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.797504][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.825834][T14090] usb 1-1: USB disconnect, device number 37 [ 1663.000814][T29199] fuse: Invalid rootmode [ 1663.269412][T29190] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1663.269603][T26350] Bluetooth: hci1: command tx timeout [ 1663.439516][T29190] usb 5-1: Using ep0 maxpacket: 32 [ 1663.451176][T29190] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.476765][T29190] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1663.502287][T29190] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.530943][T29190] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1663.580252][T29190] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1663.591772][T29190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.600850][T29190] usb 5-1: Product: syz [ 1663.605348][T29190] usb 5-1: Manufacturer: syz [ 1663.627216][T29190] usb 5-1: SerialNumber: syz [ 1663.674605][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1663.705472][T29190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input175 [ 1663.887505][T29190] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1663.906112][T29190] (id 0x00) [ 1664.061832][T29190] rc_core: IR keymap rc-imon-pad not found [ 1664.095926][T29190] Registered IR keymap rc-empty [ 1664.114911][T29190] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1664.167010][T29190] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1664.219029][T29190] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1664.270314][T29190] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input176 [ 1664.311491][T29190] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:63> initialized [ 1664.424994][T29190] usb 5-1: USB disconnect, device number 63 [ 1665.003965][T29227] snd_virmidi snd_virmidi.0: control 1:9:195: :53363 is already present [ 1665.177583][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1665.317809][T29239] fuse: Invalid rootmode [ 1666.527636][T24849] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1666.754252][T24849] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1666.783211][T24849] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1666.825208][T24849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1666.854976][T24849] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1666.900023][T24849] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1666.951349][T24849] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1666.961473][T24849] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1666.972969][T24849] usb 2-1: Product: syz [ 1666.980960][T24849] usb 2-1: Manufacturer: syz [ 1667.009194][T24849] cdc_wdm 2-1:1.0: skipping garbage [ 1667.026724][T24849] cdc_wdm 2-1:1.0: skipping garbage [ 1667.049482][T24849] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1667.065615][T24849] cdc_wdm 2-1:1.0: Unknown control protocol [ 1667.224379][T24849] usb 2-1: USB disconnect, device number 62 [ 1667.547566][T14090] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1667.707658][T14090] usb 4-1: Using ep0 maxpacket: 32 [ 1667.715000][T14090] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1667.754703][T14090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.806672][T14090] usb 4-1: config 0 descriptor?? [ 1667.860834][T14090] as10x_usb: device has been detected [ 1667.884267][T14090] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1667.932547][T14090] usb 4-1: DVB: registering adapter 5 frontend 0 (nBox DVB-T Dongle)... [ 1668.007172][T14090] as10x_usb: error during firmware upload part1 [ 1668.037361][T14090] Registered device nBox DVB-T Dongle [ 1668.052396][T29265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.087098][T29269] vlan2: left promiscuous mode [ 1668.103700][T29269] gretap0: left promiscuous mode [ 1668.103977][T29272] fuse: Invalid rootmode [ 1668.123468][T29265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.418529][T29276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1668.880045][T29294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1669.032298][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.039065][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.119220][ T10] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 1669.161759][ T10] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1669.302673][T24935] usb 4-1: USB disconnect, device number 62 [ 1669.348221][T24849] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1669.445265][T24935] Unregistered device nBox DVB-T Dongle [ 1669.463450][T24935] as10x_usb: device has been disconnected [ 1669.540188][T24849] usb 5-1: config 0 has no interfaces? [ 1669.613555][T24849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1669.638935][T24849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1669.664309][T24849] usb 5-1: SerialNumber: syz [ 1669.690196][T24849] usb 5-1: config 0 descriptor?? [ 1670.033123][T24849] usb 5-1: USB disconnect, device number 64 [ 1670.323292][T15782] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1670.648088][T14090] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1670.819592][T14090] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1670.847481][T14090] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1670.867666][T14090] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1670.876929][T14090] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1670.897550][T14090] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1670.947126][T29317] fuse: Bad value for 'rootmode' [ 1670.956512][T14090] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1670.993294][T14090] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1671.011905][T14090] usb 3-1: Product: syz [ 1671.016141][T14090] usb 3-1: Manufacturer: syz [ 1671.045040][T14090] cdc_wdm 3-1:1.0: skipping garbage [ 1671.057599][T14090] cdc_wdm 3-1:1.0: skipping garbage [ 1671.085986][T14090] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1671.103072][T14090] cdc_wdm 3-1:1.0: Unknown control protocol [ 1671.248060][T14090] usb 3-1: USB disconnect, device number 66 [ 1672.472683][T29336] netlink: 'syz.2.7305': attribute type 10 has an invalid length. [ 1673.721611][T29327] netlink: 'syz.0.7302': attribute type 2 has an invalid length. [ 1673.784506][T29336] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1673.806677][T29341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7306'. [ 1674.178217][T29353] fuse: Bad value for 'rootmode' [ 1674.440416][T29359] netlink: 'syz.4.7316': attribute type 2 has an invalid length. [ 1674.462525][T29372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1674.536523][T29372] vlan2: entered promiscuous mode [ 1674.542724][T29372] gretap0: entered promiscuous mode [ 1674.944150][T29394] fuse: Bad value for 'rootmode' [ 1675.057565][T24935] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1675.240894][T24935] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 1675.262311][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.279997][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.331216][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.347298][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.370214][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.393926][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.405133][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.405836][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1675.413440][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.438908][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1675.447988][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1675.468438][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1675.476610][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1675.526201][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.573334][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.624024][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.654685][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.682332][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.714292][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.747297][T24935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1675.772223][T24935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1675.805396][T24935] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 1675.821667][T24935] usb 5-1: New USB device strings: Mfr=0, Product=72, SerialNumber=179 [ 1675.839888][T24935] usb 5-1: Product: syz [ 1675.848637][T24935] usb 5-1: SerialNumber: syz [ 1675.872639][T24935] usb 5-1: config 0 descriptor?? [ 1676.133205][T29419] chnl_net:caif_netlink_parms(): no params data found [ 1676.243924][T16677] usb 5-1: USB disconnect, device number 65 [ 1676.254795][T29429] fuse: Unknown parameter 'use00000000000000000000' [ 1676.733556][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.749801][T29419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.762892][T29419] bridge_slave_0: entered allmulticast mode [ 1676.778501][T29419] bridge_slave_0: entered promiscuous mode [ 1676.868271][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.883125][T29419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.900020][T29419] bridge_slave_1: entered allmulticast mode [ 1676.922569][T29419] bridge_slave_1: entered promiscuous mode [ 1677.080836][T29419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.118778][T29419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.298432][T29419] team0: Port device team_slave_0 added [ 1677.324817][T29419] team0: Port device team_slave_1 added [ 1677.451662][T29419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.462462][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.491265][T29419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.508353][ T5840] Bluetooth: hci2: command tx timeout [ 1677.516783][T29419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.524294][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.553206][T29419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.637602][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1677.817574][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1677.824757][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.852558][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.878646][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1677.898686][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1677.907173][ T10] usb 1-1: Product: syz [ 1677.957730][ T10] usb 1-1: Manufacturer: syz [ 1677.997323][ T10] hub 1-1:4.0: USB hub found [ 1678.235915][ T10] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 1678.292188][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.305455][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.316271][ T1130] bond0 (unregistering): Released all slaves [ 1678.557265][ T1130] bond1 (unregistering): Released all slaves [ 1678.569751][ T43] usb 1-1: USB disconnect, device number 38 [ 1678.764515][T29419] hsr_slave_0: entered promiscuous mode [ 1678.787287][T29419] hsr_slave_1: entered promiscuous mode [ 1678.821056][T29419] debugfs: 'hsr0' already exists in 'hsr' [ 1678.837968][T29419] Cannot create hsr debugfs directory [ 1678.884797][T29466] bridge0: port 3(gretap0) entered blocking state [ 1678.896300][T29466] bridge0: port 3(gretap0) entered disabled state [ 1678.911467][T29466] gretap0: entered allmulticast mode [ 1678.919574][T29466] gretap0: entered promiscuous mode [ 1678.926194][T29466] bridge0: port 3(gretap0) entered blocking state [ 1678.933365][T29466] bridge0: port 3(gretap0) entered forwarding state [ 1678.987040][T29467] gretap0: left allmulticast mode [ 1679.005369][T29467] gretap0: left promiscuous mode [ 1679.027139][T29467] bridge0: port 3(gretap0) entered disabled state [ 1679.347980][ T5840] Bluetooth: hci4: command tx timeout [ 1679.440869][ T1130] hsr_slave_0: left promiscuous mode [ 1679.450836][ T1130] hsr_slave_1: left promiscuous mode [ 1679.457239][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.467027][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.596021][ T5840] Bluetooth: hci2: command tx timeout [ 1679.968375][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1680.162521][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.176484][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.193071][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.203230][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1680.211289][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1680.245112][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.286952][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 1680.302027][ T10] usb 3-1: config 0 descriptor?? [ 1680.366078][T29503] input: syz0 as /devices/virtual/input/input177 [ 1680.461101][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 1680.527608][T14090] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1680.717744][T14090] usb 2-1: Using ep0 maxpacket: 16 [ 1680.726684][T14090] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.741541][ T10] kye 0003:0458:5015.0078: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1680.758478][T14090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.770300][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.777058][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.784234][T14090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1680.795907][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.809182][T14090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1680.821966][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.828814][T14090] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1680.843182][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.850102][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.856851][ T10] kye 0003:0458:5015.0078: unknown main item tag 0x0 [ 1680.877375][ T43] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1680.878231][T14090] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1680.885841][T14090] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1680.885870][T14090] usb 2-1: Manufacturer: syz [ 1680.946544][ T10] kye 0003:0458:5015.0078: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 1680.957938][ T10] kye 0003:0458:5015.0078: tablet-enabling feature report not found [ 1680.965978][ T10] kye 0003:0458:5015.0078: tablet enabling failed [ 1680.972650][T16677] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1680.981554][T14090] usb 2-1: config 0 descriptor?? [ 1681.022538][ T10] usb 3-1: USB disconnect, device number 67 [ 1681.058650][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1681.077153][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1681.088785][T29514] fido_id[29514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1681.115701][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1681.137643][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1681.152731][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1681.162256][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.175610][T16677] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1681.180259][ T43] usb 5-1: config 0 descriptor?? [ 1681.195309][T16677] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1681.237045][T16677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1681.251951][T16677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1681.265858][T16677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1681.295380][T14090] rc_core: IR keymap rc-hauppauge not found [ 1681.301680][T14090] Registered IR keymap rc-empty [ 1681.306828][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.318192][T16677] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1681.329794][T16677] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1681.339982][T16677] usb 1-1: Product: syz [ 1681.344191][T16677] usb 1-1: Manufacturer: syz [ 1681.349674][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.380144][T14090] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1681.403447][T16677] cdc_wdm 1-1:1.0: skipping garbage [ 1681.410524][T14090] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input178 [ 1681.422929][T16677] cdc_wdm 1-1:1.0: skipping garbage [ 1681.431425][T16677] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1681.437375][T16677] cdc_wdm 1-1:1.0: Unknown control protocol [ 1681.466121][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.521939][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.548334][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.568250][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.598327][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.633062][ C0] wdm_int_callback: 17 callbacks suppressed [ 1681.633090][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1681.645677][ C0] wdm_int_callback: 17 callbacks suppressed [ 1681.645701][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1681.658725][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1681.665371][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1681.672823][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1681.675279][ T43] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0 [ 1681.679460][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1681.680318][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1681.688354][ T43] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0 [ 1681.693159][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1681.700178][ T43] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0 [ 1681.708006][T16677] usb 1-1: USB disconnect, device number 39 [ 1681.713423][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1681.713453][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1681.713470][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1681.732193][ T43] plantronics 0003:047F:FFFF.0079: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1681.736090][ T5840] Bluetooth: hci2: command tx timeout [ 1681.769896][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.797799][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.836043][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.857777][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.878160][T14090] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1681.897328][ T43] usb 5-1: USB disconnect, device number 66 [ 1681.913484][T14090] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1681.925063][T14090] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1681.947211][T14090] usb 2-1: USB disconnect, device number 63 [ 1681.996516][T29521] fido_id[29521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1682.417214][T29527] syzkaller1: entered promiscuous mode [ 1682.446519][T29527] syzkaller1: entered allmulticast mode [ 1682.727053][T16677] IPVS: starting estimator thread 0... [ 1682.736672][ T1130] IPVS: stop unused estimator thread 0... [ 1682.783686][ T5840] Bluetooth: Wrong link type (-71) [ 1682.847533][T29539] IPVS: using max 26 ests per chain, 62400 per kthread [ 1682.950926][T29545] syzkaller1: entered promiscuous mode [ 1682.964203][T29545] syzkaller1: entered allmulticast mode [ 1683.024834][ T43] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1683.209368][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1683.269603][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.337279][ T43] usb 5-1: Product: syz [ 1683.366602][ T43] usb 5-1: Manufacturer: syz [ 1683.403083][ T43] usb 5-1: SerialNumber: syz [ 1683.669768][T29419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1683.697608][T14090] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1683.720179][T29419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1683.766388][T29419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1683.814997][T29419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1683.827858][ T5840] Bluetooth: hci2: command tx timeout [ 1683.887647][T14090] usb 1-1: Using ep0 maxpacket: 32 [ 1683.897104][T14090] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1683.942608][T14090] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.996380][T14090] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1684.028176][T14090] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 1684.064793][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1684.075647][T14090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.098456][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1684.137122][T14090] usb 1-1: config 0 descriptor?? [ 1684.154631][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1684.197979][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1684.225782][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1684.244927][T29419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.262766][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1684.334421][ T43] usb 5-1: USB disconnect, device number 67 [ 1684.352286][T29419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.412269][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.419540][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.484939][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.492314][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.774914][T14090] usb 1-1: string descriptor 0 read error: -71 [ 1684.808589][T14090] uclogic 0003:5543:0045.007A: failed retrieving string descriptor #200: -71 [ 1684.843668][T14090] uclogic 0003:5543:0045.007A: failed retrieving pen parameters: -71 [ 1684.888787][T14090] uclogic 0003:5543:0045.007A: failed probing pen v2 parameters: -71 [ 1684.929295][T14090] uclogic 0003:5543:0045.007A: failed probing parameters: -71 [ 1684.957775][T14090] uclogic 0003:5543:0045.007A: probe with driver uclogic failed with error -71 [ 1684.962328][T29419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.068317][T14090] usb 1-1: USB disconnect, device number 40 [ 1685.224349][T29419] veth0_vlan: entered promiscuous mode [ 1685.320787][T29419] veth1_vlan: entered promiscuous mode [ 1685.488113][T29419] veth0_macvtap: entered promiscuous mode [ 1685.559559][T29419] veth1_macvtap: entered promiscuous mode [ 1685.610312][T14090] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1685.684491][T29419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.734775][T29419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.813712][T14090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1685.835619][ T1130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.841790][T14090] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1685.870030][T14090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.879946][ T1130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.897125][ T1130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.919726][T14090] usb 5-1: config 0 descriptor?? [ 1685.944366][T29590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1685.988661][ T1130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.068281][ T5826] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1686.252930][T15782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.273632][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1686.279488][T15782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.307643][ T5826] usb 3-1: config 1 has no interface number 0 [ 1686.324246][ T5826] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1686.356306][ T5826] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1686.387662][ T5826] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1686.403098][ T5826] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1686.406136][T24566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.434665][ T5826] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 1686.446904][T24566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.447069][T14090] pyra 0003:1E7D:2CF6.007B: hidraw0: USB HID v1.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1686.479577][ T5826] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x88 has an invalid bInterval 128, changing to 4 [ 1686.498506][ T5826] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x88 has invalid maxpacket 45612, setting to 1023 [ 1686.513944][ T5826] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1686.537728][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.556393][ T5826] usb 3-1: Product: syz [ 1686.561308][ T5826] usb 3-1: Manufacturer: syz [ 1686.565954][ T5826] usb 3-1: SerialNumber: syz [ 1686.586498][T29602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1686.636650][T14090] usb 5-1: USB disconnect, device number 68 [ 1686.665071][T29606] fido_id[29606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1686.867248][T29602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1686.912505][T29616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1687.080283][T29602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1687.147573][T14090] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1687.237667][ T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1687.316331][T29614] Set syz1 is full, maxelem 14 reached [ 1687.331317][T14090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1687.355376][T14090] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1687.377928][T14090] usb 4-1: can't read configurations, error -71 [ 1687.398813][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1687.412623][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1687.432030][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.450474][ T43] usb 2-1: Product: syz [ 1687.454729][ T43] usb 2-1: Manufacturer: syz [ 1687.466108][ T43] usb 2-1: SerialNumber: syz [ 1687.493980][T29602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1687.505465][ T43] usb 2-1: config 0 descriptor?? [ 1687.529519][ T43] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1687.533857][ T5826] cdc_ncm 3-1:1.1: bind() failure [ 1687.746269][ T107] usb 3-1: USB disconnect, device number 68 [ 1688.151219][ T43] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1688.164377][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1688.175322][ T43] usb 2-1: USB disconnect, device number 64 [ 1688.936281][T29671] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7419'. [ 1688.999983][ T5840] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 1689.117952][T14090] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 1689.129756][T29676] vivid-000: ================= START STATUS ================= [ 1689.161102][T29676] vivid-000: Generate PTS: true [ 1689.177159][T29676] vivid-000: Generate SCR: true [ 1689.187781][T29676] tpg source WxH: 720x576 (R'G'B) [ 1689.199577][T29676] tpg field: 4 [ 1689.206427][T29676] tpg crop: (0,0)/64x64 [ 1689.213487][T29676] tpg compose: (0,0)/16x16 [ 1689.218979][T29676] tpg colorspace: 1 [ 1689.222874][T29676] tpg transfer function: 0/1 [ 1689.227965][T29676] tpg quantization: 0/1 [ 1689.232214][T29676] tpg RGB range: 0/1 [ 1689.247629][T29676] vivid-000: ================== END STATUS ================== [ 1689.295543][T14090] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 1689.340787][T14090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1689.369165][T14090] usb 3-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 1689.397772][T14090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.419142][T29680] fuse: Unknown parameter 'group_i00000000000000000000' [ 1689.429884][T14090] usb 3-1: config 0 descriptor?? [ 1689.435983][T29669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1689.585133][T24566] bridge_slave_1: left allmulticast mode [ 1689.602357][T24566] bridge_slave_1: left promiscuous mode [ 1689.626302][T24566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.642080][T24566] bridge_slave_0: left allmulticast mode [ 1689.651234][T24566] bridge_slave_0: left promiscuous mode [ 1689.662356][T24566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.857648][T16674] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1689.889050][T29698] vivid-002: disconnect [ 1689.890738][T14090] ntrig 0003:1B96:000D.007C: hidraw0: USB HID vf4.f6 Device [HID 1b96:000d] on usb-dummy_hcd.2-1/input0 [ 1689.894120][T29697] vivid-002: reconnect [ 1690.028846][T16674] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 1690.037003][T16674] usb 1-1: config 0 has no interface number 0 [ 1690.066807][T16674] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1690.081973][T16674] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1690.096115][T14090] usb 3-1: USB disconnect, device number 69 [ 1690.105719][T16674] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1690.116007][T16674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.148785][T16674] usb 1-1: Product: syz [ 1690.155562][T16674] usb 1-1: Manufacturer: syz [ 1690.177564][T16674] usb 1-1: SerialNumber: syz [ 1690.190688][T29604] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1690.216662][T16674] usb 1-1: config 0 descriptor?? [ 1690.371459][T29604] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 1690.388086][T29604] usb 5-1: config 4 has no interface number 0 [ 1690.410556][T29604] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1690.430524][T29604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.451502][T29604] usb 5-1: Product: syz [ 1690.455722][T29604] usb 5-1: Manufacturer: syz [ 1690.464971][T16674] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 1690.468467][T29604] usb 5-1: SerialNumber: syz [ 1690.510407][T29604] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input180 [ 1690.537953][T16674] usb 1-1: USB disconnect, device number 41 [ 1690.567069][T16674] qcserial 1-1:0.49: device disconnected [ 1690.769377][T29719] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1690.853273][T29716] fuse: Unknown parameter 'group_i00000000000000000000' [ 1690.892215][T29723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7439'. [ 1691.224178][T29735] loop8: detected capacity change from 0 to 1 [ 1691.246287][T28418] Dev loop8: unable to read RDB block 1 [ 1691.249566][T24566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.252647][T28418] loop8: unable to read partition table [ 1691.266864][T28418] loop8: partition table beyond EOD, truncated [ 1691.277329][T24566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.295222][T24566] bond0 (unregistering): Released all slaves [ 1691.322242][T29735] Dev loop8: unable to read RDB block 1 [ 1691.342189][T29735] loop8: unable to read partition table [ 1691.358265][T29735] loop8: partition table beyond EOD, truncated [ 1691.366561][T29735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1691.601332][T29743] sg_write: data in/out 565044094/4060 bytes for SCSI command 0x8-- guessing data in; [ 1691.601332][T29743] program syz.0.7449 not setting count and/or reply_len properly [ 1691.658124][T16674] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1691.659813][T24566] bond1 (unregistering): Released all slaves [ 1691.701865][T29729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7442'. [ 1691.737168][T29745] fuse: Unknown parameter 'group_i00000000000000000000' [ 1691.812457][T29747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7451'. [ 1691.838396][T16674] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1691.852750][T16674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.863012][T24566] tipc: Left network mode [ 1691.879103][T16674] usb 3-1: config 0 descriptor?? [ 1692.531750][T24566] hsr_slave_0: left promiscuous mode [ 1692.608952][T29771] fuse: Unknown parameter 'group_id00000000000000000000' [ 1692.688059][ T107] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1692.765539][T29773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1692.797053][ T5185] bcm5974 5-1:4.28: could not read from device [ 1692.814045][T29604] bcm5974 5-1:4.28: could not read from device [ 1692.860577][ T107] usb 2-1: config 0 has no interfaces? [ 1692.874798][ T5185] bcm5974 5-1:4.28: could not read from device [ 1692.888364][ T107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1692.918723][ T107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1692.937356][T29604] input: failed to attach handler mousedev to device input180, error: -5 [ 1692.944900][ T107] usb 2-1: SerialNumber: syz [ 1692.965525][ T5185] bcm5974 5-1:4.28: could not read from device [ 1692.985508][T29604] usb 5-1: USB disconnect, device number 69 [ 1692.999073][ T107] usb 2-1: config 0 descriptor?? [ 1693.244917][ T107] usb 2-1: USB disconnect, device number 65 [ 1693.310682][T24566] team0 (unregistering): Port device team_slave_1 removed [ 1693.386385][T24566] team0 (unregistering): Port device team_slave_0 removed [ 1694.165780][T16674] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1694.245906][T29788] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1694.482831][T16674] pegasus 3-1:0.0: can't locate MII phy, using default [ 1694.522236][T16674] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6d:23:81:bd:0f:f9 [ 1694.534262][T16674] usb 3-1: USB disconnect, device number 70 [ 1694.628476][T24935] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1694.688706][T24566] IPVS: stop unused estimator thread 0... [ 1694.723739][ T5840] Bluetooth: hci5: unexpected event 0x3e length: 398 > 260 [ 1694.723781][ T5840] Bluetooth: hci5: unexpected subevent 0x0d length: 397 > 260 [ 1694.741517][ T5840] Bluetooth: hci5: adv larger than maximum supported [ 1694.741551][ T5840] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 1694.787576][T24935] usb 5-1: Using ep0 maxpacket: 32 [ 1694.812418][T24935] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1694.834181][T24935] usb 5-1: config 0 has no interface number 0 [ 1694.841870][T29806] loop7: detected capacity change from 0 to 7 [ 1694.860985][T29806] Dev loop7: unable to read RDB block 7 [ 1694.866716][T29806] loop7: unable to read partition table [ 1694.867777][T24935] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1694.876729][T29806] loop7: partition table beyond EOD, truncated [ 1694.892409][T29806] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1694.916967][T24935] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1694.937180][ T5200] Dev loop7: unable to read RDB block 7 [ 1694.944549][ T5200] loop7: unable to read partition table [ 1694.952636][ T5200] loop7: partition table beyond EOD, truncated [ 1694.967613][T24935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.997599][T24935] usb 5-1: Product: syz [ 1695.001849][T24935] usb 5-1: Manufacturer: syz [ 1695.006480][T24935] usb 5-1: SerialNumber: syz [ 1695.041508][T24935] usb 5-1: config 0 descriptor?? [ 1695.065954][T24935] smsc75xx v1.0.0 [ 1695.317245][T29818] tipc: Started in network mode [ 1695.322580][T29818] tipc: Node identity 4, cluster identity 4711 [ 1695.329060][T29818] tipc: Node number set to 4 [ 1695.429967][T29822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7485'. [ 1695.488840][T28040] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1695.669039][T28040] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1695.697466][T28040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.701577][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1695.705526][T28040] usb 1-1: Product: syz [ 1695.705549][T28040] usb 1-1: Manufacturer: syz [ 1695.725393][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1695.778472][T28040] usb 1-1: SerialNumber: syz [ 1695.800326][T28040] usb 1-1: config 0 descriptor?? [ 1695.808749][T29834] loop7: detected capacity change from 0 to 7 [ 1695.837627][T28397] Dev loop7: unable to read RDB block 7 [ 1695.847572][T28397] loop7: unable to read partition table [ 1695.866162][T28397] loop7: partition table beyond EOD, truncated [ 1695.919521][T29834] Dev loop7: unable to read RDB block 7 [ 1695.925195][T29834] loop7: unable to read partition table [ 1695.937797][T29834] loop7: partition table beyond EOD, truncated [ 1695.945383][T29834] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1695.999878][T29839] fuse: Bad value for 'user_id' [ 1696.005016][T29839] fuse: Bad value for 'user_id' [ 1696.035446][T28040] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1696.087866][T16674] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1696.250498][T16674] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.267924][T16674] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1696.277562][T16674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.285814][T16674] usb 4-1: Product: syz [ 1696.290741][T16674] usb 4-1: Manufacturer: syz [ 1696.295741][T16674] usb 4-1: SerialNumber: syz [ 1696.336343][T16674] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1696.954628][T16674] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1697.015009][T16674] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1697.049478][T16674] usb 4-1: media controller created [ 1697.106942][T16674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1697.400818][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 1697.449613][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 1697.500303][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1697.534254][T24935] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1697.566088][T16674] usb 4-1: USB disconnect, device number 65 [ 1697.578837][T24935] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1697.629743][T24935] usb 5-1: USB disconnect, device number 70 [ 1697.825638][T29858] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1698.008443][T29866] fuse: Bad value for 'user_id' [ 1698.013656][T29866] fuse: Bad value for 'user_id' [ 1698.109283][T29868] loop7: detected capacity change from 0 to 7 [ 1698.151230][T29868] Dev loop7: unable to read RDB block 7 [ 1698.200606][T29868] loop7: unable to read partition table [ 1698.207166][T29868] loop7: partition table beyond EOD, truncated [ 1698.245293][T29868] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1698.640553][T29882] netlink: 'syz.1.7509': attribute type 2 has an invalid length. [ 1698.691840][T29604] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1698.858667][T29604] usb 5-1: no configurations [ 1698.868368][T29604] usb 5-1: can't read configurations, error -22 [ 1699.018517][T29604] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1699.117098][T28040] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1699.181947][T28040] usb 1-1: USB disconnect, device number 42 [ 1699.200968][T29893] loop6: detected capacity change from 0 to 524287999 [ 1699.217149][T29604] usb 5-1: no configurations [ 1699.226874][T29604] usb 5-1: can't read configurations, error -22 [ 1699.245439][T29604] usb usb5-port1: attempt power cycle [ 1699.607883][T29604] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1699.641368][T29604] usb 5-1: no configurations [ 1699.651886][T29604] usb 5-1: can't read configurations, error -22 [ 1699.721392][T29900] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7516'. [ 1699.797637][T29604] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1699.817547][T28040] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1699.838978][T29604] usb 5-1: no configurations [ 1699.852381][T29604] usb 5-1: can't read configurations, error -22 [ 1699.867963][T29604] usb usb5-port1: unable to enumerate USB device [ 1700.000186][T28040] usb 3-1: config 0 has no interfaces? [ 1700.018153][T28040] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1700.046844][T28040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1700.092387][T28040] usb 3-1: SerialNumber: syz [ 1700.120440][T28040] usb 3-1: config 0 descriptor?? [ 1700.317636][T28040] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1700.338855][T29604] usb 3-1: USB disconnect, device number 71 [ 1700.468425][T28040] usb 1-1: Using ep0 maxpacket: 32 [ 1700.482927][T28040] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.500431][T28040] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1700.515860][T28040] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1700.527586][T28040] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1700.545624][T28040] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1700.557930][T28040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.567490][T28040] usb 1-1: Product: syz [ 1700.572156][T28040] usb 1-1: Manufacturer: syz [ 1700.577309][T28040] usb 1-1: SerialNumber: syz [ 1700.597404][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1700.613114][T28040] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input181 [ 1700.807512][T28040] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1700.817911][T28040] (id 0x00) [ 1700.907676][T28040] rc_core: IR keymap rc-imon-pad not found [ 1700.924571][T28040] Registered IR keymap rc-empty [ 1700.935567][T28040] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1700.957321][T28040] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1701.030355][T28040] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1701.046303][T28040] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input182 [ 1701.063635][T28040] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:43> initialized [ 1701.393830][T29925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7527'. [ 1701.774193][T29945] tipc: Started in network mode [ 1701.781544][T29945] tipc: Node identity , cluster identity 4711 [ 1701.794624][T29945] tipc: Failed to set node id, please configure manually [ 1701.810435][T29945] tipc: Enabling of bearer rejected, failed to enable media [ 1701.867528][T24935] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1701.925071][T29948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7535'. [ 1702.029852][T24935] usb 3-1: config 0 has no interfaces? [ 1702.060566][T24935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1702.070230][T24935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1702.079720][T24935] usb 3-1: SerialNumber: syz [ 1702.098889][T24935] usb 3-1: config 0 descriptor?? [ 1702.183238][T29952] fuse: Bad value for 'fd' [ 1702.336635][T24935] usb 3-1: USB disconnect, device number 72 [ 1702.743928][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7542'. [ 1703.175991][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1703.201006][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1703.227839][T24935] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1703.305524][T29979] fuse: Bad value for 'fd' [ 1703.388083][T24935] usb 3-1: Using ep0 maxpacket: 16 [ 1703.403704][T24935] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.432553][T24935] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.461006][T24935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1703.488904][T24935] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1703.517293][T24935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.543679][T24935] usb 3-1: config 0 descriptor?? [ 1703.589537][T29990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1703.775136][T29953] imon:send_packet: task interrupted [ 1703.797847][T29953] imon:send_packet: packet tx failed (-512) [ 1703.823628][T29953] imon:vfd_write: send packet #5 failed [ 1703.930475][T16674] usb 1-1: USB disconnect, device number 43 [ 1703.933956][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1703.977883][T30001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1703.989680][T29969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.038371][T29969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.084580][T24935] hid (null): invalid report_count 16974337 [ 1704.123777][T30004] fuse: Bad value for 'fd' [ 1704.133940][T24935] hid (null): report_id 766643193 is invalid [ 1704.171974][T24935] hid (null): unknown global tag 0xc [ 1704.191503][T24935] hid (null): unknown global tag 0x57 [ 1704.230378][T24935] hid_parser_main: 7 callbacks suppressed [ 1704.230406][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.265127][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.317800][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.324856][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.343477][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.354506][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.379556][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.386620][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.414447][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.433598][T24935] cougar 0003:060B:500A.007D: unknown main item tag 0x0 [ 1704.456966][T24935] cougar 0003:060B:500A.007D: unexpected long global item [ 1704.480622][T24935] cougar 0003:060B:500A.007D: parse failed [ 1704.487307][T24935] cougar 0003:060B:500A.007D: probe with driver cougar failed with error -22 [ 1704.525727][T24935] usb 3-1: USB disconnect, device number 73 [ 1704.984025][T30024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7568'. [ 1705.297512][T24935] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1705.467576][T24935] usb 3-1: Using ep0 maxpacket: 16 [ 1705.481056][T24935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.507354][T24935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.534701][T24935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1705.564200][T24935] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1705.584349][T24935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.607187][T24935] usb 3-1: config 0 descriptor?? [ 1705.689505][T29604] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1705.712292][T30033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7572'. [ 1705.741520][T30033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7572'. [ 1705.831396][T30035] fuse: Bad value for 'fd' [ 1705.867662][T29604] usb 5-1: Using ep0 maxpacket: 16 [ 1705.886700][T29604] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.913098][T29604] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1705.927048][T29604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.937345][T29604] usb 5-1: Product: syz [ 1705.942364][T29604] usb 5-1: Manufacturer: syz [ 1705.947080][T29604] usb 5-1: SerialNumber: syz [ 1705.968110][T29604] usb 5-1: config 0 descriptor?? [ 1706.123980][T24935] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.007E/input/input183 [ 1706.183054][T24935] microsoft 0003:045E:07DA.007E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1706.208704][T30048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7580'. [ 1706.283526][T24935] usb 3-1: USB disconnect, device number 74 [ 1706.340526][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7578'. [ 1706.364188][T30051] fido_id[30051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1706.497523][T16674] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1706.667563][T16674] usb 1-1: Using ep0 maxpacket: 32 [ 1706.701395][T16674] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1706.723169][T16674] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1706.756157][T16674] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1706.769326][T16674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.777665][T16674] usb 1-1: Product: syz [ 1706.782143][T16674] usb 1-1: Manufacturer: syz [ 1706.797335][T16674] usb 1-1: SerialNumber: syz [ 1706.947675][T26350] Bluetooth: hci4: command 0x0406 tx timeout [ 1707.062902][T30050] netlink: 'syz.0.7579': attribute type 2 has an invalid length. [ 1707.087815][T30050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.148822][T16674] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input184 [ 1707.199536][T16674] usb 1-1: USB disconnect, device number 44 [ 1707.264263][T16674] appletouch 1-1:1.0: input: appletouch disconnected [ 1707.469907][T30074] fuse: Bad value for 'fd' [ 1708.057556][T28040] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1708.255530][T28040] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1708.275586][T28040] usb 4-1: can't read configurations, error -61 [ 1708.427554][T28040] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1708.544387][T16674] usb 5-1: USB disconnect, device number 75 [ 1708.621766][T28040] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1708.647548][T28040] usb 4-1: can't read configurations, error -61 [ 1708.668663][T28040] usb usb4-port1: attempt power cycle [ 1709.027577][T28040] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1709.062548][T28040] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1709.072506][T28040] usb 4-1: can't read configurations, error -61 [ 1709.079400][T30105] fuse: Invalid rootmode [ 1709.207676][T28040] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1709.243278][T28040] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1709.262919][T28040] usb 4-1: can't read configurations, error -61 [ 1709.281317][T28040] usb usb4-port1: unable to enumerate USB device [ 1711.566431][T30151] loop7: detected capacity change from 0 to 7 [ 1711.600163][T28418] Dev loop7: unable to read RDB block 7 [ 1711.605843][T28418] loop7: unable to read partition table [ 1711.652080][T28418] loop7: partition table beyond EOD, truncated [ 1711.725854][T30151] Dev loop7: unable to read RDB block 7 [ 1711.732903][T30151] loop7: unable to read partition table [ 1711.747938][T30151] loop7: partition table beyond EOD, truncated [ 1711.777340][T30151] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1711.834697][ T5200] Dev loop7: unable to read RDB block 7 [ 1711.848227][ T5200] loop7: unable to read partition table [ 1711.865475][ T5200] loop7: partition table beyond EOD, truncated [ 1712.989970][T29604] IPVS: starting estimator thread 0... [ 1713.042855][T30172] __nla_validate_parse: 3 callbacks suppressed [ 1713.042879][T30172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7619'. [ 1713.097526][T30173] IPVS: using max 23 ests per chain, 55200 per kthread [ 1713.356425][T30183] loop7: detected capacity change from 0 to 7 [ 1713.408187][T30183] Dev loop7: unable to read RDB block 7 [ 1713.424034][T30183] loop7: unable to read partition table [ 1713.454013][T30183] loop7: partition table beyond EOD, truncated [ 1713.474937][T30183] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1713.534731][T30191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1713.995099][T29604] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1714.189948][T29604] usb 4-1: config 0 has no interfaces? [ 1714.201254][T29604] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1714.232677][T29604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1714.254021][T29604] usb 4-1: SerialNumber: syz [ 1714.263523][T29604] usb 4-1: config 0 descriptor?? [ 1714.317539][T16674] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1714.479596][T29604] usb 4-1: USB disconnect, device number 70 [ 1714.509777][T16674] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1714.527576][T16674] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.546943][T16674] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.558045][T16674] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1714.582107][T16674] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1714.602777][T16674] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1714.634570][T16674] usb 3-1: Manufacturer: syz [ 1714.672246][T16674] usb 3-1: config 0 descriptor?? [ 1715.058603][T30224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1715.175880][T16674] hid_parser_main: 51 callbacks suppressed [ 1715.175904][T16674] appleir 0003:05AC:8243.007F: unknown main item tag 0x0 [ 1715.202437][T16674] appleir 0003:05AC:8243.007F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1715.468263][T30229] syzkaller1: entered promiscuous mode [ 1715.487529][T30229] syzkaller1: entered allmulticast mode [ 1715.544073][T14090] IPVS: starting estimator thread 0... [ 1715.667651][T30233] IPVS: using max 46 ests per chain, 110400 per kthread [ 1715.719017][T16674] usb 3-1: USB disconnect, device number 75 [ 1716.528372][T30250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1716.740040][T30260] syzkaller1: entered promiscuous mode [ 1716.752536][T30260] syzkaller1: entered allmulticast mode [ 1717.044928][T30269] loop2: detected capacity change from 0 to 7 [ 1717.088773][T30269] Dev loop2: unable to read RDB block 7 [ 1717.106211][T30269] loop2: unable to read partition table [ 1717.119647][T30269] loop2: partition table beyond EOD, truncated [ 1717.136985][T30269] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1717.367103][T30283] tipc: Started in network mode [ 1717.378502][T30283] tipc: Node identity 2a309f546d14, cluster identity 4711 [ 1717.399326][T30283] tipc: Enabled bearer , priority 0 [ 1717.415699][T30283] syzkaller0: entered promiscuous mode [ 1717.425877][T30285] netlink: 'syz.4.7665': attribute type 10 has an invalid length. [ 1717.434349][T30283] syzkaller0: entered allmulticast mode [ 1717.521753][T30285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1717.521944][T30287] netlink: 'syz.4.7665': attribute type 10 has an invalid length. [ 1717.554355][T30285] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1717.578748][T30287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7665'. [ 1717.650355][T30283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1717.664937][T30287] batadv0: entered promiscuous mode [ 1717.702687][T30287] batadv0: entered allmulticast mode [ 1717.740031][T30287] bond0: (slave batadv0): Releasing backup interface [ 1717.782074][T30287] bridge0: port 3(batadv0) entered blocking state [ 1717.800962][T30287] bridge0: port 3(batadv0) entered disabled state [ 1717.838758][T30289] tipc: Resetting bearer [ 1717.866723][T30282] tipc: Resetting bearer [ 1718.008292][T30282] tipc: Disabling bearer [ 1718.146032][T30302] syzkaller1: entered promiscuous mode [ 1718.167520][T30302] syzkaller1: entered allmulticast mode [ 1718.258480][T15777] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1718.267925][T15777] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1718.357613][T16674] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1718.591125][T16674] usb 4-1: Using ep0 maxpacket: 32 [ 1718.693976][T16674] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1718.800484][T16674] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1718.809819][T16674] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1718.820060][T30308] netlink: 384 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1718.857549][T16674] usb 4-1: Product: syz [ 1718.890754][T16674] usb 4-1: Manufacturer: syz [ 1718.921046][T16674] usb 4-1: SerialNumber: syz [ 1718.951027][T16674] usb 4-1: config 0 descriptor?? [ 1718.956997][T30301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1719.193821][T30314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7677'. [ 1719.371438][T30319] netlink: 'syz.3.7671': attribute type 13 has an invalid length. [ 1719.428683][T14090] usb 4-1: USB disconnect, device number 71 [ 1720.282632][T30333] fuse: Bad value for 'fd' [ 1720.862248][T30206] Set syz1 is full, maxelem 65536 reached [ 1720.953073][T30343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7686'. [ 1721.064344][T30350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1721.488034][T16674] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1721.670201][T16674] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1721.683865][T16674] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.708519][T16674] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1721.736840][T16674] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1721.781428][T16674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.885046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803320fc00: rx timeout, send abort [ 1723.895944][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035bfc400: rx timeout, send abort [ 1723.907800][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803320fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1723.924263][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035bfc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1724.130388][T30397] program syz.2.7706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1724.587618][T24935] usb 1-1: USB disconnect, device number 45 [ 1724.821059][T30388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1724.862292][T30388] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1724.959166][T30388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1724.995457][T30388] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1725.084354][T30388] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1725.099624][T30388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1725.134858][T30388] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1725.219830][T30388] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1725.409085][T30388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1725.436666][T30388] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1725.527082][T30388] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1725.999951][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1726.014008][T30430] random: crng reseeded on system resumption [ 1726.346064][T30442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1726.697710][T24935] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1726.705477][T16674] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1726.913278][T24935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.943223][T16674] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1726.990434][T24935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1727.007196][T16674] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.038245][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1727.055157][T16674] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1727.064859][T24935] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1727.108331][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1727.114747][T16674] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1727.124259][T24935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.148875][T16674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.159127][T24935] usb 1-1: config 0 descriptor?? [ 1727.427713][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1728.067620][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1728.182932][T30476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1729.107553][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1729.188488][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1729.246513][T24935] usbhid 1-1:0.0: can't add hid device: -71 [ 1729.260149][T24935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1729.295365][T24935] usb 1-1: USB disconnect, device number 46 [ 1729.393722][T14090] usb 3-1: USB disconnect, device number 76 [ 1729.435259][T30502] netlink: 'syz.2.7745': attribute type 2 has an invalid length. [ 1729.510644][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1730.484834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.502284][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.747779][T16674] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1730.924716][T16674] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1730.924739][T16674] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.924752][T16674] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1730.924778][T16674] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.924793][T16674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.276530][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1731.278903][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1731.597622][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1731.715220][T30545] netlink: 'syz.1.7757': attribute type 10 has an invalid length. [ 1731.833163][T30545] team0: Port device netdevsim0 added [ 1733.412279][T24935] usb 4-1: USB disconnect, device number 72 [ 1733.550695][T30578] syzkaller0: entered promiscuous mode [ 1733.572743][T30578] syzkaller0: entered allmulticast mode [ 1733.772757][T30581] fuse: Unknown parameter '0x0000000000000009' [ 1733.947610][T24935] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1734.117795][T24935] usb 4-1: Using ep0 maxpacket: 32 [ 1734.144669][T24935] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1734.192270][T24935] usb 4-1: config 0 has no interface number 0 [ 1734.214558][T24935] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1734.255897][T24935] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1734.294013][T24935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.336468][T24935] usb 4-1: Product: syz [ 1734.361257][T24935] usb 4-1: Manufacturer: syz [ 1734.386192][T24935] usb 4-1: SerialNumber: syz [ 1734.428061][T24935] usb 4-1: config 0 descriptor?? [ 1734.490231][T24935] f81534 4-1:0.12: required endpoints missing [ 1734.695949][ T5826] usb 4-1: USB disconnect, device number 73 [ 1734.698762][ T30] audit: type=1326 audit(1765622365.577:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30583 comm="syz.1.7774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ff3f8f749 code=0x0 [ 1735.667252][T30609] syzkaller0: entered promiscuous mode [ 1735.694095][T30609] syzkaller0: entered allmulticast mode [ 1736.483042][T30640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7794'. [ 1739.718655][T29604] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1739.918171][T29604] usb 5-1: Using ep0 maxpacket: 8 [ 1740.045765][T29604] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 1740.210210][T29604] usb 5-1: config 162 has an invalid interface number: 3 but max is 2 [ 1740.224956][T29604] usb 5-1: config 162 has no interface number 0 [ 1740.231931][T29604] usb 5-1: config 162 has no interface number 1 [ 1740.240317][T29604] usb 5-1: config 162 interface 84 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1740.253801][T29604] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1740.268846][T29604] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1740.281111][T29604] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1740.293047][T29604] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1740.303880][T29604] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1740.419898][T29604] usb 5-1: config 162 interface 84 has no altsetting 0 [ 1740.436708][T29604] usb 5-1: config 162 interface 2 has no altsetting 0 [ 1740.455884][T29604] usb 5-1: config 162 interface 3 has no altsetting 0 [ 1740.474969][T29604] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1740.500695][T29604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.522767][T29604] usb 5-1: Product: syz [ 1740.537114][T29604] usb 5-1: Manufacturer: syz [ 1740.560413][T29604] usb 5-1: SerialNumber: syz [ 1740.793410][T30681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1740.855244][T30655] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1741.009847][T29604] usb 5-1: USB disconnect, device number 76 [ 1741.028267][T30662] delete_channel: no stack [ 1741.166689][T30686] syzkaller0: entered promiscuous mode [ 1741.175744][T30686] syzkaller0: entered allmulticast mode [ 1741.677104][T30698] syzkaller0: entered promiscuous mode [ 1741.691452][T30698] syzkaller0: entered allmulticast mode [ 1741.850089][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7822'. [ 1741.994030][T30714] netlink: 'syz.4.7824': attribute type 10 has an invalid length. [ 1742.226163][T30718] Invalid logical block size (-2) [ 1742.603202][T30728] syzkaller0: entered promiscuous mode [ 1742.615227][T30728] syzkaller0: entered allmulticast mode [ 1743.315403][T15782] batman_adv: batadv0: MLD Querier appeared [ 1746.145969][T30747] syzkaller0: entered promiscuous mode [ 1746.162684][T30747] syzkaller0: entered allmulticast mode [ 1746.279797][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 1747.514773][T30785] syzkaller0: entered promiscuous mode [ 1747.527185][T30785] syzkaller0: entered allmulticast mode [ 1748.549911][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7852'. [ 1748.767745][T30800] syzkaller0: entered promiscuous mode [ 1748.773277][T30800] syzkaller0: entered allmulticast mode [ 1748.996179][T30811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7858'. [ 1749.639299][T30828] delete_channel: no stack [ 1751.001542][T30847] syzkaller0: entered promiscuous mode [ 1751.030297][T30847] syzkaller0: entered allmulticast mode [ 1751.232810][T30860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7876'. [ 1751.440213][T30868] tipc: Started in network mode [ 1751.461689][T30868] tipc: Node identity 8adf4ab78a16, cluster identity 4711 [ 1751.490468][T30868] tipc: Enabled bearer , priority 0 [ 1751.542743][T30863] syzkaller0: entered promiscuous mode [ 1751.591614][T30863] syzkaller0: entered allmulticast mode [ 1751.717339][T30863] tipc: Resetting bearer [ 1751.789417][T30862] tipc: Resetting bearer [ 1751.895345][T30862] tipc: Disabling bearer [ 1753.471669][T30908] syzkaller0: entered promiscuous mode [ 1753.495028][T30908] syzkaller0: entered allmulticast mode [ 1757.069352][T30883] syz.1.7882 (30883): drop_caches: 2 [ 1757.414915][T31012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7938'. [ 1757.493896][T31012] loop7: detected capacity change from 0 to 16384 [ 1757.937617][T29604] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1758.119076][T29604] usb 5-1: Using ep0 maxpacket: 8 [ 1758.155184][T29604] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.194494][T29604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1758.252668][T29604] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1758.293730][T29604] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1758.344521][T29604] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1758.394657][T29604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.446913][T29604] hub 5-1:1.0: bad descriptor, ignoring hub [ 1758.485628][T29604] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1758.518169][T29604] cdc_wdm 5-1:1.0: skipping garbage [ 1758.557739][T29604] cdc_wdm 5-1:1.0: skipping garbage [ 1758.606749][T29604] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1758.653780][T29604] cdc_wdm 5-1:1.0: Unknown control protocol [ 1759.411031][T31018] usb 5-1: reset high-speed USB device number 77 using dummy_hcd [ 1760.890091][T16674] usb 5-1: USB disconnect, device number 77 [ 1762.764089][ T5826] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1762.827871][ T5826] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1762.887578][T31134] fido_id[31134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1762.916739][T31133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1765.435309][T31145] syzkaller0: entered promiscuous mode [ 1765.454893][T31145] syzkaller0: entered allmulticast mode [ 1766.070582][T24935] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1766.089530][T24935] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1766.256291][T31165] fido_id[31165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1769.451168][T24935] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1769.475647][T24935] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1769.766555][T31201] fido_id[31201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1769.977306][T31208] bridge1: entered promiscuous mode [ 1769.983856][T31208] bridge1: entered allmulticast mode [ 1769.995922][T31208] team0: Port device bridge1 added [ 1770.022381][T31208] bridge0: port 3(team0) entered blocking state [ 1770.045681][T31208] bridge0: port 3(team0) entered disabled state [ 1770.061021][T31208] team0: entered allmulticast mode [ 1770.080408][T31208] team_slave_0: entered allmulticast mode [ 1770.248699][T31208] team_slave_1: entered allmulticast mode [ 1770.254960][T31208] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1770.267064][T31208] team0: entered promiscuous mode [ 1770.272345][T31208] team_slave_0: entered promiscuous mode [ 1770.278359][T31208] team_slave_1: entered promiscuous mode [ 1770.284809][T31208] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1770.293849][T31208] bridge0: port 3(team0) entered blocking state [ 1770.300343][T31208] bridge0: port 3(team0) entered forwarding state [ 1772.197231][T31150] Set syz1 is full, maxelem 65536 reached [ 1774.244746][T31243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1774.264086][T31243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1774.285622][T31243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1774.667538][T31252] loop2: detected capacity change from 0 to 7 [ 1774.682145][T31022] Dev loop2: unable to read RDB block 7 [ 1774.688171][T31022] loop2: unable to read partition table [ 1774.717723][T31022] loop2: partition table beyond EOD, truncated [ 1774.732481][T31252] Dev loop2: unable to read RDB block 7 [ 1774.752254][T31252] loop2: unable to read partition table [ 1774.794935][T31252] loop2: partition table beyond EOD, truncated [ 1774.837997][T31252] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1774.912861][ T5200] Dev loop2: unable to read RDB block 7 [ 1774.946446][ T5200] loop2: unable to read partition table [ 1774.974383][ T5200] loop2: partition table beyond EOD, truncated [ 1775.287076][T31160] Set syz1 is full, maxelem 65536 reached [ 1776.020204][T31212] syz.0.8008 (31212): drop_caches: 2 [ 1776.746021][T31306] fuse: Bad value for 'fd' [ 1778.107575][T24935] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1778.277909][T24935] usb 5-1: Using ep0 maxpacket: 32 [ 1778.326091][T24935] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.367498][T24935] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1778.391670][T24935] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.419894][T24935] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1778.453503][T24935] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1778.477449][T24935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.498475][T24935] usb 5-1: Product: syz [ 1778.502706][T24935] usb 5-1: Manufacturer: syz [ 1778.502977][T31331] syzkaller0: entered promiscuous mode [ 1778.529004][T31331] syzkaller0: entered allmulticast mode [ 1778.538237][T24935] usb 5-1: SerialNumber: syz [ 1778.568860][T31333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8055'. [ 1778.580678][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1778.608608][T24935] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input185 [ 1778.807493][T24935] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1778.817966][T24935] (id 0x00) [ 1778.929671][ T30] audit: type=1326 audit(1765622409.807:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31344 comm="syz.3.8060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65b18f749 code=0x0 [ 1779.018017][T24935] rc_core: IR keymap rc-imon-pad not found [ 1779.025616][T24935] Registered IR keymap rc-empty [ 1779.034722][T24935] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1779.048441][T24935] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1779.079036][T24935] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1779.115135][T24935] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input186 [ 1779.150931][T24935] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:78> initialized [ 1780.240265][T31368] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 1780.267598][T31368] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 1780.523637][T31370] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1780.818134][T31374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8070'. [ 1780.856803][T31374] netlink: 'syz.2.8070': attribute type 2 has an invalid length. [ 1781.653643][T31365] imon:send_packet: task interrupted [ 1781.663730][T31365] imon:send_packet: packet tx failed (-512) [ 1781.866594][T31365] imon:vfd_write: send packet #5 failed [ 1781.900106][ T5826] usb 5-1: USB disconnect, device number 78 [ 1782.162920][T31396] syzkaller0: entered promiscuous mode [ 1782.171440][T31396] syzkaller0: entered allmulticast mode [ 1782.442317][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8081'. [ 1782.510034][T31404] netlink: 'syz.2.8081': attribute type 2 has an invalid length. [ 1788.013098][T31440] syzkaller0: entered promiscuous mode [ 1788.018775][T31440] syzkaller0: entered allmulticast mode [ 1788.121054][T31447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8095'. [ 1788.552751][T31470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1788.575467][T31471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8097'. [ 1791.920749][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.927081][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.995105][T31545] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1793.385497][T31572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8136'. [ 1793.830415][T31563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.838218][T31563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.129109][T31563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.283584][T31563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.728433][T15782] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.750993][T15782] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.791762][T15782] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.853062][T15782] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.549677][T31619] tipc: Enabled bearer , priority 0 [ 1795.711603][T31619] tipc: Resetting bearer [ 1796.635183][T31650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1797.262831][T31665] can: request_module (can-proto-3) failed. [ 1798.418607][T31582] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1798.619844][T31582] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1798.658610][T31582] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1798.704626][T31582] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1798.746628][T31582] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1798.812235][T31582] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1798.841013][T31582] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1798.871602][T31582] usb 5-1: Product: syz [ 1798.888577][T31582] usb 5-1: Manufacturer: syz [ 1798.919552][T31582] cdc_wdm 5-1:1.0: skipping garbage [ 1798.945597][T31582] cdc_wdm 5-1:1.0: skipping garbage [ 1798.963002][T31582] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1799.145650][ T5826] usb 5-1: USB disconnect, device number 79 [ 1799.528272][T31724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1800.497739][T31582] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1800.558781][ T5826] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1800.667605][T31582] usb 2-1: Using ep0 maxpacket: 32 [ 1800.683918][T31582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.717785][T31582] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1800.730989][ T5826] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1800.734103][T31582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.761416][ T5826] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1800.768385][T31582] usb 2-1: config 0 descriptor?? [ 1800.787631][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1800.815297][T31582] dvb-usb: found a 'TeVii S662' in warm state. [ 1800.822247][ T5826] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.838082][T31582] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1800.844216][T31582] dvb-usb: bulk message failed: -22 (2/0) [ 1800.850906][ T5826] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1800.872249][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1800.897513][ T5826] usb 1-1: Product: syz [ 1800.898687][T31582] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1800.901950][ T5826] usb 1-1: Manufacturer: syz [ 1800.954836][T31582] dvbdev: DVB: registering new adapter (TeVii S662) [ 1800.957183][ T5826] cdc_wdm 1-1:1.0: skipping garbage [ 1800.967100][T31582] usb 2-1: media controller created [ 1800.973626][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1800.977494][ T5826] cdc_wdm 1-1:1.0: skipping garbage [ 1800.981659][T31582] dw2102: i2c transfer failed. [ 1800.992002][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1800.995333][ T5826] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1801.000991][T31782] loop7: detected capacity change from 16384 to 16376 [ 1801.031605][T31582] dw2102: i2c transfer failed. [ 1801.044302][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1801.071199][T31582] dw2102: i2c transfer failed. [ 1801.076053][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1801.098211][T31582] dw2102: i2c transfer failed. [ 1801.112383][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1801.119503][T31582] dw2102: i2c transfer failed. [ 1801.128561][T31582] dvb-usb: bulk message failed: -22 (6/0) [ 1801.135084][T31582] dw2102: i2c transfer failed. [ 1801.140100][T31582] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1801.167650][ T5826] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1801.174608][T31582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1801.197127][T29604] usb 1-1: USB disconnect, device number 47 [ 1801.241621][T31582] dvb-usb: bulk message failed: -22 (3/0) [ 1801.260330][T31582] dw2102: command 0x0e transfer failed. [ 1801.288614][T31582] dvb-usb: bulk message failed: -22 (3/0) [ 1801.294560][T31582] dw2102: command 0x0e transfer failed. [ 1801.342350][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.353299][ T5826] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1801.363117][ T5826] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1801.374350][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.394099][ T5826] usb 4-1: config 0 descriptor?? [ 1801.614949][ T5826] usb 4-1: string descriptor 0 read error: -71 [ 1801.630818][T31582] dvb-usb: bulk message failed: -22 (3/0) [ 1801.644984][ T5826] usb 4-1: USB disconnect, device number 74 [ 1801.650272][T31582] dw2102: command 0x0e transfer failed. [ 1801.656524][T31582] dvb-usb: bulk message failed: -22 (3/0) [ 1801.677907][T31582] dw2102: command 0x0e transfer failed. [ 1801.691064][T31582] dvb-usb: bulk message failed: -22 (1/0) [ 1801.706520][T31582] dw2102: command 0x51 transfer failed. [ 1801.718154][T31582] dvb-usb: bulk message failed: -22 (5/0) [ 1801.739945][T31582] dw2102: i2c probe for address 0x68 failed. [ 1801.752687][T31582] dvb-usb: bulk message failed: -22 (5/0) [ 1801.768099][T31582] dw2102: i2c probe for address 0x69 failed. [ 1801.784596][T31582] dvb-usb: bulk message failed: -22 (5/0) [ 1801.801128][T31802] EXT4-fs: Conflicting test_dummy_encryption options [ 1801.808051][T31582] dw2102: i2c probe for address 0x6a failed. [ 1801.808073][T31582] dw2102: probing for demodulator failed. Is the external power switched on? [ 1801.808088][T31582] dvb-usb: no frontend was attached by 'TeVii S662' [ 1802.009801][T31582] rc_core: IR keymap rc-tt-1500 not found [ 1802.030199][T31582] Registered IR keymap rc-empty [ 1802.060103][T31582] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1802.088010][T31582] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input187 [ 1802.153019][T31582] dvb-usb: schedule remote query interval to 250 msecs. [ 1802.193943][T31582] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1802.214740][T31582] dvb-usb: TeVii S662 successfully initialized and connected. [ 1802.262784][T31582] usb 2-1: USB disconnect, device number 66 [ 1802.561604][T31582] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1803.603777][ T5826] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1803.779472][ T5826] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1803.790184][ T5826] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1803.802087][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1803.817563][ T5826] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1803.841546][ T5826] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1803.871006][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1803.900662][ T5826] usb 1-1: Product: syz [ 1803.914086][ T5826] usb 1-1: Manufacturer: syz [ 1803.957897][ T5826] cdc_wdm 1-1:1.0: skipping garbage [ 1803.967929][T24849] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1804.003332][ T5826] cdc_wdm 1-1:1.0: skipping garbage [ 1804.024500][ T5826] cdc_wdm 1-1:1.0: skipping garbage [ 1804.037816][ T5826] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1804.159647][T24849] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 1804.196780][T24849] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 1804.215958][T31582] usb 1-1: USB disconnect, device number 48 [ 1804.251129][T24849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.280860][T24849] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1804.313884][T24849] usb 2-1: config 0 has no interface number 0 [ 1804.345255][T24849] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1804.367876][T24849] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1804.388151][T24849] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1804.438633][T24849] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1804.470109][T24849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.499168][T24849] usb 2-1: config 0 descriptor?? [ 1804.537599][T24849] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1804.754136][T31849] netlink: 'syz.1.8246': attribute type 21 has an invalid length. [ 1804.785130][T31849] netlink: 'syz.1.8246': attribute type 6 has an invalid length. [ 1804.812599][T31849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8246'. [ 1804.865638][T24849] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 1804.918008][T24849] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1804.928856][T24849] usb 2-1: MIDIStreaming interface descriptor not found [ 1805.193705][T24849] usb 2-1: USB disconnect, device number 67 [ 1807.217855][T31914] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 1807.245905][T31914] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 1807.447720][T24849] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1807.612033][T24849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.624489][T24849] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1807.634379][T24849] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1807.666129][T24849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.752171][T24849] usb 4-1: config 0 descriptor?? [ 1807.810741][T24849] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1807.854922][T24849] dvb-usb: bulk message failed: -22 (3/0) [ 1807.922707][T24849] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1807.968989][T24849] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1807.988184][T31582] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1808.017226][T24849] usb 4-1: media controller created [ 1808.057487][T24849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1808.092746][T24849] dvb-usb: bulk message failed: -22 (6/0) [ 1808.145535][T24849] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1808.192050][T24849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input188 [ 1808.208746][T31582] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1808.249595][T31582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.272100][T24849] dvb-usb: schedule remote query interval to 150 msecs. [ 1808.286187][T31582] usb 2-1: Product: syz [ 1808.291390][T24849] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1808.299511][T31582] usb 2-1: Manufacturer: syz [ 1808.304806][T31582] usb 2-1: SerialNumber: syz [ 1808.312256][T24849] usb 4-1: USB disconnect, device number 75 [ 1808.326084][T31582] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1808.494936][T31581] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1808.573521][T24849] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1808.740079][T29604] usb 2-1: USB disconnect, device number 68 [ 1809.667779][T31581] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1809.683765][T31581] ath9k_htc: Failed to initialize the device [ 1809.716133][T29604] usb 2-1: ath9k_htc: USB layer deinitialized [ 1810.682726][T29604] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1810.876966][T29604] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1810.903079][T29604] usb 3-1: config 0 has no interface number 0 [ 1810.922190][T29604] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1810.969364][T29604] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1811.072477][T29604] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1811.127244][T29604] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1811.176622][T29604] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1811.215612][T29604] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1811.252197][T29604] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1811.307223][T29604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.354522][T29604] usb 3-1: config 0 descriptor?? [ 1811.438143][T31982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1811.447897][T31982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1811.466393][T29604] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1811.784799][T29604] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1812.000640][T29604] usb 2-1: config 0 has no interfaces? [ 1812.033388][T29604] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1812.072170][T29604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.106695][T29604] usb 2-1: Product: syz [ 1812.154920][T29604] usb 2-1: Manufacturer: syz [ 1812.166276][T29604] usb 2-1: SerialNumber: syz [ 1812.220365][T29604] usb 2-1: config 0 descriptor?? [ 1812.758366][T32020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1814.237896][T31581] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1814.427563][T31581] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1814.449964][T31581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.473815][T31581] usb 1-1: Product: syz [ 1814.487514][T31581] usb 1-1: Manufacturer: syz [ 1814.497864][T31581] usb 1-1: SerialNumber: syz [ 1814.529548][T31581] usb 1-1: config 0 descriptor?? [ 1814.589472][T24849] usb 2-1: USB disconnect, device number 69 [ 1814.868616][T29604] usb 1-1: USB disconnect, device number 49 [ 1814.910376][T32038] syz_tun: entered promiscuous mode [ 1814.958380][T32038] syz_tun: entered allmulticast mode [ 1814.991656][T32038] team0: Port device syz_tun added [ 1815.222232][T24849] usb 3-1: USB disconnect, device number 77 [ 1815.241448][T24849] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1815.290572][T32047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1815.447550][T31581] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1815.627428][T31581] usb 4-1: Using ep0 maxpacket: 32 [ 1815.653684][T31581] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.680505][T31581] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1815.692639][T31581] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1815.704752][T31581] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1815.734095][T31581] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1815.744252][T32064] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1815.756085][T31581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.778408][T31581] usb 4-1: Product: syz [ 1815.782833][T31581] usb 4-1: Manufacturer: syz [ 1815.796196][T31581] usb 4-1: SerialNumber: syz [ 1815.835630][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1815.858678][T31581] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input189 [ 1816.049156][T31581] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1816.069315][T31581] (id 0x00) [ 1816.227820][T31581] rc_core: IR keymap rc-imon-pad not found [ 1816.267411][T31581] Registered IR keymap rc-empty [ 1816.313687][T31581] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1816.330134][T31581] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1816.374413][T31581] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1816.400606][T31581] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input190 [ 1816.417530][ T5826] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1816.456865][T31581] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:76> initialized [ 1816.601643][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.627673][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1816.664537][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1816.675835][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1816.687512][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1816.829482][ T5826] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1816.839022][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1816.847285][ T5826] usb 2-1: Product: syz [ 1816.858326][ T5826] usb 2-1: Manufacturer: syz [ 1816.867980][ T5826] usb 2-1: SerialNumber: syz [ 1816.888718][ T5826] usb 2-1: config 0 descriptor?? [ 1817.126388][ T5826] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1817.134147][ T5826] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1817.169533][T32077] syz_tun: entered promiscuous mode [ 1817.191522][T32077] team0: Port device syz_tun added [ 1817.335150][ T5826] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1817.350045][ T5826] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1817.359389][ T5826] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1817.377092][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1817.395941][ T5826] usb 2-1: USB disconnect, device number 70 [ 1817.457738][T32086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1817.580454][T31581] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1817.743803][T31581] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1817.772850][T31581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.806100][T31581] usb 5-1: Product: syz [ 1817.821971][T31581] usb 5-1: Manufacturer: syz [ 1817.843007][T31581] usb 5-1: SerialNumber: syz [ 1817.900839][T31581] usb 5-1: config 0 descriptor?? [ 1818.147275][T31581] usb 5-1: USB disconnect, device number 80 [ 1819.017849][T32083] imon:send_packet: task interrupted [ 1819.037889][T32083] imon:send_packet: packet tx failed (-512) [ 1819.084475][T32083] imon:vfd_write: send packet #5 failed [ 1819.240959][T31581] usb 4-1: USB disconnect, device number 76 [ 1819.425147][T32111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8336'. [ 1819.686990][T32118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8338'. [ 1820.000932][T31582] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1820.013403][T31581] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1820.038906][T31582] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1820.077460][T24849] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1820.209281][T31581] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.240265][T31581] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1820.261433][T24849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.272442][T31581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.287696][T31582] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1820.312845][T24849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1820.325452][T31581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.336548][T24849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1820.351182][T31581] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1820.360518][T24849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1820.370652][T31581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.378848][T24849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1820.392688][T31581] usb 2-1: Product: syz [ 1820.396938][T31581] usb 2-1: Manufacturer: syz [ 1820.403158][T31581] usb 2-1: SerialNumber: syz [ 1820.410945][T24849] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1820.432557][T31581] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1820.441929][T24849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1820.458161][T31581] cdc_ncm 2-1:1.0: bind() failure [ 1820.466696][T24849] usb 5-1: Product: syz [ 1820.477616][T24849] usb 5-1: Manufacturer: syz [ 1820.498972][T31582] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1820.506788][T24849] usb 5-1: SerialNumber: syz [ 1820.512186][T31582] usb 1-1: can't read configurations, error -61 [ 1820.561397][T24849] usb 5-1: config 0 descriptor?? [ 1820.697645][T31582] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1820.793974][T31581] usb 2-1: USB disconnect, device number 71 [ 1820.807300][T24849] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1820.834463][T24849] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1820.873965][T31582] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1820.883800][T31582] usb 1-1: can't read configurations, error -61 [ 1820.890841][T31582] usb usb1-port1: attempt power cycle [ 1821.007417][T24849] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1821.029048][T24849] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1821.048932][T24849] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1821.090269][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1821.126914][T24849] usb 5-1: USB disconnect, device number 81 [ 1821.237510][T31582] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1821.282630][T31582] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1821.323992][T31582] usb 1-1: can't read configurations, error -61 [ 1821.479085][T31582] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1821.524390][T31582] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1821.532715][T31582] usb 1-1: can't read configurations, error -61 [ 1821.540897][T31582] usb usb1-port1: unable to enumerate USB device [ 1821.896756][T32154] loop2: detected capacity change from 0 to 7 [ 1821.927883][T32154] Dev loop2: unable to read RDB block 7 [ 1821.941494][T32154] loop2: unable to read partition table [ 1821.951500][T32154] loop2: partition table beyond EOD, truncated [ 1821.965770][T32154] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1822.140149][T32159] tipc: Enabled bearer , priority 0 [ 1822.150717][T32159] syzkaller0: entered promiscuous mode [ 1822.156531][T32159] syzkaller0: entered allmulticast mode [ 1822.174197][T32159] tipc: Resetting bearer [ 1822.185984][T32158] tipc: Resetting bearer [ 1822.227805][T32158] tipc: Disabling bearer [ 1822.531015][T32175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1822.540653][T32175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1822.704661][T32181] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1823.011000][T32193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8369'. [ 1823.358116][ T5826] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1823.543892][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.556330][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1823.583122][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1823.608721][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1823.629536][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1823.675928][ T5826] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1823.707061][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1823.734272][ T5826] usb 5-1: Product: syz [ 1823.748908][ T5826] usb 5-1: Manufacturer: syz [ 1823.763860][ T5826] usb 5-1: SerialNumber: syz [ 1823.782615][ T5826] usb 5-1: config 0 descriptor?? [ 1824.072828][ T5826] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1824.093443][ T5826] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1824.273446][ T5826] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1824.312752][ T5826] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1824.342496][ T5826] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1824.376954][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1824.415218][ T5826] usb 5-1: USB disconnect, device number 82 [ 1824.898242][T24849] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1825.077454][T24849] usb 2-1: Using ep0 maxpacket: 16 [ 1825.101996][T24849] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.126754][T24849] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.137814][T24849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1825.144863][T24849] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1825.154802][T24849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.186448][T24849] usb 2-1: config 0 descriptor?? [ 1825.761495][T32225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.812254][T32225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.063527][T24849] usbhid 2-1:0.0: can't add hid device: -71 [ 1826.083836][T24849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1826.160945][T24849] usb 2-1: USB disconnect, device number 72 [ 1827.575844][T32273] syz_tun: entered promiscuous mode [ 1828.277937][ T5826] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1828.477453][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 1828.494671][ T5826] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 1828.527468][ T5826] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1828.567424][ T5826] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1828.589767][ T5826] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1828.641930][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.683221][ T5826] usb 3-1: Product: syz [ 1828.702165][ T5826] usb 3-1: Manufacturer: syz [ 1828.721932][ T5826] usb 3-1: SerialNumber: syz [ 1828.748202][T29604] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1828.907672][T29604] usb 4-1: device descriptor read/64, error -71 [ 1829.022731][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input191 [ 1829.063456][ T5185] bcm5974 3-1:1.0: could not read from device [ 1829.091983][ T5185] bcm5974 3-1:1.0: could not read from device [ 1829.120879][ T5826] usb 3-1: USB disconnect, device number 78 [ 1829.207442][T29604] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1829.323604][T32298] syz_tun: left allmulticast mode [ 1829.364664][T32298] team0: Port device syz_tun removed [ 1829.377471][T29604] usb 4-1: device descriptor read/64, error -71 [ 1829.518096][T29604] usb usb4-port1: attempt power cycle [ 1829.837683][T24849] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1829.867520][T29604] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1829.915649][T29604] usb 4-1: device descriptor read/8, error -71 [ 1830.030654][T24849] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1830.076344][T24849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.115716][T24849] usb 2-1: config 0 descriptor?? [ 1830.169009][T29604] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1830.198186][T29604] usb 4-1: device descriptor read/8, error -71 [ 1830.315322][T29604] usb usb4-port1: unable to enumerate USB device [ 1830.649514][T24849] hackrf 2-1:0.0: Board ID: 00 [ 1830.670427][T24849] hackrf 2-1:0.0: Firmware version: [ 1830.716962][T24849] hackrf 2-1:0.0: Registered as swradio24 [ 1830.742784][T24849] videodev: could not get a free minor [ 1830.767755][T24849] hackrf 2-1:0.0: Failed to register as video device (-23) [ 1830.810792][T24849] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 1830.883651][T29604] usb 2-1: USB disconnect, device number 73 [ 1831.787920][T29604] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1831.856514][T32356] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1831.957524][T29604] usb 4-1: Using ep0 maxpacket: 8 [ 1831.987027][T29604] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1832.016400][T29604] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1832.057460][T31582] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1832.059818][T29604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1832.117625][T29604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1832.147118][T29604] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1832.211621][T29604] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1832.252078][T29604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.267580][T31582] usb 2-1: Using ep0 maxpacket: 16 [ 1832.282513][T31582] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.326429][T31582] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.373690][T31582] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1832.402427][T31582] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1832.434407][T31582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.471864][T31582] usb 2-1: config 0 descriptor?? [ 1832.549532][T29604] usb 4-1: GET_CAPABILITIES returned 0 [ 1832.557554][T24849] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1832.576437][T29604] usbtmc 4-1:16.0: can't read capabilities [ 1832.737687][T24849] usb 1-1: device descriptor read/64, error -71 [ 1832.829331][T32340] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1832.854107][T31581] usb 4-1: USB disconnect, device number 81 [ 1832.954945][T32351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.979639][T32351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.039931][T24849] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1833.187523][T24849] usb 1-1: device descriptor read/64, error -71 [ 1833.203715][T31582] usbhid 2-1:0.0: can't add hid device: -71 [ 1833.220601][T31582] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1833.257760][T31582] usb 2-1: USB disconnect, device number 74 [ 1833.328485][T24849] usb usb1-port1: attempt power cycle [ 1833.348841][T32371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1833.603404][T32378] tipc: Enabled bearer , priority 0 [ 1833.644660][T32378] tipc: Resetting bearer [ 1833.667458][T24849] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1833.699001][T24849] usb 1-1: device descriptor read/8, error -71 [ 1833.797613][T29604] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1833.967496][T24849] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1833.976938][T29604] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1833.994172][T24849] usb 1-1: device descriptor read/8, error -71 [ 1834.008494][T29604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.040313][T29604] usb 5-1: config 0 descriptor?? [ 1834.118213][T24849] usb usb1-port1: unable to enumerate USB device [ 1834.197677][T28040] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1834.387514][T28040] usb 3-1: Using ep0 maxpacket: 8 [ 1834.401839][T28040] usb 3-1: no configurations [ 1834.406555][T28040] usb 3-1: can't read configurations, error -22 [ 1834.487567][T29604] hackrf 5-1:0.0: Board ID: 00 [ 1834.493525][T29604] hackrf 5-1:0.0: Firmware version: [ 1834.511630][T29604] hackrf 5-1:0.0: Registered as swradio24 [ 1834.537303][T29604] videodev: could not get a free minor [ 1834.554507][T29604] hackrf 5-1:0.0: Failed to register as video device (-23) [ 1834.567749][T28040] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1834.606857][T29604] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 1834.711112][T24849] usb 5-1: USB disconnect, device number 83 [ 1834.737458][T28040] usb 3-1: Using ep0 maxpacket: 8 [ 1834.751700][T28040] usb 3-1: no configurations [ 1834.756358][T28040] usb 3-1: can't read configurations, error -22 [ 1834.781289][T28040] usb usb3-port1: attempt power cycle [ 1835.109805][T32404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8452'. [ 1835.147719][T28040] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1835.177209][T32406] loop2: detected capacity change from 0 to 7 [ 1835.192251][T31789] Dev loop2: unable to read RDB block 7 [ 1835.194522][T28040] usb 3-1: Using ep0 maxpacket: 8 [ 1835.198445][T31789] loop2: unable to read partition table [ 1835.208328][T28040] usb 3-1: no configurations [ 1835.213054][T31789] loop2: partition table beyond EOD, truncated [ 1835.219735][T28040] usb 3-1: can't read configurations, error -22 [ 1835.240565][T32406] Dev loop2: unable to read RDB block 7 [ 1835.249761][T32406] loop2: unable to read partition table [ 1835.263653][T32406] loop2: partition table beyond EOD, truncated [ 1835.283570][T32406] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1835.357837][T28040] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1835.408613][T28040] usb 3-1: Using ep0 maxpacket: 8 [ 1835.418941][T28040] usb 3-1: no configurations [ 1835.431073][T28040] usb 3-1: can't read configurations, error -22 [ 1835.446171][T28040] usb usb3-port1: unable to enumerate USB device [ 1835.613037][T32418] syzkaller0: entered promiscuous mode [ 1835.624022][T32418] syzkaller0: entered allmulticast mode [ 1835.940579][T32430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8463'. [ 1835.978173][T32432] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 1836.000327][T32432] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 1836.317640][T24849] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1836.337065][T32439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1836.420475][T32440] trusted_key: encrypted_key: master key parameter 'O/Љ1ڼ [ 1836.420475][T32440] J/>h RT' is invalid [ 1836.499343][T24849] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1836.519859][T24849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.550448][T24849] usb 4-1: config 0 descriptor?? [ 1837.025553][T24849] hackrf 4-1:0.0: Board ID: 00 [ 1837.041361][T24849] hackrf 4-1:0.0: Firmware version: [ 1837.115101][T24849] hackrf 4-1:0.0: Registered as swradio24 [ 1837.147422][T24849] videodev: could not get a free minor [ 1837.168129][T24849] hackrf 4-1:0.0: Failed to register as video device (-23) [ 1837.240645][T24849] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 1837.313379][T24849] usb 4-1: USB disconnect, device number 82 [ 1837.709723][T32458] loop2: detected capacity change from 0 to 7 [ 1837.728354][T31789] Dev loop2: unable to read RDB block 7 [ 1837.734172][T31789] loop2: unable to read partition table [ 1837.740975][T31789] loop2: partition table beyond EOD, truncated [ 1837.753178][T32458] Dev loop2: unable to read RDB block 7 [ 1837.770234][T32458] loop2: unable to read partition table [ 1837.776311][T32458] loop2: partition table beyond EOD, truncated [ 1837.795165][T32458] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1837.830733][ T5200] Dev loop2: unable to read RDB block 7 [ 1837.843208][ T5200] loop2: unable to read partition table [ 1837.858150][ T5200] loop2: partition table beyond EOD, truncated [ 1838.372415][T32473] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1838.401635][T32473] syzkaller1: linktype set to 823 [ 1838.522421][T24849] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1838.576712][T32479] fuse: Bad value for 'fd' [ 1838.689608][T24849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.723712][T24849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1838.749137][T24849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1838.762335][T24849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1838.822698][T24849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1838.878183][T24849] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1838.896367][T24849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1838.910120][T24849] usb 5-1: Product: syz [ 1838.914614][T24849] usb 5-1: Manufacturer: syz [ 1838.921587][T24849] usb 5-1: SerialNumber: syz [ 1838.950939][T24849] usb 5-1: config 0 descriptor?? [ 1839.207436][T24849] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1839.214315][T24849] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1839.402601][T24849] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1839.449065][T24849] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1839.485577][T32500] netlink: 'syz.3.8489': attribute type 2 has an invalid length. [ 1839.520904][T24849] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1839.625845][T24849] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1840.427986][T24849] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1840.451242][T24849] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1840.487939][T24849] usb 5-1: USB disconnect, device number 84 [ 1840.614990][T32521] tipc: Resetting bearer [ 1840.751381][T32526] netlink: 'syz.3.8500': attribute type 2 has an invalid length. [ 1841.488121][T24849] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1841.680986][T24849] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1841.692229][T24849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.711444][T24849] usb 5-1: config 0 descriptor?? [ 1841.853792][T32562] IPVS: You probably need to specify IP address on multicast interface. [ 1841.886213][T32562] IPVS: Error connecting to the multicast addr [ 1842.257914][T24849] hackrf 5-1:0.0: Board ID: 00 [ 1842.360613][T24849] hackrf 5-1:0.0: Firmware version: [ 1842.384911][T24849] hackrf 5-1:0.0: Registered as swradio24 [ 1842.400318][T24849] videodev: could not get a free minor [ 1842.420546][T24849] hackrf 5-1:0.0: Failed to register as video device (-23) [ 1842.486222][T24849] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 1842.516637][T32563] ================================================================== [ 1842.524788][T32563] BUG: KASAN: slab-use-after-free in vb2_fop_release+0xf0/0x200 [ 1842.532625][T32563] Read of size 8 at addr ffff88807c128568 by task v4l_id/32563 [ 1842.540249][T32563] [ 1842.542569][T32563] CPU: 0 UID: 0 PID: 32563 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1842.542587][T32563] Tainted: [L]=SOFTLOCKUP [ 1842.542592][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1842.542600][T32563] Call Trace: [ 1842.542606][T32563] [ 1842.542612][T32563] dump_stack_lvl+0x189/0x250 [ 1842.542630][T32563] ? __virt_addr_valid+0x1c8/0x5c0 [ 1842.542647][T32563] ? rcu_is_watching+0x15/0xb0 [ 1842.542662][T32563] ? __kasan_check_byte+0x12/0x40 [ 1842.542676][T32563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1842.542690][T32563] ? rcu_is_watching+0x15/0xb0 [ 1842.542704][T32563] ? lock_release+0x4b/0x3b0 [ 1842.542716][T32563] ? __virt_addr_valid+0x1c8/0x5c0 [ 1842.542732][T32563] ? __virt_addr_valid+0x4a5/0x5c0 [ 1842.542748][T32563] print_report+0xca/0x240 [ 1842.542760][T32563] ? vb2_fop_release+0xf0/0x200 [ 1842.542776][T32563] kasan_report+0x118/0x150 [ 1842.542790][T32563] ? vb2_fop_release+0xf0/0x200 [ 1842.542807][T32563] vb2_fop_release+0xf0/0x200 [ 1842.542824][T32563] v4l2_release+0x250/0x370 [ 1842.542840][T32563] ? __pfx_v4l2_release+0x10/0x10 [ 1842.542856][T32563] __fput+0x44c/0xa70 [ 1842.542874][T32563] fput_close_sync+0x113/0x220 [ 1842.542890][T32563] ? __pfx_fput_close_sync+0x10/0x10 [ 1842.542907][T32563] ? do_raw_spin_unlock+0x122/0x240 [ 1842.542925][T32563] __x64_sys_close+0x7f/0x110 [ 1842.542942][T32563] do_syscall_64+0xfa/0xf80 [ 1842.542961][T32563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.542973][T32563] ? clear_bhb_loop+0x60/0xb0 [ 1842.542987][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.542999][T32563] RIP: 0033:0x7fded7ca7407 [ 1842.543012][T32563] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1842.543023][T32563] RSP: 002b:00007fffed4534c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1842.543038][T32563] RAX: ffffffffffffffda RBX: 00007fded83c7880 RCX: 00007fded7ca7407 [ 1842.543047][T32563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1842.543055][T32563] RBP: 00007fded83c76e8 R08: 0000000000000000 R09: 0000000000000000 [ 1842.543063][T32563] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1842.543071][T32563] R13: 00007fffed4536f0 R14: 00007fded852e000 R15: 000055c4586174d8 [ 1842.543083][T32563] [ 1842.543088][T32563] [ 1842.775694][T32563] Allocated by task 24849: [ 1842.780172][T32563] kasan_save_track+0x3e/0x80 [ 1842.784845][T32563] __kasan_kmalloc+0x93/0xb0 [ 1842.789426][T32563] __kmalloc_cache_noprof+0x3e2/0x700 [ 1842.794794][T32563] hackrf_probe+0xda/0x1390 [ 1842.799289][T32563] usb_probe_interface+0x668/0xc90 [ 1842.804393][T32563] really_probe+0x26d/0xad0 [ 1842.809067][T32563] __driver_probe_device+0x18c/0x320 [ 1842.814352][T32563] driver_probe_device+0x4f/0x240 [ 1842.819373][T32563] __device_attach_driver+0x279/0x430 [ 1842.824912][T32563] bus_for_each_drv+0x251/0x2e0 [ 1842.829759][T32563] __device_attach+0x2b8/0x430 [ 1842.834608][T32563] device_initial_probe+0xa1/0xd0 [ 1842.839625][T32563] bus_probe_device+0x12a/0x220 [ 1842.844511][T32563] device_add+0x7b6/0xb80 [ 1842.848845][T32563] usb_set_configuration+0x1a87/0x2110 [ 1842.854294][T32563] usb_generic_driver_probe+0x8d/0x150 [ 1842.859749][T32563] usb_probe_device+0x1c4/0x3c0 [ 1842.864595][T32563] really_probe+0x26d/0xad0 [ 1842.869098][T32563] __driver_probe_device+0x18c/0x320 [ 1842.874389][T32563] driver_probe_device+0x4f/0x240 [ 1842.879584][T32563] __device_attach_driver+0x279/0x430 [ 1842.884966][T32563] bus_for_each_drv+0x251/0x2e0 [ 1842.889828][T32563] __device_attach+0x2b8/0x430 [ 1842.894584][T32563] device_initial_probe+0xa1/0xd0 [ 1842.899602][T32563] bus_probe_device+0x12a/0x220 [ 1842.904453][T32563] device_add+0x7b6/0xb80 [ 1842.908775][T32563] usb_new_device+0xa39/0x1720 [ 1842.913536][T32563] hub_event+0x29b1/0x4ef0 [ 1842.917946][T32563] process_scheduled_works+0xad1/0x1770 [ 1842.923489][T32563] worker_thread+0x8a0/0xda0 [ 1842.928108][T32563] kthread+0x711/0x8a0 [ 1842.932173][T32563] ret_from_fork+0x599/0xb30 [ 1842.936768][T32563] ret_from_fork_asm+0x1a/0x30 [ 1842.941571][T32563] [ 1842.943887][T32563] Freed by task 24849: [ 1842.947942][T32563] kasan_save_track+0x3e/0x80 [ 1842.952651][T32563] kasan_save_free_info+0x46/0x50 [ 1842.957758][T32563] __kasan_slab_free+0x5c/0x80 [ 1842.962544][T32563] kfree+0x1c0/0x660 [ 1842.966444][T32563] hackrf_probe+0xd98/0x1390 [ 1842.971047][T32563] usb_probe_interface+0x668/0xc90 [ 1842.976149][T32563] really_probe+0x26d/0xad0 [ 1842.980661][T32563] __driver_probe_device+0x18c/0x320 [ 1842.985940][T32563] driver_probe_device+0x4f/0x240 [ 1842.990980][T32563] __device_attach_driver+0x279/0x430 [ 1842.996359][T32563] bus_for_each_drv+0x251/0x2e0 [ 1843.001203][T32563] __device_attach+0x2b8/0x430 [ 1843.005959][T32563] device_initial_probe+0xa1/0xd0 [ 1843.011161][T32563] bus_probe_device+0x12a/0x220 [ 1843.016027][T32563] device_add+0x7b6/0xb80 [ 1843.020468][T32563] usb_set_configuration+0x1a87/0x2110 [ 1843.025929][T32563] usb_generic_driver_probe+0x8d/0x150 [ 1843.031387][T32563] usb_probe_device+0x1c4/0x3c0 [ 1843.036233][T32563] really_probe+0x26d/0xad0 [ 1843.040757][T32563] __driver_probe_device+0x18c/0x320 [ 1843.046062][T32563] driver_probe_device+0x4f/0x240 [ 1843.051084][T32563] __device_attach_driver+0x279/0x430 [ 1843.056485][T32563] bus_for_each_drv+0x251/0x2e0 [ 1843.061464][T32563] __device_attach+0x2b8/0x430 [ 1843.066306][T32563] device_initial_probe+0xa1/0xd0 [ 1843.071384][T32563] bus_probe_device+0x12a/0x220 [ 1843.076246][T32563] device_add+0x7b6/0xb80 [ 1843.080594][T32563] usb_new_device+0xa39/0x1720 [ 1843.085382][T32563] hub_event+0x29b1/0x4ef0 [ 1843.089803][T32563] process_scheduled_works+0xad1/0x1770 [ 1843.095347][T32563] worker_thread+0x8a0/0xda0 [ 1843.099942][T32563] kthread+0x711/0x8a0 [ 1843.104012][T32563] ret_from_fork+0x599/0xb30 [ 1843.108597][T32563] ret_from_fork_asm+0x1a/0x30 [ 1843.113361][T32563] [ 1843.115675][T32563] The buggy address belongs to the object at ffff88807c128000 [ 1843.115675][T32563] which belongs to the cache kmalloc-8k of size 8192 [ 1843.129737][T32563] The buggy address is located 1384 bytes inside of [ 1843.129737][T32563] freed 8192-byte region [ffff88807c128000, ffff88807c12a000) [ 1843.143698][T32563] [ 1843.146022][T32563] The buggy address belongs to the physical page: [ 1843.152435][T32563] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c128 [ 1843.161286][T32563] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1843.169789][T32563] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1843.177702][T32563] page_type: f5(slab) [ 1843.181680][T32563] raw: 00fff00000000040 ffff88813ffa7280 ffffea0001620400 0000000000000003 [ 1843.190256][T32563] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1843.198882][T32563] head: 00fff00000000040 ffff88813ffa7280 ffffea0001620400 0000000000000003 [ 1843.207577][T32563] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1843.216332][T32563] head: 00fff00000000003 ffffea0001f04a01 00000000ffffffff 00000000ffffffff [ 1843.225082][T32563] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1843.233776][T32563] page dumped because: kasan: bad access detected [ 1843.240275][T32563] page_owner tracks the page as allocated [ 1843.246091][T32563] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 32159, tgid 32158 (syz.4.8354), ts 1822140066340, free_ts 1822120065859 [ 1843.267105][T32563] post_alloc_hook+0x234/0x290 [ 1843.271880][T32563] get_page_from_freelist+0x2365/0x2440 [ 1843.277431][T32563] __alloc_frozen_pages_noprof+0x181/0x370 [ 1843.283234][T32563] alloc_pages_mpol+0x232/0x4a0 [ 1843.288251][T32563] allocate_slab+0x86/0x3b0 [ 1843.292748][T32563] ___slab_alloc+0xf2b/0x1960 [ 1843.297414][T32563] __slab_alloc+0x65/0x100 [ 1843.301822][T32563] __kmalloc_cache_noprof+0x41e/0x700 [ 1843.307187][T32563] tipc_mon_create+0xc2/0x490 [ 1843.311877][T32563] __tipc_nl_bearer_enable+0xe16/0x13f0 [ 1843.317425][T32563] tipc_nl_compat_doit+0x3bc/0x5f0 [ 1843.322555][T32563] tipc_nl_compat_recv+0x83c/0xbe0 [ 1843.327661][T32563] genl_family_rcv_msg_doit+0x215/0x300 [ 1843.333225][T32563] genl_rcv_msg+0x60e/0x790 [ 1843.337723][T32563] netlink_rcv_skb+0x208/0x470 [ 1843.342477][T32563] genl_rcv+0x28/0x40 [ 1843.346454][T32563] page last free pid 29090 tgid 29090 stack trace: [ 1843.352948][T32563] __free_frozen_pages+0xbc8/0xd30 [ 1843.358055][T32563] __slab_free+0x21b/0x2a0 [ 1843.362562][T32563] qlist_free_all+0x97/0x100 [ 1843.367144][T32563] kasan_quarantine_reduce+0x148/0x160 [ 1843.372603][T32563] __kasan_slab_alloc+0x22/0x80 [ 1843.377450][T32563] kmem_cache_alloc_noprof+0x37d/0x710 [ 1843.382918][T32563] ptlock_alloc+0x20/0x70 [ 1843.387239][T32563] pte_alloc_one+0x7a/0x370 [ 1843.391734][T32563] __pte_alloc+0x25/0x1a0 [ 1843.396050][T32563] copy_pmd_range+0x76cc/0x7e00 [ 1843.400889][T32563] copy_page_range+0xb88/0x11d0 [ 1843.405839][T32563] dup_mmap+0xf4a/0x1b80 [ 1843.410065][T32563] copy_mm+0x13c/0x4b0 [ 1843.414127][T32563] copy_process+0x165d/0x3950 [ 1843.418796][T32563] kernel_clone+0x21e/0x820 [ 1843.423309][T32563] __x64_sys_clone+0x18b/0x1e0 [ 1843.428071][T32563] [ 1843.430384][T32563] Memory state around the buggy address: [ 1843.435999][T32563] ffff88807c128400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1843.444044][T32563] ffff88807c128480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1843.452095][T32563] >ffff88807c128500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1843.460142][T32563] ^ [ 1843.467589][T32563] ffff88807c128580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1843.475652][T32563] ffff88807c128600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1843.483712][T32563] ================================================================== [ 1843.498005][T24849] usb 5-1: USB disconnect, device number 85 [ 1843.752100][T32563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1843.759368][T32563] CPU: 0 UID: 0 PID: 32563 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.770094][T32563] Tainted: [L]=SOFTLOCKUP [ 1843.774441][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1843.784516][T32563] Call Trace: [ 1843.787807][T32563] [ 1843.790917][T32563] dump_stack_lvl+0x99/0x250 [ 1843.795518][T32563] ? __asan_memcpy+0x40/0x70 [ 1843.800111][T32563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1843.805313][T32563] ? __pfx__printk+0x10/0x10 [ 1843.810002][T32563] vpanic+0x237/0x6d0 [ 1843.813989][T32563] ? __pfx_vpanic+0x10/0x10 [ 1843.818498][T32563] ? preempt_schedule_common+0x83/0xd0 [ 1843.823966][T32563] ? preempt_schedule+0xae/0xc0 [ 1843.828826][T32563] panic+0xb9/0xc0 [ 1843.832557][T32563] ? __pfx_panic+0x10/0x10 [ 1843.836980][T32563] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1843.843314][T32563] ? vb2_fop_release+0xf0/0x200 [ 1843.848259][T32563] check_panic_on_warn+0x89/0xb0 [ 1843.853205][T32563] ? vb2_fop_release+0xf0/0x200 [ 1843.858063][T32563] end_report+0x6f/0x140 [ 1843.862321][T32563] kasan_report+0x129/0x150 [ 1843.866827][T32563] ? vb2_fop_release+0xf0/0x200 [ 1843.871689][T32563] vb2_fop_release+0xf0/0x200 [ 1843.876374][T32563] v4l2_release+0x250/0x370 [ 1843.880881][T32563] ? __pfx_v4l2_release+0x10/0x10 [ 1843.885915][T32563] __fput+0x44c/0xa70 [ 1843.889917][T32563] fput_close_sync+0x113/0x220 [ 1843.894690][T32563] ? __pfx_fput_close_sync+0x10/0x10 [ 1843.900068][T32563] ? do_raw_spin_unlock+0x122/0x240 [ 1843.905280][T32563] __x64_sys_close+0x7f/0x110 [ 1843.909967][T32563] do_syscall_64+0xfa/0xf80 [ 1843.914482][T32563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.920555][T32563] ? clear_bhb_loop+0x60/0xb0 [ 1843.925238][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.931134][T32563] RIP: 0033:0x7fded7ca7407 [ 1843.935557][T32563] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1843.955172][T32563] RSP: 002b:00007fffed4534c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1843.963595][T32563] RAX: ffffffffffffffda RBX: 00007fded83c7880 RCX: 00007fded7ca7407 [ 1843.971585][T32563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1843.979580][T32563] RBP: 00007fded83c76e8 R08: 0000000000000000 R09: 0000000000000000 [ 1843.987577][T32563] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1843.995578][T32563] R13: 00007fffed4536f0 R14: 00007fded852e000 R15: 000055c4586174d8 [ 1844.003559][T32563] [ 1844.006852][T32563] Kernel Offset: disabled [ 1844.011176][T32563] Rebooting in 86400 seconds..