last executing test programs: 6m10.215829889s ago: executing program 2 (id=4175): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 6m10.109888509s ago: executing program 2 (id=4176): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x80000}) close_range(r0, 0xffffffffffffffff, 0x0) 6m10.055838032s ago: executing program 2 (id=4177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 6m9.921370734s ago: executing program 2 (id=4180): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 6m8.981750627s ago: executing program 2 (id=4187): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc42, 0x4}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 6m8.837928888s ago: executing program 2 (id=4188): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffff61, 0x800, &(0x7f0000000140)={0xa, 0x87, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) 6m8.576856854s ago: executing program 32 (id=4188): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffff61, 0x800, &(0x7f0000000140)={0xa, 0x87, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) 6m6.060460966s ago: executing program 4 (id=4214): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_io_uring_setup(0x118d, &(0x7f00000001c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 6m5.640774499s ago: executing program 4 (id=4217): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r1, 0x3, 0x3, 0x8c5, 0x6, 0x2, 0x6d5, 0x1000, {0x0, @in6={{0xa, 0x4e21, 0xe846, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, 0xcc, 0xffff1039, 0x9, 0xfffffffc, 0x6}}, &(0x7f0000000140)=0xb0) 6m5.441043523s ago: executing program 4 (id=4219): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ba1, 0x18e3, 0x0, 0x0, 0x0) 6m5.323382636s ago: executing program 4 (id=4221): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 6m4.24503076s ago: executing program 4 (id=4224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f0000000700)=[{r2, 0x2289}], 0x1, 0x0, 0x0, 0x0) 6m3.627944033s ago: executing program 4 (id=4230): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffff, 0x2}, 0x1c) 6m3.206850651s ago: executing program 33 (id=4230): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffff, 0x2}, 0x1c) 2m48.648935612s ago: executing program 5 (id=6336): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m48.56269964s ago: executing program 5 (id=6338): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="00000000000000001c00128009000100766c616e", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m48.455175762s ago: executing program 5 (id=6341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x78, 0xda17, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "66d2dad153c9d81291e53a1ee96350e0"}, @timestamp={0x8, 0xa, 0xc4, 0x3ff}, @fastopen={0x22, 0xe, "ec876a521cf0162791f002ab"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x7, "aa8db7f44b"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 2m48.374714488s ago: executing program 5 (id=6343): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 2m48.262884809s ago: executing program 5 (id=6345): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000335d09b20"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) 2m47.998358951s ago: executing program 5 (id=6349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x4, 0x4, 0x3, 0x0, 0x81, 0x95, 0x28, 0x3c, 0x89, 0x5, 0x4, 0x0, 0x0, 0x8, 0x9, 0x2, 0x17, 0x6, 0x0, '\x00', 0x8, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.692793823s ago: executing program 34 (id=6349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x4, 0x4, 0x3, 0x0, 0x81, 0x95, 0x28, 0x3c, 0x89, 0x5, 0x4, 0x0, 0x0, 0x8, 0x9, 0x2, 0x17, 0x6, 0x0, '\x00', 0x8, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.964735994s ago: executing program 0 (id=7918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x1}, @mptcp=@ack={0x1e, 0x5, 0x83, 0x4, "17"}]}}}}}}}}, 0x0) 7.947278273s ago: executing program 0 (id=7919): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 7.771296494s ago: executing program 0 (id=7922): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x8070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x820) 7.69107797s ago: executing program 0 (id=7924): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 7.574879392s ago: executing program 0 (id=7928): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.176030421s ago: executing program 0 (id=7931): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 6.951027827s ago: executing program 35 (id=7931): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 3.485326449s ago: executing program 8 (id=7961): flock(0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) 3.264721872s ago: executing program 8 (id=7963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x800003b, r1, 0x0) splice(r0, &(0x7f0000000040)=0x2, r1, 0x0, 0x889, 0x8) 3.176719641s ago: executing program 8 (id=7964): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.516871954s ago: executing program 7 (id=7969): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de8500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_alloc_percpu_fail\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) 2.382102559s ago: executing program 7 (id=7970): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents64(r1, &(0x7f0000000100)=""/134, 0x86) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.313122406s ago: executing program 7 (id=7971): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a00)={r2, 0x74, "2b7e3993111bd9c1257fa53d493932aa32a332df50b8f8c88164f88b7de3b20b7f9165a984643c53b9d5ea09fd459a203735483c4c4d6ce756ec8b0258f993c97f0e4f97af346e16f9ba35fc85ee108e1f3780ba0be639f3cf45eea70b1b7be29f20f771b4f27067a1081a83d22c6e03d41f4eb6"}, &(0x7f0000000100)=0x7c) 2.259280793s ago: executing program 3 (id=7972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.188572903s ago: executing program 7 (id=7973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$alg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011) 2.113667322s ago: executing program 7 (id=7974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='K', 0x1}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000680)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c98161e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee45c1ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="c0fc27ec23129a11eb6b42fdbae11ba76778a7b68d4fd5eac6eabb8ae3fb8d929d9efc398d8fb05e07b2b90b7aada90b502e30adda417b88dd96e6eb92b60ae25ba45f67515a08877b69ac930ec6de5fe106b7a58f8e86202b461e90f1f1d1eb0954fcf5327052179f311e665ad971f2c307975d17c6c3c79f80d36374ce40c5b1025e55f870d90c6e223bdf4e6e408cfd50093f05a5d89a404f292d269ec05038a08e25654936d31afb1d99d996a8faa3f193", 0xb3}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}, {&(0x7f0000000080)="0819f1ac7c", 0x5}], 0x5}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567", 0x36}], 0x1}}], 0x5, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.076008552s ago: executing program 3 (id=7975): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) 2.034310399s ago: executing program 7 (id=7976): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.833535302s ago: executing program 3 (id=7979): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.268994249s ago: executing program 3 (id=7980): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x800}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 1.201027943s ago: executing program 8 (id=7982): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfffe}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.123128207s ago: executing program 3 (id=7983): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 991.395251ms ago: executing program 3 (id=7985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x43) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x5, "db7667656c"}, 0x0}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 578.398335ms ago: executing program 1 (id=7995): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 573.080687ms ago: executing program 6 (id=7996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='K', 0x1}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000680)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c98161e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee45c1ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="c0fc27ec23129a11eb6b42fdbae11ba76778a7b68d4fd5eac6eabb8ae3fb8d929d9efc398d8fb05e07b2b90b7aada90b502e30adda417b88dd96e6eb92b60ae25ba45f67515a08877b69ac930ec6de5fe106b7a58f8e86202b461e90f1f1d1eb0954fcf5327052179f311e665ad971f2c307975d17c6c3c79f80d36374ce40c5b1025e55f870d90c6e223bdf4e6e408cfd50093f05a5d89a404f292d269ec05038a08e25654936d31afb1d99d996a8faa3f193", 0xb3}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}, {&(0x7f0000000080)="0819f1ac7c", 0x5}], 0x5}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b88879", 0x1b}], 0x1}}], 0x5, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 464.803288ms ago: executing program 6 (id=7997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0xb, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 464.502448ms ago: executing program 1 (id=7998): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x10000007, 0x1, 0x0, 0x6, 0x1, 0x1}, 0x20) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020480) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 372.203207ms ago: executing program 1 (id=7999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 353.969795ms ago: executing program 6 (id=8000): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={{}, "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"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002ac73797a3100000000090001007379"], 0xc4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) 244.741271ms ago: executing program 1 (id=8001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 244.395428ms ago: executing program 8 (id=8002): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 187.099947ms ago: executing program 6 (id=8003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 149.32948ms ago: executing program 1 (id=8004): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x106, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r2, 0x2}}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) 93.617254ms ago: executing program 8 (id=8005): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 48.23271ms ago: executing program 6 (id=8006): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x65b1, 0xb2) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='+', 0x1) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 48.026002ms ago: executing program 1 (id=8007): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x1, 0x1}, 0x1c) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x5}, 0x10) 0s ago: executing program 6 (id=8008): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 649.645729][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 649.657087][ T5906] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 649.676530][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.684551][ T5906] usb 4-1: Product: syz [ 649.716771][ T5906] usb 4-1: Manufacturer: syz [ 649.721401][ T5906] usb 4-1: SerialNumber: syz [ 649.743280][ T5906] usb 4-1: config 0 descriptor?? [ 649.759519][ T5906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 649.779414][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 649.807450][ T5906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 649.816143][ T5906] usb 4-1: media controller created [ 649.860748][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.985480][ T5906] DVB: Unable to find symbol tda10046_attach() [ 649.992807][ T5906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 650.010764][ T5906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 651.030052][ T5906] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 651.070012][ T5906] usb 4-1: USB disconnect, device number 102 [ 651.576587][T21743] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6459'. [ 651.611850][T21743] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6459'. [ 652.227299][ T8841] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 652.399814][ T8841] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 652.456473][ T8841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.476651][ T8841] usb 2-1: Product: syz [ 652.512069][ T8841] usb 2-1: Manufacturer: syz [ 652.536418][ T8841] usb 2-1: SerialNumber: syz [ 652.543720][ T8841] usb 2-1: config 0 descriptor?? [ 652.786025][ T8841] usb 2-1: USB disconnect, device number 119 [ 653.349704][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 653.363038][T21792] netlink: 'syz.3.6482': attribute type 13 has an invalid length. [ 653.856483][ T39] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 654.032165][ T39] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 654.052036][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.080037][ T39] usb 2-1: config 0 descriptor?? [ 655.362613][ T39] usb 2-1: Cannot set autoneg [ 655.364914][T21833] netlink: 'syz.3.6493': attribute type 3 has an invalid length. [ 655.378472][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6493'. [ 655.387834][ T39] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 655.446654][ T39] usb 2-1: USB disconnect, device number 120 [ 655.753620][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6497'. [ 655.770317][T21846] vlan2: entered promiscuous mode [ 655.775547][T21846] gretap0: entered promiscuous mode [ 656.120330][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6500'. [ 656.160374][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6500'. [ 656.192784][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6500'. [ 656.372749][T21866] netlink: 'syz.7.6504': attribute type 1 has an invalid length. [ 656.891591][T21897] veth1_to_bridge: entered promiscuous mode [ 656.919402][T21897] veth1_to_bridge: left promiscuous mode [ 657.247087][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6517'. [ 657.257976][ T8842] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 657.428645][ T8842] usb 4-1: Using ep0 maxpacket: 16 [ 657.441517][ T8842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.463294][ T8842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.484330][ T8842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.497796][ T8842] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.507000][ T8842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.526300][ T8842] usb 4-1: config 0 descriptor?? [ 658.010996][ T8842] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0099/input/input165 [ 658.112949][ T8842] microsoft 0003:045E:07DA.0099: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 658.174958][ T8842] usb 4-1: USB disconnect, device number 103 [ 658.302853][T21943] fido_id[21943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 658.901308][T21958] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.983996][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 659.035580][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 659.085493][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 659.576737][ T795] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 659.736557][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 659.746296][ T795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 659.769431][ T795] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 659.796490][ T795] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 659.807820][ T795] usb 4-1: Product: syz [ 659.812066][ T795] usb 4-1: Manufacturer: syz [ 659.827495][ T795] usb 4-1: SerialNumber: syz [ 659.844998][ T795] usb 4-1: config 0 descriptor?? [ 659.866107][T21966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 659.919152][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6538'. [ 660.120774][ T8842] usb 4-1: USB disconnect, device number 104 [ 660.447940][T21990] __nla_validate_parse: 1 callbacks suppressed [ 660.447959][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 660.472616][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 660.483534][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 661.422613][ T30] audit: type=1326 audit(1767661061.011:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.445084][ T30] audit: type=1326 audit(1767661061.011:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.474703][ T30] audit: type=1326 audit(1767661061.011:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.500080][ T30] audit: type=1326 audit(1767661061.011:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.527567][ T30] audit: type=1326 audit(1767661061.011:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.551470][ T30] audit: type=1326 audit(1767661061.011:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.574821][ T30] audit: type=1326 audit(1767661061.011:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.599274][ T30] audit: type=1326 audit(1767661061.011:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.624685][ T30] audit: type=1326 audit(1767661061.011:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.651508][ T30] audit: type=1326 audit(1767661061.011:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22036 comm="syz.1.6565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 661.938284][ T5962] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 661.958298][ T5977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.085537][ T5977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.128469][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.165125][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.179354][ T5977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.191816][ T5962] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 662.201345][ T5962] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 662.214450][ T5962] usb 2-1: Manufacturer: syz [ 662.231596][T22054] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.233062][ T5962] usb 2-1: config 0 descriptor?? [ 662.247039][T22054] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.257585][T22054] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.269239][T22054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.280413][T22054] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.344387][ T5977] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 662.355016][ T5977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.585428][ T5977] bridge_slave_1: left allmulticast mode [ 662.593039][ T5977] bridge_slave_1: left promiscuous mode [ 662.599130][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.609144][ T5977] bridge_slave_0: left allmulticast mode [ 662.614813][ T5977] bridge_slave_0: left promiscuous mode [ 662.620736][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.780839][ T5977] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 663.060134][ T5962] uclogic 0003:256C:006D.009A: interface is invalid, ignoring [ 663.130010][ T5977] bond2 (unregistering): (slave geneve2): Releasing active interface [ 663.303052][ T5962] usb 2-1: USB disconnect, device number 121 [ 663.632581][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.644247][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.654925][ T5977] bond0 (unregistering): Released all slaves [ 663.672670][ T5977] bond1 (unregistering): Released all slaves [ 663.921427][ T5977] bond2 (unregistering): Released all slaves [ 664.095728][ T5977] bond3 (unregistering): Released all slaves [ 664.119789][T22055] chnl_net:caif_netlink_parms(): no params data found [ 664.224544][T22085] io-wq is not configured for unbound workers [ 664.394835][ T5828] Bluetooth: hci2: command tx timeout [ 664.654423][T22055] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.662140][T22055] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.669869][T22055] bridge_slave_0: entered allmulticast mode [ 664.701352][T22055] bridge_slave_0: entered promiscuous mode [ 664.729740][T22055] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.737057][T22055] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.744425][T22055] bridge_slave_1: entered allmulticast mode [ 664.771078][T22055] bridge_slave_1: entered promiscuous mode [ 664.826106][ T5977] hsr_slave_0: left promiscuous mode [ 664.876920][ T5977] hsr_slave_1: left promiscuous mode [ 664.883039][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.921888][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.474567][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 665.529220][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 665.716440][ T8841] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 665.882529][ T8841] usb 2-1: Using ep0 maxpacket: 8 [ 665.902993][ T8841] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.913373][ T8841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.933332][ T8841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.943421][ T8841] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.974105][ T8841] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 666.001384][ T8841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.131492][T22119] netlink: 'syz.0.6590': attribute type 12 has an invalid length. [ 666.151628][T22055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.192645][T22055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.228075][ T8841] usb 2-1: GET_CAPABILITIES returned 0 [ 666.247545][ T8841] usbtmc 2-1:16.0: can't read capabilities [ 666.262540][T22055] team0: Port device team_slave_0 added [ 666.300549][T22055] team0: Port device team_slave_1 added [ 666.395985][T22055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.413751][T22055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.441594][T22055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.459797][ T5828] Bluetooth: hci2: command tx timeout [ 666.479965][T22055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.486739][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.496025][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.505192][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.514274][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.523400][T22055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.549551][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549612][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549655][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549698][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549910][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549952][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.549994][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.566691][T22055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.568427][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.666469][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.676022][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.722569][T22136] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 666.722631][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.738754][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.823747][ T5977] IPVS: stop unused estimator thread 0... [ 666.836273][T22055] hsr_slave_0: entered promiscuous mode [ 666.862736][T22055] hsr_slave_1: entered promiscuous mode [ 666.875410][ T129] usb 2-1: USB disconnect, device number 122 [ 666.886593][T22055] debugfs: 'hsr0' already exists in 'hsr' [ 666.903047][T22055] Cannot create hsr debugfs directory [ 667.711667][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6599'. [ 667.761644][T22164] Set syz1 is full, maxelem 0 reached [ 668.178574][T22055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.347002][T22055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.431035][T22055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.536549][ T5828] Bluetooth: hci2: command tx timeout [ 668.540475][T22055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.808332][T22055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.879384][T22055] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.925931][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.933185][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.984407][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.991645][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.173225][T22055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.573892][T22055] veth0_vlan: entered promiscuous mode [ 669.602824][T22055] veth1_vlan: entered promiscuous mode [ 669.679275][T22055] veth0_macvtap: entered promiscuous mode [ 669.679817][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 669.785643][T22055] veth1_macvtap: entered promiscuous mode [ 669.832118][T22055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.858225][T22055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.887225][ T3450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.903536][ T3450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.925734][ T3450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.949944][ T3450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.084518][T21503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.106179][T21503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.172015][T17617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.183494][T17617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.616628][ T5828] Bluetooth: hci2: command tx timeout [ 671.136098][T22278] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6632'. [ 671.146008][T22278] netlink: Unknown conntrack attr (0) [ 671.307640][T22286] binder: 22285:22286 ioctl c0306201 80000b40 returned -14 [ 671.334117][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6636'. [ 671.528409][T22299] netlink: 'syz.0.6641': attribute type 1 has an invalid length. [ 671.573692][T22299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.601377][T22302] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 671.614771][T22302] bond4: (slave batadv1): making interface the new active one [ 671.670209][T22302] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 672.115238][ T5962] hid_parser_main: 154 callbacks suppressed [ 672.115262][ T5962] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 672.148362][ T5962] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 672.499486][T22332] netlink: 'syz.3.6654': attribute type 4 has an invalid length. [ 672.565150][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 672.565169][ T30] audit: type=1326 audit(1767661072.141:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22334 comm="syz.6.6656" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f07539 code=0x0 [ 672.594931][T22336] netlink: 'syz.1.6655': attribute type 1 has an invalid length. [ 672.661898][T22336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.699825][T22339] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 672.730763][T22339] bond1: (slave batadv1): making interface the new active one [ 672.785617][T22339] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 673.086562][ T8841] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 673.267406][ T8841] usb 4-1: Using ep0 maxpacket: 8 [ 673.285617][ T8841] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 673.305418][ T8841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.325689][ T8841] usb 4-1: Product: syz [ 673.336069][ T8841] usb 4-1: Manufacturer: syz [ 673.364736][ T8841] usb 4-1: SerialNumber: syz [ 673.383411][ T8841] usb 4-1: config 0 descriptor?? [ 673.614681][ T8841] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 674.232206][ T8841] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 674.334456][ T8841] usb 4-1: USB disconnect, device number 105 [ 675.186451][ T8842] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 675.244127][T22416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6688'. [ 675.336803][ T8842] usb 4-1: Using ep0 maxpacket: 8 [ 675.351531][ T8842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.361619][ T8842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.372991][ T8842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.386661][ T8842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.400330][ T8842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.409872][ T8842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.631683][ T8842] usb 4-1: GET_CAPABILITIES returned 0 [ 675.637588][ T8842] usbtmc 4-1:16.0: can't read capabilities [ 675.869462][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.878618][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.887733][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.896934][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.928311][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.937459][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.946559][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.955682][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.971685][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.980823][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.989944][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.999049][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.009256][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.018381][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.027497][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.036623][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.050122][T22426] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 676.090000][ T795] usb 4-1: USB disconnect, device number 106 [ 676.969212][T22470] tipc: Started in network mode [ 676.976456][T22470] tipc: Node identity ac14142f, cluster identity 4711 [ 676.984071][T22470] tipc: New replicast peer: 0.0.0.0 [ 676.992068][T22470] tipc: Enabled bearer , priority 10 [ 677.003634][T22470] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 677.569955][T22480] input: syz0 as /devices/virtual/input/input166 [ 677.700003][ T30] audit: type=1326 audit(1767661077.291:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22485 comm="syz.3.6717" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22539 code=0x0 [ 678.116634][ T795] tipc: Node number set to 2886997039 [ 678.974769][T22524] netdevsim netdevsim1: Direct firmware load for . [ 678.974769][T22524] failed with error -2 [ 679.006413][T22524] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 679.006413][T22524] [ 679.293838][ T795] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 679.476714][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 679.483448][ T795] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 679.495044][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 679.505826][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.515941][ T795] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.529163][ T795] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 679.538403][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.752636][ T795] usb 4-1: GET_CAPABILITIES returned 0 [ 679.765241][ T795] usbtmc 4-1:16.0: can't read capabilities [ 679.958666][T21518] usb 4-1: USB disconnect, device number 107 [ 680.046586][ T795] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 680.198356][ T795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 680.209613][ T795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 680.220742][ T795] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.230499][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.240910][T22535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 680.249097][T22535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 680.259859][ T795] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.450633][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6740'. [ 680.462817][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6740'. [ 680.478351][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6740'. [ 680.490712][ T8841] usb 2-1: USB disconnect, device number 123 [ 681.771729][ T30] audit: type=1326 audit(1767661081.361:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.1.6755" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f82539 code=0x0 [ 682.476506][ T8841] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 682.636542][ T8841] usb 4-1: Using ep0 maxpacket: 8 [ 682.644341][ T8841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.655355][ T8841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.665802][ T8841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.692928][ T8841] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.702342][T22592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6759'. [ 682.708117][ T8841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 682.725217][ T8841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.959901][ T8841] usb 4-1: GET_CAPABILITIES returned 0 [ 682.978515][ T8841] usbtmc 4-1:16.0: can't read capabilities [ 683.276793][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.286120][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.295188][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.304378][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.314214][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.323335][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.332429][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.341586][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.361986][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.371120][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.380196][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.389253][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.400371][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.409505][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.418656][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.427782][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 683.479135][ T30] audit: type=1326 audit(1767661083.071:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22611 comm="syz.7.6769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7fc00000 [ 683.513856][ T8841] usb 4-1: USB disconnect, device number 108 [ 683.629447][T22617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.638485][T22617] bridge0: port 3(bond2) entered blocking state [ 683.646153][T22617] bridge0: port 3(bond2) entered disabled state [ 683.653395][T22617] bond2: entered allmulticast mode [ 683.680997][T22617] bond2: entered promiscuous mode [ 683.687905][T22617] bridge0: port 3(bond2) entered blocking state [ 683.694331][T22617] bridge0: port 3(bond2) entered forwarding state [ 683.716482][T16038] bridge0: port 3(bond2) entered disabled state [ 684.010292][T22643] netlink: 'syz.1.6780': attribute type 4 has an invalid length. [ 684.072552][T22643] netlink: 'syz.1.6780': attribute type 4 has an invalid length. [ 684.286224][T22651] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 684.363401][ T30] audit: type=1326 audit(1767661083.941:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.406505][ T30] audit: type=1326 audit(1767661083.941:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.466505][ T30] audit: type=1326 audit(1767661083.941:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.506871][ T30] audit: type=1326 audit(1767661083.941:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.563894][ T30] audit: type=1326 audit(1767661083.941:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.610042][ T30] audit: type=1326 audit(1767661083.941:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.635843][ T30] audit: type=1326 audit(1767661083.951:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.694853][ T30] audit: type=1326 audit(1767661083.951:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 684.743542][ T30] audit: type=1326 audit(1767661083.951:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.7.6786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 685.406406][T22699] tls_set_device_offload: netdev not found [ 685.494602][T22703] syzkaller1: entered promiscuous mode [ 685.500646][T22703] syzkaller1: entered allmulticast mode [ 685.818550][T22713] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6810'. [ 685.856414][ T8842] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 686.030602][ T8842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.050805][ T8842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.063841][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.076084][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.085469][ T8842] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 686.094816][ T8842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.107436][ T8842] usb 2-1: config 0 descriptor?? [ 686.541881][ T8842] cm6533_jd 0003:0D8C:0022.009C: unknown main item tag 0x0 [ 686.555678][ T8842] cm6533_jd 0003:0D8C:0022.009C: unknown main item tag 0x0 [ 686.576783][ T8842] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.009C/input/input167 [ 686.644710][ T8842] cm6533_jd 0003:0D8C:0022.009C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 686.795883][T21518] usb 2-1: USB disconnect, device number 124 [ 687.188791][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6825'. [ 687.235223][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6826'. [ 687.656423][ T8832] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 687.806603][ T8832] usb 2-1: Using ep0 maxpacket: 8 [ 687.824377][ T8832] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 687.843871][ T8832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.874029][ T8832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 687.907873][ T8832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 687.920432][T22770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6835'. [ 687.938562][ T8832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.955287][ T8832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.966824][ T8832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.004068][T22770] vxlan0: entered promiscuous mode [ 688.027028][T21503] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.059190][T21503] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.073597][T21503] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.082983][T21503] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.210997][ T8832] usb 2-1: usb_control_msg returned -32 [ 688.216972][ T8832] usbtmc 2-1:16.0: can't read capabilities [ 688.239058][T22759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.268262][T22759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.301674][ T795] usb 2-1: USB disconnect, device number 125 [ 688.452702][T22781] kvm: user requested TSC rate below hardware speed [ 688.564164][T22784] input: syz0 as /devices/virtual/input/input168 [ 689.226407][T21518] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 689.389738][T21518] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 689.402380][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.423174][T21518] usb 2-1: config 0 descriptor?? [ 689.668599][T21518] usbhid 2-1:0.0: can't add hid device: -71 [ 689.674633][T21518] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 689.728009][T21518] usb 2-1: USB disconnect, device number 126 [ 692.337306][ T8832] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 692.506445][ T8832] usb 2-1: Using ep0 maxpacket: 16 [ 692.518249][ T8832] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.537215][ T8832] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.547391][ T8832] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.547436][ T8832] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 692.547461][ T8832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.558190][ T8832] usb 2-1: config 0 descriptor?? [ 692.916882][T22910] loop3: detected capacity change from 0 to 1 [ 692.924638][T22910] Dev loop3: unable to read RDB block 1 [ 692.930649][T22910] loop3: unable to read partition table [ 692.937476][T22910] loop3: partition table beyond EOD, truncated [ 692.943712][T22910] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 693.049990][ T8832] nzxt-smart2 0003:1E71:2009.009D: unknown main item tag 0x0 [ 693.066267][ T8832] nzxt-smart2 0003:1E71:2009.009D: unknown main item tag 0x0 [ 693.076155][ T8832] nzxt-smart2 0003:1E71:2009.009D: unknown main item tag 0x0 [ 693.095202][ T8832] nzxt-smart2 0003:1E71:2009.009D: unknown main item tag 0x0 [ 693.103560][ T8832] nzxt-smart2 0003:1E71:2009.009D: unknown main item tag 0x0 [ 693.122307][ T8832] nzxt-smart2 0003:1E71:2009.009D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 693.276948][ T8832] usb 2-1: USB disconnect, device number 127 [ 695.204675][T22963] gretap0: entered promiscuous mode [ 695.229828][T22963] vlan2: entered promiscuous mode [ 695.816492][ T8832] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 695.998985][ T8832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 696.008469][ T8832] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 696.018084][ T8832] usb 4-1: config 6 has no interface number 0 [ 696.024605][ T8832] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 696.038822][ T8832] usb 4-1: config 6 interface 200 has no altsetting 0 [ 696.057871][ T8832] usb 4-1: string descriptor 0 read error: -22 [ 696.074360][ T8832] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 696.095389][ T8832] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 696.121614][ T8832] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 696.418744][ T8832] dvb-usb: bulk message failed: -71 (3/0) [ 696.445937][ T8832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.480957][ T8832] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 696.496815][ T8832] usb 4-1: media controller created [ 696.533470][ T8832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.599612][ T8832] dvb-usb: bulk message failed: -71 (6/0) [ 696.626819][ T8832] dvb-usb: bulk message failed: -71 (6/0) [ 696.635276][ T8832] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 696.657719][ T8832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input169 [ 696.678261][ T795] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 696.691563][ T8832] dvb-usb: schedule remote query interval to 150 msecs. [ 696.699911][ T8832] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 696.713078][ T8832] usb 4-1: USB disconnect, device number 109 [ 696.818959][ T8832] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 696.866713][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 696.887403][ T795] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 696.916882][ T795] usb 2-1: config 0 has no interface number 0 [ 696.923051][ T795] usb 2-1: config 0 interface 12 has no altsetting 0 [ 696.948860][ T795] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 696.966477][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.974597][ T795] usb 2-1: Product: syz [ 696.982509][ T795] usb 2-1: Manufacturer: syz [ 696.987230][ T795] usb 2-1: SerialNumber: syz [ 696.998376][ T795] usb 2-1: config 0 descriptor?? [ 697.209652][T23006] loop7: detected capacity change from 0 to 7 [ 697.218156][T23006] Dev loop7: unable to read RDB block 7 [ 697.223888][T23006] loop7: AHDI p3 p4 [ 697.228154][T23006] loop7: partition table partially beyond EOD, truncated [ 697.235388][T23006] loop7: p3 start 1886353253 is beyond EOD, truncated [ 697.247575][ T8832] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 697.416546][ T8832] usb 4-1: Using ep0 maxpacket: 16 [ 697.435109][ T8832] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 697.445608][ T8832] usb 4-1: config 0 has no interface number 0 [ 697.452837][ T8832] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.469046][ T8832] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 697.482416][ T8832] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 697.491739][ T8832] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 697.503532][ T8832] usb 4-1: Product: syz [ 697.507972][ T8832] usb 4-1: SerialNumber: syz [ 697.515690][ T8832] usb 4-1: config 0 descriptor?? [ 697.527084][ T8832] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 697.544945][ T8832] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input170 [ 697.762177][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.763356][ T5918] usb 4-1: USB disconnect, device number 110 [ 697.769498][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 697.791977][ T5918] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 698.231716][ T795] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 698.240344][ T795] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 698.250911][ T795] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 698.271466][ T795] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 698.302753][ T795] usb 2-1: USB disconnect, device number 2 [ 698.569853][T23027] loop2: detected capacity change from 0 to 7 [ 698.579275][T23027] Dev loop2: unable to read RDB block 7 [ 698.586535][T23027] loop2: unable to read partition table [ 698.601856][T23027] loop2: partition table beyond EOD, truncated [ 698.617813][T23027] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 698.818905][T23034] input: syz1 as /devices/virtual/input/input171 [ 699.324597][T23055] ip6gre2: entered promiscuous mode [ 699.331003][T23055] ip6gre2: entered allmulticast mode [ 699.579320][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6961'. [ 699.590826][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6961'. [ 699.602265][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6961'. [ 699.732460][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6964'. [ 699.743738][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6964'. [ 699.746487][ T5918] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 699.771020][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6964'. [ 699.944850][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 699.944866][ T30] audit: type=1326 audit(1767661099.531:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23076 comm="syz.1.6967" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x0 [ 699.973175][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 699.981584][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.993469][ T5918] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.003103][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.030513][ T5918] usb 4-1: config 0 descriptor?? [ 700.244208][ T5918] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 700.474682][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6973'. [ 700.496900][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 700.503519][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 700.511665][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 700.519619][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 700.527667][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 700.535754][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 700.543942][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 700.551890][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 700.813000][ T8841] usb 4-1: USB disconnect, device number 111 [ 702.416388][T21518] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 702.557741][T23124] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 702.609895][T23124] bond1: (slave lo): Enslaving as a backup interface with an up link [ 702.618815][T21518] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 702.637833][T21518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.651674][T23124] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 702.669015][T21518] usb 2-1: Product: syz [ 702.673210][T21518] usb 2-1: Manufacturer: syz [ 702.681403][T21518] usb 2-1: SerialNumber: syz [ 702.699440][T21518] usb 2-1: config 0 descriptor?? [ 703.137135][T21518] usb 2-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 703.339822][T21518] usb 2-1: no permanent extended address found, random address set [ 703.349342][T21518] usb 2-1: atusb_probe: initialization failed, error = -524 [ 703.357153][T21518] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 703.544983][ T8841] usb 2-1: USB disconnect, device number 3 [ 704.237033][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6998'. [ 704.246032][T23157] netlink: 'syz.1.6998': attribute type 12 has an invalid length. [ 704.277528][T23157] netlink: 'syz.1.6998': attribute type 6 has an invalid length. [ 704.304381][T23157] vxlan0: entered promiscuous mode [ 704.331531][ T1152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.352658][ T1152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.371762][ T1152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.390944][ T1152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.786462][ T8841] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 705.950397][ T8841] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 705.961010][ T8841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.971923][ T8841] usb 4-1: Product: syz [ 705.976119][ T8841] usb 4-1: Manufacturer: syz [ 705.981759][ T8841] usb 4-1: SerialNumber: syz [ 706.056441][ T5918] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 706.239923][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 706.251836][ T5918] usb 2-1: config 1 has no interface number 0 [ 706.271485][ T5918] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.284087][ T5918] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 706.294093][ T5918] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 706.308633][ T5918] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.318962][ T30] audit: type=1326 audit(1767661105.911:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23209 comm="syz.7.7020" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 706.341623][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.351221][ T5918] usb 2-1: Product: syz [ 706.355432][ T5918] usb 2-1: Manufacturer: syz [ 706.360171][ T5918] usb 2-1: SerialNumber: syz [ 706.419531][ T8841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 706.432114][ T8841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 707.047905][ T8841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 707.062483][ T8841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 707.072890][ T8841] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 707.084180][ T8841] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 707.099646][ T8841] usb 4-1: USB disconnect, device number 112 [ 707.185028][ T5918] cdc_ncm 2-1:1.1: bind() failure [ 707.397504][ T8841] usb 2-1: USB disconnect, device number 4 [ 708.427744][ T8832] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 708.594833][ T8832] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 708.618240][ T8832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.626281][ T8832] usb 4-1: Product: syz [ 708.633637][ T8832] usb 4-1: Manufacturer: syz [ 708.645420][ T8832] usb 4-1: SerialNumber: syz [ 708.678613][ T8832] usb 4-1: config 0 descriptor?? [ 709.116556][ T8832] airspy 4-1:0.0: Board ID: 00 [ 709.124390][ T8832] airspy 4-1:0.0: Firmware version: [ 709.954537][ T8832] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 710.005520][ T8832] airspy 4-1:0.0: Registered as swradio24 [ 710.021181][ T8832] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 710.045780][ T8832] usb 4-1: USB disconnect, device number 113 [ 710.218149][T23305] loop4: detected capacity change from 0 to 7 [ 710.258669][ T9683] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 710.276696][ T9683] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 710.293375][ T9683] loop4: p2 start 4294901760 is beyond EOD, truncated [ 710.317013][ T9683] loop4: p3 start 4294836224 is beyond EOD, truncated [ 710.325232][ T9683] loop4: p4 size 327680 extends beyond EOD, truncated [ 710.335326][ T9683] loop4: p5 size 8323072 extends beyond EOD, truncated [ 710.344771][ T9683] loop4: p6 start 8192 is beyond EOD, truncated [ 710.627516][T23305] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 710.674576][T23305] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 710.782035][T23305] loop4: p2 start 4294901760 is beyond EOD, truncated [ 710.793678][T23305] loop4: p3 start 4294836224 is beyond EOD, truncated [ 710.801837][T23305] loop4: p4 size 327680 extends beyond EOD, truncated [ 710.811978][T23305] loop4: p5 size 8323072 extends beyond EOD, truncated [ 710.913461][T23305] loop4: p6 start 8192 is beyond EOD, truncated [ 711.922887][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7082'. [ 711.952714][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7082'. [ 712.074853][T23368] netlink: 'syz.0.7086': attribute type 1 has an invalid length. [ 712.083794][T23368] netlink: 'syz.0.7086': attribute type 6 has an invalid length. [ 712.096515][T23368] netlink: 'syz.0.7086': attribute type 3 has an invalid length. [ 713.001562][T23396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 713.008561][T23396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 713.028896][T23396] vhci_hcd vhci_hcd.0: Device attached [ 713.044820][T23396] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 713.051439][T23396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 713.059216][T23396] vhci_hcd vhci_hcd.0: Device attached [ 713.068701][T23396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 713.080716][T23402] vhci_hcd: connection closed [ 713.083835][T23398] vhci_hcd: connection closed [ 713.088807][ T3450] vhci_hcd vhci_hcd.3: stop threads [ 713.101573][ T3450] vhci_hcd vhci_hcd.3: release socket [ 713.114453][ T3450] vhci_hcd vhci_hcd.3: disconnect device [ 713.123036][ T3450] vhci_hcd vhci_hcd.3: stop threads [ 713.130264][ T3450] vhci_hcd vhci_hcd.3: release socket [ 713.140122][ T3450] vhci_hcd vhci_hcd.3: disconnect device [ 713.680181][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.707323][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.850382][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.876557][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.060828][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.107722][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.238298][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.262160][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.294391][T22054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 714.307660][T22054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 714.316781][T22054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 714.324904][T22054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 714.335162][T22054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.979928][ T12] bond2: left allmulticast mode [ 714.984830][ T12] bond2: left promiscuous mode [ 715.018820][ T12] bridge0: port 3(bond2) entered disabled state [ 715.028809][ T12] bridge_slave_1: left allmulticast mode [ 715.034496][ T12] bridge_slave_1: left promiscuous mode [ 715.056341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.085914][ T12] bridge_slave_0: left allmulticast mode [ 715.106684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.188729][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 715.452944][ T12] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 715.472134][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 715.934614][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 716.019902][T23457] netlink: 'syz.0.7119': attribute type 9 has an invalid length. [ 716.032783][T23457] netlink: 'syz.0.7119': attribute type 11 has an invalid length. [ 716.045525][T23457] netlink: 'syz.0.7119': attribute type 12 has an invalid length. [ 716.053908][T23457] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7119'. [ 716.064296][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7119'. [ 716.079868][ T12] dvmrp8 (unregistering): left allmulticast mode [ 716.179961][T23461] loop6: detected capacity change from 0 to 1024 [ 716.187627][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.195533][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.205399][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.213356][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.222972][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.231032][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.242145][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.251114][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.259108][T23461] ldm_validate_partition_table(): Disk read failed. [ 716.265902][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.273858][T23461] Buffer I/O error on dev loop6, logical block 0, async page read [ 716.281782][T23461] Dev loop6: unable to read RDB block 0 [ 716.287550][T23461] loop6: unable to read partition table [ 716.293340][ T12] bond0 (unregistering): left promiscuous mode [ 716.304922][ T12] bond_slave_0: left promiscuous mode [ 716.304923][T23461] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 716.320530][ T12] bond_slave_1: left promiscuous mode [ 716.329656][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.339048][ T5198] ldm_validate_partition_table(): Disk read failed. [ 716.345850][ T5198] Dev loop6: unable to read RDB block 0 [ 716.346198][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.353601][ T5198] loop6: unable to read partition table [ 716.376712][ T5828] Bluetooth: hci4: command tx timeout [ 716.377377][ T12] bond0 (unregistering): Released all slaves [ 716.585319][ T12] bond1 (unregistering): (slave batadv1): Releasing active interface [ 716.596002][ T12] bond1 (unregistering): Released all slaves [ 716.757906][ T12] bond2 (unregistering): Released all slaves [ 717.011260][ T12] tipc: Disabling bearer [ 717.023285][ T12] tipc: Left network mode [ 717.092672][T23421] chnl_net:caif_netlink_parms(): no params data found [ 717.109600][T23469] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 717.196395][ T5918] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 717.266267][ T12] batadv0: left promiscuous mode [ 717.324318][ T12] hsr_slave_0: left promiscuous mode [ 717.335125][ T12] hsr_slave_1: left promiscuous mode [ 717.341341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.354861][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.363669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.363687][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 717.371538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.397374][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 717.408842][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 717.426418][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 717.437492][ T12] team_slave_0: left promiscuous mode [ 717.445076][ T12] team_slave_1: left promiscuous mode [ 717.447704][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 717.460174][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.465299][ T12] veth1_macvtap: left promiscuous mode [ 717.488555][ T5918] usb 4-1: config 0 descriptor?? [ 717.930140][ T5918] plantronics 0003:047F:FFFF.009E: unknown main item tag 0x0 [ 717.976593][ T5918] plantronics 0003:047F:FFFF.009E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 718.222869][ T12] team0 (unregistering): Port device team_slave_1 removed [ 718.238524][ T5918] usb 4-1: USB disconnect, device number 114 [ 718.315126][ T12] team0 (unregistering): Port device team_slave_0 removed [ 718.462745][ T5828] Bluetooth: hci4: command tx timeout [ 718.783656][T23421] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.808293][T23421] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.815562][T23421] bridge_slave_0: entered allmulticast mode [ 718.831497][T23421] bridge_slave_0: entered promiscuous mode [ 718.840878][T23421] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.849782][T23421] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.878707][T23421] bridge_slave_1: entered allmulticast mode [ 718.897078][T23421] bridge_slave_1: entered promiscuous mode [ 719.019748][T23520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 719.029675][T23520] block device autoloading is deprecated and will be removed. [ 719.092538][T23421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.139639][T23421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.332473][T23421] team0: Port device team_slave_0 added [ 719.365574][T23421] team0: Port device team_slave_1 added [ 719.688319][T23421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.704681][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.740044][T23421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.772838][T23421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.781763][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.849132][T23421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.965993][T23421] hsr_slave_0: entered promiscuous mode [ 719.987673][T23421] hsr_slave_1: entered promiscuous mode [ 720.003435][T23421] debugfs: 'hsr0' already exists in 'hsr' [ 720.016514][T23421] Cannot create hsr debugfs directory [ 720.536784][ T5828] Bluetooth: hci4: command tx timeout [ 720.786957][ T5962] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 720.978573][ T5962] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 720.997512][ T5962] usb 4-1: config 4 has no interface number 0 [ 721.020049][ T5962] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 721.039086][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.057285][ T5962] usb 4-1: Product: syz [ 721.061491][ T5962] usb 4-1: Manufacturer: syz [ 721.066113][ T5962] usb 4-1: SerialNumber: syz [ 721.082814][T23421] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 721.098138][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input173 [ 721.122400][T23421] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.137761][T23421] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.158446][T23421] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.293799][T23421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.331959][T23421] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.347438][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.348776][ T5183] bcm5974 4-1:4.28: could not read from device [ 721.354624][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.387563][ T5962] bcm5974 4-1:4.28: could not read from device [ 721.410012][ T5183] bcm5974 4-1:4.28: could not read from device [ 721.429269][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.436478][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.454449][ T5962] input: failed to attach handler mousedev to device input173, error: -5 [ 721.471140][ T5183] bcm5974 4-1:4.28: could not read from device [ 721.472395][ T5962] usb 4-1: USB disconnect, device number 115 [ 721.492173][ T5183] bcm5974 4-1:4.28: could not read from device [ 721.636502][ T9683] udevd[9683]: Error opening device "/dev/input/event4": No such file or directory [ 721.666441][ T9683] udevd[9683]: Unable to EVIOCGABS device "/dev/input/event4" [ 721.674072][ T9683] udevd[9683]: Unable to EVIOCGABS device "/dev/input/event4" [ 721.683174][T23421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.690386][ T9683] udevd[9683]: Unable to EVIOCGABS device "/dev/input/event4" [ 721.707217][ T9683] udevd[9683]: Unable to EVIOCGABS device "/dev/input/event4" [ 721.768806][T23421] veth0_vlan: entered promiscuous mode [ 721.792549][T23421] veth1_vlan: entered promiscuous mode [ 721.852872][T23421] veth0_macvtap: entered promiscuous mode [ 721.892530][T23421] veth1_macvtap: entered promiscuous mode [ 721.926122][T23421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.963038][T23617] netlink: 'syz.7.7155': attribute type 11 has an invalid length. [ 721.965224][T23421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.016544][ T3450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.055681][ T3450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.117144][ T3450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.150831][ T3450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.263879][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.282186][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.324797][T17617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.334569][T17617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.618870][ T5828] Bluetooth: hci4: command tx timeout [ 722.643713][ T30] audit: type=1326 audit(1767661122.231:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23643 comm="syz.1.7161" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 723.299457][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7171'. [ 723.327404][ T5962] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 723.501551][ T5962] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 723.516496][ T5962] usb 4-1: config 0 has no interface number 0 [ 723.532840][ T5962] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.587715][ T5962] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.617389][ T5962] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 723.628125][T23685] sit0: left promiscuous mode [ 723.634274][ T5962] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 723.653708][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.687390][ T5962] usb 4-1: config 0 descriptor?? [ 723.742607][ T5962] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input174 [ 723.975278][ T8841] usb 4-1: USB disconnect, device number 116 [ 725.067083][ T5962] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 725.276528][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.301179][ T5962] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 725.325663][ T5962] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.371548][ T5962] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.393049][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.401603][ T5962] usb 4-1: Product: syz [ 725.405996][ T5962] usb 4-1: Manufacturer: syz [ 725.411161][ T5962] usb 4-1: SerialNumber: syz [ 725.548805][T23758] netlink: 'syz.1.7199': attribute type 4 has an invalid length. [ 725.606688][T23759] netlink: 'syz.1.7199': attribute type 4 has an invalid length. [ 725.987006][ T39] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 726.149072][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.160009][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.171924][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.181994][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.191117][ T39] usb 2-1: Product: syz [ 726.195962][ T39] usb 2-1: Manufacturer: syz [ 726.209740][ T39] usb 2-1: SerialNumber: syz [ 726.435340][ T39] usb 2-1: 0:2 : does not exist [ 726.442114][ T5962] cdc_ncm 4-1:1.0: bind() failure [ 726.473553][ T5962] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 726.485267][ T39] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 726.502267][ T5962] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 726.519747][ T5962] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 726.540858][ T5962] usb 4-1: USB disconnect, device number 117 [ 726.549015][ T39] usb 2-1: USB disconnect, device number 5 [ 726.605050][ T9683] udevd[9683]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.614586][T23783] batadv_slave_1: entered promiscuous mode [ 726.655250][T23782] batadv_slave_1: left promiscuous mode [ 727.316606][ T5962] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 727.489046][ T5962] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 727.502203][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.527345][ T5962] usb 2-1: Product: syz [ 727.536198][ T5962] usb 2-1: Manufacturer: syz [ 727.551978][ T5962] usb 2-1: SerialNumber: syz [ 727.592277][ T5962] usb 2-1: config 0 descriptor?? [ 727.621614][ T5962] ch341 2-1:0.0: ch341-uart converter detected [ 727.683669][T23809] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 728.536555][ T8841] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 728.680100][ T5962] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 728.698518][ T8841] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 728.708183][ T8841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.719581][ T8841] usb 4-1: config 0 descriptor?? [ 728.916183][ T8842] usb 2-1: USB disconnect, device number 6 [ 728.945908][ T8842] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 728.961598][ T8842] ch341 2-1:0.0: device disconnected [ 729.056674][T23830] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7230'. [ 729.634127][T23858] Unknown status report in ack skb [ 729.964997][ T8841] usb 4-1: Cannot set autoneg [ 729.971513][ T8841] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 729.996633][ T8841] usb 4-1: USB disconnect, device number 118 [ 730.095045][T23873] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 730.556482][ T5962] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 730.756261][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.768520][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.780356][ T5962] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 730.789514][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.801327][ T5962] usb 2-1: config 0 descriptor?? [ 730.822220][T23901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7261'. [ 731.240905][ T5962] cm6533_jd 0003:0D8C:0022.009F: unknown main item tag 0x0 [ 731.256735][ T5962] cm6533_jd 0003:0D8C:0022.009F: unknown main item tag 0x0 [ 731.290390][ T5962] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.009F/input/input175 [ 731.330021][ T5962] cm6533_jd 0003:0D8C:0022.009F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 731.528503][ T5962] usb 2-1: USB disconnect, device number 7 [ 731.757512][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7270'. [ 737.195077][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7332'. [ 737.242511][ T30] audit: type=1804 audit(1767661136.831:292): pid=24073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7333" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=114194 res=1 errno=0 [ 737.589430][ T39] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 737.766736][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 737.777527][ T39] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 737.785723][ T39] usb 4-1: config 0 has no interface number 0 [ 737.814009][ T39] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.833585][ T39] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 737.856408][ T39] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 737.886380][ T39] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.927473][ T39] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 737.940010][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.956375][ T39] usb 4-1: Product: syz [ 737.960586][ T39] usb 4-1: Manufacturer: syz [ 737.965194][ T39] usb 4-1: SerialNumber: syz [ 737.992941][ T39] usb 4-1: config 0 descriptor?? [ 738.256533][ T39] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 738.502760][ T5962] usb 4-1: USB disconnect, device number 119 [ 738.963300][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7345'. [ 739.305420][T24115] netlink: 'syz.1.7350': attribute type 1 has an invalid length. [ 741.466891][ T39] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 741.639186][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 741.649677][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.670296][T24191] binder: 24190:24191 ioctl c06c4124 0 returned -22 [ 741.676509][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.687056][ T39] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 741.696140][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.709210][ T39] usb 4-1: config 0 descriptor?? [ 742.000748][T24203] netlink: 'syz.6.7375': attribute type 2 has an invalid length. [ 742.008826][T24203] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7375'. [ 742.388377][ T8842] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 742.582701][ T8842] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 742.592423][ T8842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.601571][ T8842] usb 2-1: Product: syz [ 742.605957][ T8842] usb 2-1: Manufacturer: syz [ 742.611112][ T8842] usb 2-1: SerialNumber: syz [ 742.620181][ T8842] usb 2-1: config 0 descriptor?? [ 742.635215][ T8842] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 742.738618][ T39] letsketch 0003:6161:4D15.00A0: Device info:   [ 742.967532][ T39] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 742.986755][ T39] letsketch 0003:6161:4D15.00A0: probe with driver letsketch failed with error -71 [ 743.019363][ T39] usb 4-1: USB disconnect, device number 120 [ 743.491830][ T39] usb 2-1: USB disconnect, device number 8 [ 744.412523][T24275] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 744.468292][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 744.495550][T24275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.552820][T24277] bond2: (slave geneve2): making interface the new active one [ 744.584754][T24277] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 744.646390][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 744.656577][ T5906] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.684669][ T5906] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.715275][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 744.725350][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.193352][ T5906] mcp2221 0003:04D8:00DD.00A1: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 745.455831][T24269] i2c i2c-1: Invalid block write size 155 [ 745.467572][ T5906] usb 2-1: USB disconnect, device number 9 [ 747.429290][T24335] vivid-002: disconnect [ 747.503882][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.510768][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.557265][T24330] vivid-002: reconnect [ 747.717677][T21518] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 747.900270][T21518] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 747.908839][T21518] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 747.919426][T21518] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 747.929799][T21518] usb 4-1: config 220 has no interface number 2 [ 747.936183][T21518] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 747.952459][T21518] usb 4-1: config 220 interface 0 has no altsetting 0 [ 747.959493][T21518] usb 4-1: config 220 interface 76 has no altsetting 0 [ 747.966547][T21518] usb 4-1: config 220 interface 1 has no altsetting 0 [ 747.976187][T21518] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 747.985511][T21518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.994791][T21518] usb 4-1: Product: syz [ 748.000011][T21518] usb 4-1: Manufacturer: syz [ 748.004636][T21518] usb 4-1: SerialNumber: syz [ 748.319129][T21518] usb 4-1: selecting invalid altsetting 0 [ 748.342331][T21518] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 748.350355][T21518] uvcvideo 4-1:220.0: No valid video chain found. [ 748.369361][T21518] usb 4-1: selecting invalid altsetting 0 [ 748.378170][T21518] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 748.390797][T21518] usb 4-1: USB disconnect, device number 121 [ 750.060918][T24413] vivid-002: disconnect [ 750.169326][T24409] vivid-002: reconnect [ 750.187370][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 750.326891][ T8832] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 750.386383][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 750.415779][ T5906] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 750.441500][ T5906] usb 2-1: config 0 has no interface number 0 [ 750.456426][ T5906] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.478181][ T5906] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 750.526719][ T8832] usb 4-1: Using ep0 maxpacket: 32 [ 750.532000][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.543514][ T5906] usb 2-1: Product: syz [ 750.549645][ T5906] usb 2-1: Manufacturer: syz [ 750.554847][ T5906] usb 2-1: SerialNumber: syz [ 750.559768][ T8832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.583451][ T5906] usb 2-1: config 0 descriptor?? [ 750.589971][ T8832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 750.601546][ T8832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.613164][ T8832] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 750.628526][ T5906] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 750.638466][ T8832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.646534][ T5906] em28xx 2-1:0.132: Video interface 132 found: [ 750.665686][ T8832] usb 4-1: config 0 descriptor?? [ 750.671846][T24414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 750.690784][ T8832] hub 4-1:0.0: USB hub found [ 750.870085][T24427] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7466'. [ 750.887785][ T8832] hub 4-1:0.0: 1 port detected [ 751.031549][ T5906] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 751.248748][ T5906] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 751.277460][ T5906] em28xx 2-1:0.132: board has no eeprom [ 751.338625][ T5906] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 751.338657][ T5906] em28xx 2-1:0.132: analog set to bulk mode. [ 751.338721][ T8832] em28xx 2-1:0.132: Registering V4L2 extension [ 751.361864][ T5906] usb 2-1: USB disconnect, device number 10 [ 751.363126][ T5906] em28xx 2-1:0.132: Disconnecting em28xx [ 751.571379][ T8832] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 751.571507][ T8832] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 751.571524][ T8832] em28xx 2-1:0.132: No AC97 audio processor [ 751.585311][ T8832] usb 2-1: Decoder not found [ 751.585334][ T8832] em28xx 2-1:0.132: failed to create media graph [ 751.585365][ T8832] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 751.598846][ T8832] em28xx 2-1:0.132: Remote control support is not available for this card. [ 751.598972][ T5906] em28xx 2-1:0.132: Closing input extension [ 751.632872][ T5906] em28xx 2-1:0.132: Freeing device [ 752.001104][ T5906] usb 4-1: USB disconnect, device number 122 [ 752.155493][T24459] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7479'. [ 752.166250][T24459] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7479'. [ 753.037289][ T8841] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 753.397628][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7496'. [ 753.526488][T21518] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 753.686407][T21518] usb 2-1: Using ep0 maxpacket: 16 [ 753.693662][T21518] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.704973][T21518] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.715185][T21518] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 753.724443][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.726419][ T5906] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 753.900066][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.912218][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.922317][ T5906] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 753.931667][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.942192][ T5906] usb 4-1: config 0 descriptor?? [ 754.160347][T21518] mcp2221 0003:04D8:00DD.00A2: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 754.364700][ T5906] hid-steam 0003:28DE:1142.00A3: unknown main item tag 0x0 [ 754.381558][ T8832] usb 2-1: USB disconnect, device number 11 [ 754.391295][ T5906] hid-steam 0003:28DE:1142.00A3: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 754.486616][ T5906] hid-steam 0003:28DE:1142.00A3: Steam wireless receiver connected [ 754.494994][ T5906] hid-steam 0003:28DE:1142.00A3: No HID_FEATURE_REPORT submitted - nothing to read [ 754.519398][ T5906] hid-steam 0003:28DE:1142.00A4: unknown main item tag 0x0 [ 754.548971][ T5906] hid-steam 0003:28DE:1142.00A4: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 754.741094][T24521] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.748350][T24521] bridge0: port 2(bridge_slave_1) entered listening state [ 754.755841][T24521] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.763059][T24521] bridge0: port 1(bridge_slave_0) entered listening state [ 754.784355][T24521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.831996][T24548] input: syz0 as /devices/virtual/input/input177 [ 756.094588][T24556] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 756.113972][T24556] bond1: (slave lo): Enslaving as a backup interface with an up link [ 756.127032][T24556] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 756.826462][T21518] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 756.981549][T21518] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.991830][T21518] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 757.001011][T21518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.011535][T21518] usb 2-1: config 0 descriptor?? [ 757.022799][T21518] pwc: Askey VC010 type 2 USB webcam detected. [ 757.429168][T21518] pwc: recv_control_msg error -32 req 02 val 2b00 [ 757.436498][T21518] pwc: recv_control_msg error -32 req 02 val 2700 [ 757.445330][T21518] pwc: recv_control_msg error -32 req 02 val 2c00 [ 757.654672][T21518] pwc: recv_control_msg error -71 req 04 val 1300 [ 757.669664][T21518] pwc: recv_control_msg error -71 req 04 val 1400 [ 757.679984][T21518] pwc: recv_control_msg error -71 req 02 val 2000 [ 757.689259][T21518] pwc: recv_control_msg error -71 req 02 val 2100 [ 757.696150][T21518] pwc: recv_control_msg error -71 req 04 val 1500 [ 757.704108][T21518] pwc: recv_control_msg error -71 req 02 val 2500 [ 757.712270][T21518] pwc: recv_control_msg error -71 req 02 val 2400 [ 757.719605][T21518] pwc: recv_control_msg error -71 req 02 val 2600 [ 757.726555][T21518] pwc: recv_control_msg error -71 req 02 val 2900 [ 757.733600][T21518] pwc: recv_control_msg error -71 req 02 val 2800 [ 757.741834][T21518] pwc: recv_control_msg error -71 req 04 val 1100 [ 757.749395][T21518] pwc: recv_control_msg error -71 req 04 val 1200 [ 757.768287][T21518] pwc: Registered as video103. [ 757.795163][T21518] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input178 [ 757.819810][T21518] usb 2-1: USB disconnect, device number 12 [ 758.345168][T24610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 758.470522][T24617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7546'. [ 759.016773][ T8832] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 759.166472][ T8832] usb 2-1: Using ep0 maxpacket: 8 [ 759.173348][ T8832] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 759.182295][ T8832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 759.192500][ T8832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 759.202467][ T8832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 759.213000][ T8832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.226472][ T8832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 759.235554][ T8832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.452452][ T8832] usb 2-1: usb_control_msg returned -32 [ 759.458361][ T8832] usbtmc 2-1:16.0: can't read capabilities [ 759.590051][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7551'. [ 759.653130][T21518] hid-generic 0000:0000:0000.00A5: unknown main item tag 0x0 [ 759.657163][ T5906] usb 4-1: USB disconnect, device number 123 [ 759.680211][T21518] hid-generic 0000:0000:0000.00A5: hidraw1: HID v0.00 Device [syz1] on syz0 [ 759.816452][T24596] Bluetooth: hci1: command 0x0406 tx timeout [ 759.838866][T24631] fido_id[24631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 760.163217][T24656] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 760.169789][T24656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 760.205783][T24656] vhci_hcd vhci_hcd.0: Device attached [ 760.292502][T24657] usbip_core: unknown command [ 760.316136][T24657] vhci_hcd: unknown pdu 4244635647 [ 760.333157][T24657] usbip_core: unknown command [ 760.348407][ T3450] vhci_hcd vhci_hcd.6: stop threads [ 760.388733][ T3450] vhci_hcd vhci_hcd.6: release socket [ 760.439391][ T3450] vhci_hcd vhci_hcd.6: disconnect device [ 760.448671][ T5906] hid-steam 0003:28DE:1142.00A3: Steam wireless receiver disconnected [ 760.456993][T21518] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 760.479842][ T5918] usb 2-1: USB disconnect, device number 13 [ 760.757644][T24669] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7567'. [ 761.306454][ T5906] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 761.372710][ T30] audit: type=1326 audit(1767661160.961:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24694 comm="syz.1.7579" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 761.491918][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 761.514332][ T5906] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 761.544046][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.569213][ T5906] usb 4-1: config 0 has no interface number 0 [ 761.575780][ T5906] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 761.602660][ T5906] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 761.626338][ T5906] usb 4-1: config 0 interface 98 has no altsetting 0 [ 761.645927][ T5906] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 761.676587][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.695256][ T5906] usb 4-1: Product: syz [ 761.705278][ T5906] usb 4-1: Manufacturer: syz [ 761.712266][ T5906] usb 4-1: SerialNumber: syz [ 761.741283][ T5906] usb 4-1: config 0 descriptor?? [ 761.747959][T24680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 761.756030][T24680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.009693][T24680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.017879][T24680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.117464][ T30] audit: type=1804 audit(1767661161.711:294): pid=24719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.7588" name="file1" dev="ramfs" ino=117919 res=1 errno=0 [ 762.507603][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7595'. [ 762.526353][T24737] netlink: 'syz.6.7595': attribute type 18 has an invalid length. [ 762.566271][T24740] netlink: 'syz.1.7597': attribute type 12 has an invalid length. [ 762.569253][T24737] vxlan1: entered promiscuous mode [ 763.037346][ T5906] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 763.053852][ T5906] asix 4-1:0.98: probe with driver asix failed with error -71 [ 763.067426][ T5906] usb 4-1: USB disconnect, device number 124 [ 763.086912][ T6043] udevd[6043]: setting owner of /dev/bus/usb/004/124 to uid=0, gid=0 failed: No such file or directory [ 763.246457][ T5918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 763.407961][ T5918] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 763.418556][ T5918] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 763.456365][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 763.465491][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 763.481362][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 763.495097][ T5918] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 763.505589][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 763.515457][ T5918] usb 2-1: Product: syz [ 763.519980][ T5918] usb 2-1: Manufacturer: syz [ 763.538913][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 763.547861][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 763.555408][ T5918] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 763.563959][ T5918] cdc_wdm 2-1:1.0: Unknown control protocol [ 764.516811][T24654] usb 2-1: USB disconnect, device number 14 [ 764.702685][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7616'. [ 765.576502][T21518] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 765.805199][T24839] syzkaller0: mtu greater than device maximum [ 766.386536][T24654] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 766.452740][T24856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7645'. [ 766.536546][T24654] usb 4-1: Using ep0 maxpacket: 16 [ 766.548064][T24654] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 766.566705][T24654] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.588189][T24654] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 766.615318][T24654] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 766.627656][T24654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.635783][T24654] usb 4-1: Product: syz [ 766.642887][T24654] usb 4-1: Manufacturer: syz [ 766.648059][T24654] usb 4-1: SerialNumber: syz [ 767.065183][T24654] usb 4-1: 0:2 : does not exist [ 767.076599][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 767.244326][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 767.256112][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 767.278401][ T5918] usb 2-1: can't read configurations, error -71 [ 767.573506][ T30] audit: type=1326 audit(1767661167.161:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.7657" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 767.888685][T24654] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 767.928278][T24654] usb 4-1: USB disconnect, device number 125 [ 769.521592][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 769.557750][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 770.096410][ T5906] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 770.286482][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 770.309172][ T5906] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 770.346356][ T5906] usb 4-1: config 0 has no interface number 0 [ 770.356508][ T5906] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 770.403753][ T5906] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 770.456849][ T5906] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 770.487210][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.506830][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7679'. [ 770.526613][ T5906] usb 4-1: Product: syz [ 770.542967][ T5906] usb 4-1: Manufacturer: syz [ 770.555356][ T5906] usb 4-1: SerialNumber: syz [ 770.590413][ T5906] usb 4-1: config 0 descriptor?? [ 770.620815][T24926] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 770.636587][T24926] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 770.866971][T24926] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 770.876020][T24926] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 771.317975][ T5906] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 771.338010][T24654] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 771.351497][ T5906] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 771.383258][ T5906] asix 4-1:0.251: probe with driver asix failed with error -71 [ 771.429478][ T5906] usb 4-1: USB disconnect, device number 126 [ 771.526619][T24654] usb 2-1: Using ep0 maxpacket: 16 [ 771.535919][T24654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.566556][T24654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.589026][T24654] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 771.637001][T24654] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 771.646083][T24654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.668885][T24654] usb 2-1: config 0 descriptor?? [ 772.047799][ T5906] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 772.107002][ T5906] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 772.154651][T24654] microsoft 0003:045E:07DA.00A7: ignoring exceeding usage max [ 772.330807][T24654] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00A7/input/input179 [ 772.985554][T24654] microsoft 0003:045E:07DA.00A7: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 773.019745][T24654] usb 2-1: USB disconnect, device number 17 [ 773.246530][T24974] fido_id[24974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 773.261876][T24978] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 773.270851][T24978] syzkaller1: Refused to change device type [ 773.630544][T24994] dvmrp0: entered allmulticast mode [ 774.855280][ T30] audit: type=1326 audit(1767661174.441:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25026 comm="syz.1.7716" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 775.566573][T25051] netlink: 'syz.3.7726': attribute type 3 has an invalid length. [ 775.574395][T25051] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7726'. [ 775.993629][T25066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 776.000998][T25066] IPv6: NLM_F_CREATE should be set when creating new route [ 776.911450][T25090] input: syz0 as /devices/virtual/input/input180 [ 777.294279][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7746'. [ 777.463590][T25101] dvmrp0: entered allmulticast mode [ 777.806402][ T8841] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 777.958706][ T8841] usb 4-1: config 0 has no interfaces? [ 777.967131][ T8841] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 777.986430][ T8841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.994569][ T8841] usb 4-1: Product: syz [ 778.006142][ T8841] usb 4-1: Manufacturer: syz [ 778.011184][ T8841] usb 4-1: SerialNumber: syz [ 778.018961][ T8841] usb 4-1: config 0 descriptor?? [ 778.271623][T21518] usb 4-1: USB disconnect, device number 127 [ 778.919486][T25132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7761'. [ 778.933382][T25132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7761'. [ 778.947501][T25132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7761'. [ 778.957164][T25132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7761'. [ 779.157751][ T8841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 779.244743][T25137] netlink: 'syz.3.7764': attribute type 4 has an invalid length. [ 779.341303][ T8841] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 779.374902][ T8841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.386453][ T8841] usb 2-1: Product: syz [ 779.392269][ T8841] usb 2-1: Manufacturer: syz [ 779.397742][ T8841] usb 2-1: SerialNumber: syz [ 779.822820][ T8841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 779.835672][ T8841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 780.048893][ T8841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 780.065916][ T8841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 780.079918][ T8841] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 780.091571][ T8841] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 780.108363][ T8841] usb 2-1: USB disconnect, device number 18 [ 782.136637][ T8845] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 782.321346][ T8845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 782.392877][ T8845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 782.473417][ T8845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 782.536471][ T8845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.565682][ T8845] usb 2-1: Product: syz [ 782.595428][ T8845] usb 2-1: Manufacturer: syz [ 782.615597][ T8845] usb 2-1: SerialNumber: syz [ 782.645594][T25192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.886133][T25192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 783.111058][T25210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 783.251146][T25213] loop3: detected capacity change from 0 to 7 [ 783.258515][T25213] Dev loop3: unable to read RDB block 7 [ 783.264122][T25213] loop3: unable to read partition table [ 783.271806][T25213] loop3: partition table beyond EOD, truncated [ 783.282979][T25213] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 783.561083][T25215] netlink: 'syz.6.7797': attribute type 11 has an invalid length. [ 783.935769][ T8845] cdc_ncm 2-1:1.0: bind() failure [ 783.954765][ T8845] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 784.016399][ T8845] cdc_ncm 2-1:1.1: bind() failure [ 784.063659][ T8845] usb 2-1: USB disconnect, device number 19 [ 784.615341][T25237] input: syz1 as /devices/virtual/input/input181 [ 785.230595][T25254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 785.259080][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 785.267887][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 785.356465][ T8845] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 785.423040][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 785.532609][ T8845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.567815][ T8845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.629131][ T8845] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 785.689108][ T8845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.730582][ T8845] usb 2-1: config 0 descriptor?? [ 786.186053][T25252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.202159][T25252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.227990][ T8845] cm6533_jd 0003:0D8C:0022.00A8: unknown main item tag 0x0 [ 786.239834][ T8845] cm6533_jd 0003:0D8C:0022.00A8: unknown main item tag 0x0 [ 786.253835][ T8845] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.00A8/input/input182 [ 786.297757][ T8845] cm6533_jd 0003:0D8C:0022.00A8: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 786.441856][ T5918] usb 2-1: USB disconnect, device number 20 [ 786.744715][T25294] input: syz0 as /devices/virtual/input/input183 [ 786.753464][T25294] input: failed to attach handler leds to device input183, error: -6 [ 786.928223][T25298] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.7833'. [ 786.956525][T25298] netlink: Unknown conntrack attr (type=2304, max=9) [ 787.395086][T25315] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7841'. [ 787.477071][ T8845] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 787.638591][ T8845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 787.651013][ T8845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.683887][ T8845] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 787.712852][ T8845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.756033][ T8845] usb 4-1: config 0 descriptor?? [ 787.888949][T25332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7849'. [ 788.176476][ T8845] elan 0003:04F3:0755.00A9: unknown main item tag 0x0 [ 788.189199][ T8845] elan 0003:04F3:0755.00A9: unknown main item tag 0x0 [ 788.197181][ T8845] elan 0003:04F3:0755.00A9: unknown main item tag 0x0 [ 788.204412][ T8845] elan 0003:04F3:0755.00A9: unknown main item tag 0x0 [ 788.212044][ T8845] elan 0003:04F3:0755.00A9: unknown main item tag 0x0 [ 788.223777][ T8845] elan 0003:04F3:0755.00A9: failed to start in urb: -90 [ 788.234760][ T8845] elan 0003:04F3:0755.00A9: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 788.404215][ T8845] usb 4-1: USB disconnect, device number 2 [ 789.406674][ T8841] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 789.608040][ T8841] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 789.636486][ T8841] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 789.666446][ T8841] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 789.667431][T25374] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7864'. [ 789.689846][ T8841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 789.731442][ T8841] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.749700][ T8841] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 789.776689][ T8841] usb 4-1: Product: syz [ 789.784162][ T8841] usb 4-1: Manufacturer: syz [ 789.800152][ T8841] usb 4-1: SerialNumber: syz [ 789.820371][ T8841] usb 4-1: config 0 descriptor?? [ 789.826180][T25361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 789.858782][ T8841] usb 4-1: selecting invalid altsetting 0 [ 790.169089][T25361] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 790.196856][T25361] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 790.211428][T25361] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 790.245986][T25361] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 790.248684][ T8841] usb 4-1: USB disconnect, device number 3 [ 790.266752][T25361] usb 4-1: cannot submit urb 0, error -19: no device [ 790.826381][ T5962] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 790.998390][ T5962] usb 2-1: config 0 has no interfaces? [ 791.005879][ T5962] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 791.026459][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.034591][ T5962] usb 2-1: Product: syz [ 791.046348][ T5962] usb 2-1: Manufacturer: syz [ 791.071822][ T5962] usb 2-1: config 0 descriptor?? [ 791.324348][ T8841] usb 2-1: USB disconnect, device number 21 [ 791.870195][ T30] audit: type=1326 audit(1767661191.461:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25408 comm="syz.6.7880" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f07539 code=0x0 [ 791.976993][ T8845] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 792.158564][ T8845] usb 2-1: config 0 has no interfaces? [ 792.165796][ T8845] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 792.175615][ T8845] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 792.184873][ T8845] usb 2-1: Product: syz [ 792.190295][ T8845] usb 2-1: Manufacturer: syz [ 792.199936][ T8845] usb 2-1: config 0 descriptor?? [ 792.266606][T21518] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 792.418566][ T8845] usb 2-1: USB disconnect, device number 22 [ 792.433937][T21518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.445892][T21518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 792.459953][T21518] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 792.469525][T21518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.488739][T21518] usb 4-1: config 0 descriptor?? [ 792.964840][T21518] kovaplus 0003:1E7D:2D50.00AA: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 793.608031][T25449] input: syz0 as /devices/virtual/input/input184 [ 793.740910][T21518] kovaplus 0003:1E7D:2D50.00AA: couldn't init struct kovaplus_device [ 793.759454][T21518] kovaplus 0003:1E7D:2D50.00AA: couldn't install mouse [ 793.760731][ T30] audit: type=1326 audit(1767661193.351:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.780625][T21518] kovaplus 0003:1E7D:2D50.00AA: probe with driver kovaplus failed with error -71 [ 793.789442][ T30] audit: type=1326 audit(1767661193.381:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.835429][T21518] usb 4-1: USB disconnect, device number 4 [ 793.888954][ T30] audit: type=1326 audit(1767661193.411:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.914968][ T30] audit: type=1326 audit(1767661193.421:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.938730][ T30] audit: type=1326 audit(1767661193.421:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.961316][ T30] audit: type=1326 audit(1767661193.421:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 793.984610][ T30] audit: type=1326 audit(1767661193.421:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 794.007737][ T30] audit: type=1326 audit(1767661193.421:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 794.031674][ T30] audit: type=1326 audit(1767661193.421:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.7896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 797.396553][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7935'. [ 797.426604][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7935'. [ 797.450504][T25535] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7935'. [ 797.478515][T25535] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7935'. [ 797.634009][T24596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.650304][T24596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.654373][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7938'. [ 797.678505][T24596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.689066][T24596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.696970][T24596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.764616][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7940'. [ 797.828979][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7940'. [ 797.961491][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7942'. [ 798.163435][T25559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7944'. [ 798.229598][T25548] chnl_net:caif_netlink_parms(): no params data found [ 798.525679][T25548] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.533069][T25548] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.545354][T25548] bridge_slave_0: entered allmulticast mode [ 798.553732][T25548] bridge_slave_0: entered promiscuous mode [ 798.562814][T25548] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.570551][T25548] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.578271][T25548] bridge_slave_1: entered allmulticast mode [ 798.587452][T25548] bridge_slave_1: entered promiscuous mode [ 798.683027][T25548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.702192][T25548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.747855][T25548] team0: Port device team_slave_0 added [ 798.765139][T25548] team0: Port device team_slave_1 added [ 798.846961][T25548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.853966][T25548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.934536][T25548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.948231][T25548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.955202][T25548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.985594][T25548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.165134][T25548] hsr_slave_0: entered promiscuous mode [ 799.203682][T25548] hsr_slave_1: entered promiscuous mode [ 799.222717][T25548] debugfs: 'hsr0' already exists in 'hsr' [ 799.232821][T25548] Cannot create hsr debugfs directory [ 799.493694][T25590] input: syz1 as /devices/virtual/input/input185 [ 799.739014][ T5828] Bluetooth: hci0: command tx timeout [ 799.835137][T25548] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 799.852394][T25548] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 799.859379][ T8841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 799.873164][T25548] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 799.883725][T25548] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 799.949695][T25548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.956458][ T8845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 799.987240][T25548] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.003648][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.010918][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.020984][ T8841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.034088][ T8841] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.049629][ T8841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.050568][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.064915][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.087484][ T8841] usb 2-1: config 0 descriptor?? [ 800.100750][ T8841] pwc: Askey VC010 type 2 USB webcam detected. [ 800.107396][ T8845] usb 4-1: Using ep0 maxpacket: 8 [ 800.114097][ T8845] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 800.125759][ T8845] usb 4-1: config 150 has no interface number 0 [ 800.137767][ T8845] usb 4-1: config 150 interface 204 has no altsetting 0 [ 800.145066][ T8845] usb 4-1: config 150 interface 1 has no altsetting 0 [ 800.154824][ T8845] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 800.165125][ T8845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.174952][ T8845] usb 4-1: Product: syz [ 800.179832][ T8845] usb 4-1: Manufacturer: syz [ 800.185449][ T8845] usb 4-1: SerialNumber: syz [ 800.202338][T25548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.244187][T25548] veth0_vlan: entered promiscuous mode [ 800.255592][T25548] veth1_vlan: entered promiscuous mode [ 800.291645][T25548] veth0_macvtap: entered promiscuous mode [ 800.305015][T25548] veth1_macvtap: entered promiscuous mode [ 800.326998][T25548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.342508][T25548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.361052][T16038] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.370415][T16038] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.381585][T16038] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.391376][T16038] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.410237][ T8845] xr_serial 4-1:150.204: xr_serial converter detected [ 800.484860][T22389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.493134][T22389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.505449][ T8841] pwc: recv_control_msg error -32 req 02 val 2b00 [ 800.518953][ T8841] pwc: recv_control_msg error -32 req 02 val 2700 [ 800.526653][ T8841] pwc: recv_control_msg error -32 req 02 val 2c00 [ 800.543544][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.551963][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.735644][ T8841] pwc: recv_control_msg error -71 req 04 val 1300 [ 800.749859][ T8841] pwc: recv_control_msg error -71 req 04 val 1400 [ 800.757307][ T8841] pwc: recv_control_msg error -71 req 02 val 2000 [ 800.764424][ T8841] pwc: recv_control_msg error -71 req 02 val 2100 [ 800.777337][ T8841] pwc: recv_control_msg error -71 req 04 val 1500 [ 800.787594][ T8841] pwc: recv_control_msg error -71 req 02 val 2500 [ 800.795682][ T8841] pwc: recv_control_msg error -71 req 02 val 2400 [ 800.804202][ T8841] pwc: recv_control_msg error -71 req 02 val 2600 [ 800.812685][ T8841] pwc: recv_control_msg error -71 req 02 val 2900 [ 800.822283][ T8841] pwc: recv_control_msg error -71 req 02 val 2800 [ 800.832834][ T8841] pwc: recv_control_msg error -71 req 04 val 1100 [ 800.841535][ T8841] pwc: recv_control_msg error -71 req 04 val 1200 [ 800.851770][ T8841] pwc: Registered as video103. [ 800.868746][ T8841] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input186 [ 800.919680][ T8841] usb 2-1: USB disconnect, device number 23 [ 801.242849][ T8845] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 801.417030][ T5918] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 801.467245][T21518] usb 4-1: USB disconnect, device number 5 [ 801.482384][T21518] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 801.506101][T21518] xr_serial 4-1:150.204: device disconnected [ 801.577218][ T5918] usb 9-1: Using ep0 maxpacket: 32 [ 801.601698][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 801.627522][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 801.644458][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 801.654928][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 801.671549][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 801.690476][ T5918] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 801.700970][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.714061][ T5918] usb 9-1: Product: syz [ 801.721174][ T5918] usb 9-1: Manufacturer: syz [ 801.728834][ T5918] usb 9-1: SerialNumber: syz [ 801.748420][ T5918] usb 9-1: config 0 descriptor?? [ 801.828758][ T5828] Bluetooth: hci0: command tx timeout [ 802.168628][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 802.190628][ T5918] input input187: Device does not respond to id packet M [ 802.206911][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 802.222614][ T5918] input input187: Device does not respond to id packet P [ 802.248494][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 802.264862][ T5918] input input187: Device does not respond to id packet B [ 802.341427][T25645] loop2: detected capacity change from 0 to 7 [ 802.349108][T25645] Dev loop2: unable to read RDB block 7 [ 802.354779][T25645] loop2: unable to read partition table [ 802.361514][T25645] loop2: partition table beyond EOD, truncated [ 802.376403][T25645] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 802.498779][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 802.510203][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 802.520116][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 802.527596][ T5918] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 802.540076][ T5918] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input187 [ 802.568088][ T5918] usb 9-1: USB disconnect, device number 2 [ 803.241039][T25667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7982'. [ 803.255193][T25667] netlink: 'syz.8.7982': attribute type 7 has an invalid length. [ 803.275683][T25667] vxlan0: entered promiscuous mode [ 803.289503][ T1087] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.318857][ T1087] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.328486][ T1087] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.343299][ T1087] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.626631][ T5918] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 803.798190][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.829307][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.843890][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.861904][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.873834][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.886147][ T5918] usb 4-1: config 0 descriptor?? [ 803.906492][ T5828] Bluetooth: hci0: command tx timeout [ 803.985532][T25700] loop2: detected capacity change from 0 to 7 [ 804.008314][T25700] Dev loop2: unable to read RDB block 7 [ 804.014258][T25700] loop2: unable to read partition table [ 804.020627][T25700] loop2: partition table beyond EOD, truncated [ 804.027954][T25700] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 804.324473][ T5918] plantronics 0003:047F:FFFF.00AB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 804.360500][T25717] [ 804.362873][T25717] ===================================================== [ 804.369813][T25717] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 804.377303][T25717] syzkaller #0 Tainted: G L [ 804.383289][T25717] ----------------------------------------------------- [ 804.390234][T25717] syz.6.8008/25717 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 804.398052][T25717] ffff88801fba6750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 804.406813][T25717] [ 804.406813][T25717] and this task is already holding: [ 804.414180][T25717] ffff8880266b0028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 804.423934][T25717] which would create a new lock dependency: [ 804.429810][T25717] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 804.437909][T25717] [ 804.437909][T25717] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 804.447346][T25717] (&client->buffer_lock){..-.}-{3:3} [ 804.447375][T25717] [ 804.447375][T25717] ... which became SOFTIRQ-irq-safe at: [ 804.460412][T25717] lock_acquire+0x107/0x340 [ 804.464994][T25717] _raw_spin_lock+0x2e/0x40 [ 804.469580][T25717] evdev_pass_values+0xb9/0xbd0 [ 804.474597][T25717] evdev_events+0x1e6/0x340 [ 804.479187][T25717] input_pass_values+0x288/0x890 [ 804.484215][T25717] input_event_dispose+0x3e5/0x6b0 [ 804.489406][T25717] input_event+0x89/0xe0 [ 804.493729][T25717] hidinput_hid_event+0x145e/0x1e50 [ 804.499009][T25717] hid_process_event+0x4be/0x620 [ 804.504030][T25717] hid_report_raw_event+0xe91/0x1720 [ 804.509402][T25717] hid_input_report+0x44b/0x580 [ 804.514332][T25717] hid_irq_in+0x47e/0x6d0 [ 804.518740][T25717] __usb_hcd_giveback_urb+0x376/0x540 [ 804.524196][T25717] dummy_timer+0x85f/0x45b0 [ 804.528785][T25717] __hrtimer_run_queues+0x51c/0xc30 [ 804.534065][T25717] hrtimer_run_softirq+0x187/0x2b0 [ 804.539259][T25717] handle_softirqs+0x22b/0x7c0 [ 804.544104][T25717] __irq_exit_rcu+0x60/0x150 [ 804.548792][T25717] irq_exit_rcu+0x9/0x30 [ 804.553133][T25717] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 804.558851][T25717] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.564915][T25717] lock_is_held_type+0x107/0x150 [ 804.569932][T25717] kernfs_parent+0x62/0x190 [ 804.574512][T25717] kernfs_add_one+0x49/0x5c0 [ 804.579184][T25717] __kernfs_create_file+0x22b/0x2e0 [ 804.584481][T25717] sysfs_add_file_mode_ns+0x238/0x300 [ 804.589943][T25717] sysfs_merge_group+0x177/0x310 [ 804.594959][T25717] dpm_sysfs_add+0xd2/0x270 [ 804.599559][T25717] device_add+0x4d8/0xb80 [ 804.603999][T25717] usb_create_ep_devs+0x12c/0x230 [ 804.609127][T25717] usb_set_configuration+0x1bc7/0x2110 [ 804.614684][T25717] usb_generic_driver_probe+0x8d/0x150 [ 804.620234][T25717] usb_probe_device+0x1c4/0x3c0 [ 804.625171][T25717] really_probe+0x26d/0xad0 [ 804.629756][T25717] __driver_probe_device+0x18c/0x320 [ 804.635127][T25717] driver_probe_device+0x4f/0x240 [ 804.640235][T25717] __device_attach_driver+0x279/0x430 [ 804.645683][T25717] bus_for_each_drv+0x251/0x2e0 [ 804.650615][T25717] __device_attach+0x2b8/0x430 [ 804.655453][T25717] device_initial_probe+0xa1/0xd0 [ 804.660555][T25717] bus_probe_device+0x12a/0x220 [ 804.665498][T25717] device_add+0x7b6/0xb80 [ 804.669904][T25717] usb_new_device+0xa39/0x1720 [ 804.674743][T25717] hub_event+0x29b1/0x4ef0 [ 804.679238][T25717] process_scheduled_works+0xad1/0x1770 [ 804.684866][T25717] worker_thread+0x8a0/0xda0 [ 804.689534][T25717] kthread+0x711/0x8a0 [ 804.693684][T25717] ret_from_fork+0x510/0xa50 [ 804.698352][T25717] ret_from_fork_asm+0x1a/0x30 [ 804.703202][T25717] [ 804.703202][T25717] to a SOFTIRQ-irq-unsafe lock: [ 804.710214][T25717] (tasklist_lock){.+.+}-{3:3} [ 804.710241][T25717] [ 804.710241][T25717] ... which became SOFTIRQ-irq-unsafe at: [ 804.722841][T25717] ... [ 804.722849][T25717] lock_acquire+0x107/0x340 [ 804.729993][T25717] _raw_read_lock+0x36/0x50 [ 804.734589][T25717] __do_wait+0xde/0x740 [ 804.738825][T25717] do_wait+0x1e8/0x4f0 [ 804.742973][T25717] kernel_wait+0xab/0x170 [ 804.747380][T25717] call_usermodehelper_exec_work+0xbe/0x230 [ 804.753345][T25717] process_scheduled_works+0xad1/0x1770 [ 804.758966][T25717] worker_thread+0x8a0/0xda0 [ 804.763630][T25717] kthread+0x711/0x8a0 [ 804.767774][T25717] ret_from_fork+0x510/0xa50 [ 804.772437][T25717] ret_from_fork_asm+0x1a/0x30 [ 804.777284][T25717] [ 804.777284][T25717] other info that might help us debug this: [ 804.777284][T25717] [ 804.787533][T25717] Chain exists of: [ 804.787533][T25717] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 804.787533][T25717] [ 804.800835][T25717] Possible interrupt unsafe locking scenario: [ 804.800835][T25717] [ 804.809146][T25717] CPU0 CPU1 [ 804.814515][T25717] ---- ---- [ 804.819864][T25717] lock(tasklist_lock); [ 804.824103][T25717] local_irq_disable(); [ 804.830843][T25717] lock(&client->buffer_lock); [ 804.838218][T25717] lock(&new->fa_lock); [ 804.845246][T25717] [ 804.848705][T25717] lock(&client->buffer_lock); [ 804.853736][T25717] [ 804.853736][T25717] *** DEADLOCK *** [ 804.853736][T25717] [ 804.861872][T25717] 7 locks held by syz.6.8008/25717: [ 804.867059][T25717] #0: ffff8880295f7118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 804.876287][T25717] #1: ffff888143e9c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 804.886391][T25717] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 804.896075][T25717] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 804.905645][T25717] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 804.914787][T25717] #5: ffff8880266b0028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 804.924987][T25717] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 804.934066][T25717] [ 804.934066][T25717] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 804.944467][T25717] -> (&client->buffer_lock){..-.}-{3:3} { [ 804.950198][T25717] IN-SOFTIRQ-W at: [ 804.954255][T25717] lock_acquire+0x107/0x340 [ 804.960408][T25717] _raw_spin_lock+0x2e/0x40 [ 804.966563][T25717] evdev_pass_values+0xb9/0xbd0 [ 804.973056][T25717] evdev_events+0x1e6/0x340 [ 804.979206][T25717] input_pass_values+0x288/0x890 [ 804.985809][T25717] input_event_dispose+0x3e5/0x6b0 [ 804.992596][T25717] input_event+0x89/0xe0 [ 804.998497][T25717] hidinput_hid_event+0x145e/0x1e50 [ 805.005344][T25717] hid_process_event+0x4be/0x620 [ 805.011923][T25717] hid_report_raw_event+0xe91/0x1720 [ 805.018858][T25717] hid_input_report+0x44b/0x580 [ 805.025366][T25717] hid_irq_in+0x47e/0x6d0 [ 805.031344][T25717] __usb_hcd_giveback_urb+0x376/0x540 [ 805.038371][T25717] dummy_timer+0x85f/0x45b0 [ 805.044528][T25717] __hrtimer_run_queues+0x51c/0xc30 [ 805.051371][T25717] hrtimer_run_softirq+0x187/0x2b0 [ 805.058138][T25717] handle_softirqs+0x22b/0x7c0 [ 805.064545][T25717] __irq_exit_rcu+0x60/0x150 [ 805.070858][T25717] irq_exit_rcu+0x9/0x30 [ 805.076737][T25717] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 805.084009][T25717] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.091627][T25717] lock_is_held_type+0x107/0x150 [ 805.098206][T25717] kernfs_parent+0x62/0x190 [ 805.104367][T25717] kernfs_add_one+0x49/0x5c0 [ 805.110612][T25717] __kernfs_create_file+0x22b/0x2e0 [ 805.117461][T25717] sysfs_add_file_mode_ns+0x238/0x300 [ 805.124480][T25717] sysfs_merge_group+0x177/0x310 [ 805.131066][T25717] dpm_sysfs_add+0xd2/0x270 [ 805.137264][T25717] device_add+0x4d8/0xb80 [ 805.143241][T25717] usb_create_ep_devs+0x12c/0x230 [ 805.149906][T25717] usb_set_configuration+0x1bc7/0x2110 [ 805.157005][T25717] usb_generic_driver_probe+0x8d/0x150 [ 805.164117][T25717] usb_probe_device+0x1c4/0x3c0 [ 805.170630][T25717] really_probe+0x26d/0xad0 [ 805.176787][T25717] __driver_probe_device+0x18c/0x320 [ 805.183736][T25717] driver_probe_device+0x4f/0x240 [ 805.190418][T25717] __device_attach_driver+0x279/0x430 [ 805.197442][T25717] bus_for_each_drv+0x251/0x2e0 [ 805.203941][T25717] __device_attach+0x2b8/0x430 [ 805.210348][T25717] device_initial_probe+0xa1/0xd0 [ 805.217014][T25717] bus_probe_device+0x12a/0x220 [ 805.223523][T25717] device_add+0x7b6/0xb80 [ 805.229510][T25717] usb_new_device+0xa39/0x1720 [ 805.235942][T25717] hub_event+0x29b1/0x4ef0 [ 805.242014][T25717] process_scheduled_works+0xad1/0x1770 [ 805.249202][T25717] worker_thread+0x8a0/0xda0 [ 805.255434][T25717] kthread+0x711/0x8a0 [ 805.261154][T25717] ret_from_fork+0x510/0xa50 [ 805.267392][T25717] ret_from_fork_asm+0x1a/0x30 [ 805.273805][T25717] INITIAL USE at: [ 805.277690][T25717] lock_acquire+0x107/0x340 [ 805.283741][T25717] _raw_spin_lock+0x2e/0x40 [ 805.289800][T25717] evdev_pass_values+0xb9/0xbd0 [ 805.296202][T25717] evdev_events+0x1e6/0x340 [ 805.302262][T25717] input_pass_values+0x288/0x890 [ 805.308769][T25717] input_event_dispose+0x330/0x6b0 [ 805.315441][T25717] input_inject_event+0x1dd/0x340 [ 805.322021][T25717] evdev_write+0x2fc/0x480 [ 805.327995][T25717] vfs_write+0x27e/0xb30 [ 805.333790][T25717] ksys_write+0x145/0x250 [ 805.339671][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 805.346425][T25717] do_fast_syscall_32+0x34/0x80 [ 805.352838][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.360719][T25717] } [ 805.363202][T25717] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 805.371342][T25717] [ 805.371342][T25717] the dependencies between the lock to be acquired [ 805.371352][T25717] and SOFTIRQ-irq-unsafe lock: [ 805.384842][T25717] -> (tasklist_lock){.+.+}-{3:3} { [ 805.390136][T25717] HARDIRQ-ON-R at: [ 805.394277][T25717] lock_acquire+0x107/0x340 [ 805.400813][T25717] _raw_read_lock+0x36/0x50 [ 805.407403][T25717] __do_wait+0xde/0x740 [ 805.413557][T25717] do_wait+0x1e8/0x4f0 [ 805.419621][T25717] kernel_wait+0xab/0x170 [ 805.425949][T25717] call_usermodehelper_exec_work+0xbe/0x230 [ 805.433830][T25717] process_scheduled_works+0xad1/0x1770 [ 805.441361][T25717] worker_thread+0x8a0/0xda0 [ 805.447939][T25717] kthread+0x711/0x8a0 [ 805.454015][T25717] ret_from_fork+0x510/0xa50 [ 805.460589][T25717] ret_from_fork_asm+0x1a/0x30 [ 805.467342][T25717] SOFTIRQ-ON-R at: [ 805.471487][T25717] lock_acquire+0x107/0x340 [ 805.477977][T25717] _raw_read_lock+0x36/0x50 [ 805.484480][T25717] __do_wait+0xde/0x740 [ 805.490634][T25717] do_wait+0x1e8/0x4f0 [ 805.496711][T25717] kernel_wait+0xab/0x170 [ 805.503055][T25717] call_usermodehelper_exec_work+0xbe/0x230 [ 805.510938][T25717] process_scheduled_works+0xad1/0x1770 [ 805.518505][T25717] worker_thread+0x8a0/0xda0 [ 805.525080][T25717] kthread+0x711/0x8a0 [ 805.531135][T25717] ret_from_fork+0x510/0xa50 [ 805.538229][T25717] ret_from_fork_asm+0x1a/0x30 [ 805.545071][T25717] INITIAL USE at: [ 805.549126][T25717] lock_acquire+0x107/0x340 [ 805.555529][T25717] _raw_write_lock_irq+0x3d/0x50 [ 805.562366][T25717] copy_process+0x2185/0x3950 [ 805.568943][T25717] kernel_clone+0x21e/0x820 [ 805.575349][T25717] user_mode_thread+0xdd/0x140 [ 805.582015][T25717] rest_init+0x23/0x300 [ 805.588085][T25717] start_kernel+0x381/0x3d0 [ 805.594486][T25717] x86_64_start_reservations+0x24/0x30 [ 805.601848][T25717] x86_64_start_kernel+0x143/0x1c0 [ 805.608868][T25717] common_startup_64+0x13e/0x147 [ 805.615713][T25717] INITIAL READ USE at: [ 805.620380][T25717] lock_acquire+0x107/0x340 [ 805.627223][T25717] _raw_read_lock+0x36/0x50 [ 805.634066][T25717] __do_wait+0xde/0x740 [ 805.640646][T25717] do_wait+0x1e8/0x4f0 [ 805.647061][T25717] kernel_wait+0xab/0x170 [ 805.653815][T25717] call_usermodehelper_exec_work+0xbe/0x230 [ 805.662256][T25717] process_scheduled_works+0xad1/0x1770 [ 805.670230][T25717] worker_thread+0x8a0/0xda0 [ 805.677156][T25717] kthread+0x711/0x8a0 [ 805.683569][T25717] ret_from_fork+0x510/0xa50 [ 805.690495][T25717] ret_from_fork_asm+0x1a/0x30 [ 805.697599][T25717] } [ 805.700270][T25717] ... key at: [] tasklist_lock+0x18/0x40 [ 805.708162][T25717] ... acquired at: [ 805.712145][T25717] _raw_read_lock+0x36/0x50 [ 805.716832][T25717] send_sigurg+0x12b/0x420 [ 805.721437][T25717] sk_send_sigurg+0x6c/0x2e0 [ 805.726199][T25717] queue_oob+0x420/0x4f0 [ 805.730724][T25717] unix_stream_sendmsg+0xc32/0xde0 [ 805.736016][T25717] __sock_sendmsg+0x21c/0x270 [ 805.740881][T25717] ____sys_sendmsg+0x52d/0x820 [ 805.745832][T25717] ___sys_sendmsg+0x21f/0x2a0 [ 805.750693][T25717] __sys_sendmmsg+0x28e/0x430 [ 805.755548][T25717] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 805.761266][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 805.766639][T25717] do_fast_syscall_32+0x34/0x80 [ 805.771653][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.778153][T25717] [ 805.780466][T25717] -> (&f_owner->lock){....}-{3:3} { [ 805.785756][T25717] INITIAL USE at: [ 805.789725][T25717] lock_acquire+0x107/0x340 [ 805.796041][T25717] _raw_write_lock_irq+0x3d/0x50 [ 805.802699][T25717] __f_setown+0x67/0x370 [ 805.808797][T25717] do_fcntl+0x173f/0x1a50 [ 805.814969][T25717] do_compat_fcntl64+0x477/0x720 [ 805.821658][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 805.828593][T25717] do_fast_syscall_32+0x34/0x80 [ 805.835179][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.843241][T25717] INITIAL READ USE at: [ 805.847654][T25717] lock_acquire+0x107/0x340 [ 805.854490][T25717] _raw_read_lock_irqsave+0x48/0x60 [ 805.861855][T25717] send_sigio+0x38/0x370 [ 805.868261][T25717] kill_fasync+0x24d/0x4d0 [ 805.874841][T25717] lease_break_callback+0x26/0x30 [ 805.882043][T25717] __break_lease+0x730/0x1620 [ 805.888897][T25717] try_break_deleg+0xb1/0x120 [ 805.895744][T25717] notify_change+0xb5a/0xf40 [ 805.902493][T25717] chmod_common+0x248/0x400 [ 805.909169][T25717] __ia32_sys_fchmod+0xf6/0x160 [ 805.916285][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 805.923737][T25717] do_fast_syscall_32+0x34/0x80 [ 805.930754][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.939250][T25717] } [ 805.941828][T25717] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 805.950757][T25717] ... acquired at: [ 805.954640][T25717] _raw_read_lock_irqsave+0x48/0x60 [ 805.960010][T25717] send_sigio+0x38/0x370 [ 805.964419][T25717] kill_fasync+0x24d/0x4d0 [ 805.969010][T25717] lease_break_callback+0x26/0x30 [ 805.974465][T25717] __break_lease+0x730/0x1620 [ 805.979306][T25717] try_break_deleg+0xb1/0x120 [ 805.984231][T25717] notify_change+0xb5a/0xf40 [ 805.988984][T25717] chmod_common+0x248/0x400 [ 805.993650][T25717] __ia32_sys_fchmod+0xf6/0x160 [ 805.998666][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 806.004033][T25717] do_fast_syscall_32+0x34/0x80 [ 806.009050][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.015544][T25717] [ 806.017857][T25717] -> (&new->fa_lock){....}-{3:3} { [ 806.022978][T25717] INITIAL USE at: [ 806.026871][T25717] lock_acquire+0x107/0x340 [ 806.032927][T25717] _raw_write_lock_irq+0x3d/0x50 [ 806.039419][T25717] fasync_remove_entry+0xf1/0x1c0 [ 806.046015][T25717] tty_fasync+0x13c/0x350 [ 806.051898][T25717] __fput+0x8a2/0xa70 [ 806.057441][T25717] task_work_run+0x1d4/0x260 [ 806.063595][T25717] exit_to_user_mode_loop+0xef/0x4e0 [ 806.070437][T25717] __do_fast_syscall_32+0x398/0x570 [ 806.077193][T25717] do_fast_syscall_32+0x34/0x80 [ 806.083597][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.091483][T25717] INITIAL READ USE at: [ 806.095803][T25717] lock_acquire+0x107/0x340 [ 806.102293][T25717] _raw_read_lock_irqsave+0x48/0x60 [ 806.109490][T25717] kill_fasync+0x199/0x4d0 [ 806.115905][T25717] sock_wake_async+0x137/0x160 [ 806.122667][T25717] sock_def_readable+0x3c1/0x530 [ 806.129602][T25717] unix_stream_sendmsg+0x853/0xde0 [ 806.136698][T25717] __sock_sendmsg+0x21c/0x270 [ 806.143376][T25717] ____sys_sendmsg+0x505/0x820 [ 806.150136][T25717] ___sys_sendmsg+0x21f/0x2a0 [ 806.156801][T25717] __sys_sendmsg+0x164/0x220 [ 806.163382][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 806.170659][T25717] do_fast_syscall_32+0x34/0x80 [ 806.177496][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.185813][T25717] } [ 806.188296][T25717] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 806.196987][T25717] ... acquired at: [ 806.200776][T25717] _raw_read_lock_irqsave+0x48/0x60 [ 806.206149][T25717] kill_fasync+0x199/0x4d0 [ 806.210736][T25717] evdev_pass_values+0x627/0xbd0 [ 806.215922][T25717] evdev_events+0x1e6/0x340 [ 806.220587][T25717] input_pass_values+0x288/0x890 [ 806.225699][T25717] input_event_dispose+0x330/0x6b0 [ 806.230980][T25717] input_inject_event+0x1dd/0x340 [ 806.236173][T25717] evdev_write+0x2fc/0x480 [ 806.240747][T25717] vfs_write+0x27e/0xb30 [ 806.245157][T25717] ksys_write+0x145/0x250 [ 806.249644][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 806.255007][T25717] do_fast_syscall_32+0x34/0x80 [ 806.260023][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.266517][T25717] [ 806.268831][T25717] [ 806.268831][T25717] stack backtrace: [ 806.274708][T25717] CPU: 1 UID: 0 PID: 25717 Comm: syz.6.8008 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.274731][T25717] Tainted: [L]=SOFTLOCKUP [ 806.274738][T25717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.274750][T25717] Call Trace: [ 806.274759][T25717] [ 806.274767][T25717] dump_stack_lvl+0xe8/0x150 [ 806.274789][T25717] __lock_acquire+0x2a95/0x2cf0 [ 806.274815][T25717] ? kill_fasync+0x199/0x4d0 [ 806.274839][T25717] lock_acquire+0x107/0x340 [ 806.274854][T25717] ? kill_fasync+0x199/0x4d0 [ 806.274877][T25717] ? do_raw_spin_lock+0x121/0x290 [ 806.274900][T25717] ? evdev_pass_values+0xb9/0xbd0 [ 806.274919][T25717] _raw_read_lock_irqsave+0x48/0x60 [ 806.274944][T25717] ? kill_fasync+0x199/0x4d0 [ 806.274966][T25717] kill_fasync+0x199/0x4d0 [ 806.274989][T25717] ? kill_fasync+0x53/0x4d0 [ 806.275013][T25717] evdev_pass_values+0x627/0xbd0 [ 806.275031][T25717] ? evdev_pass_values+0x5e1/0xbd0 [ 806.275049][T25717] evdev_events+0x1e6/0x340 [ 806.275064][T25717] ? evdev_events+0x79/0x340 [ 806.275079][T25717] ? input_pass_values+0x8d/0x890 [ 806.275103][T25717] input_pass_values+0x288/0x890 [ 806.275130][T25717] ? input_handle_event+0x70c/0xf30 [ 806.275153][T25717] input_event_dispose+0x330/0x6b0 [ 806.275176][T25717] input_inject_event+0x1dd/0x340 [ 806.275198][T25717] ? input_inject_event+0xb6/0x340 [ 806.275219][T25717] evdev_write+0x2fc/0x480 [ 806.275237][T25717] ? __pfx_evdev_write+0x10/0x10 [ 806.275254][T25717] ? bpf_lsm_file_permission+0x9/0x20 [ 806.275271][T25717] ? security_file_permission+0x75/0x290 [ 806.275289][T25717] ? rw_verify_area+0x255/0x4d0 [ 806.275313][T25717] ? __pfx_evdev_write+0x10/0x10 [ 806.275330][T25717] vfs_write+0x27e/0xb30 [ 806.275348][T25717] ? __pfx_vfs_write+0x10/0x10 [ 806.275363][T25717] ? __fget_files+0x2a/0x420 [ 806.275384][T25717] ? __fget_files+0x2a/0x420 [ 806.275403][T25717] ? __fget_files+0x3a0/0x420 [ 806.275427][T25717] ? __fget_files+0x2a/0x420 [ 806.275449][T25717] ksys_write+0x145/0x250 [ 806.275465][T25717] ? __pfx_ksys_write+0x10/0x10 [ 806.275483][T25717] __do_fast_syscall_32+0x1dc/0x570 [ 806.275502][T25717] ? lockdep_hardirqs_on+0x7b/0x110 [ 806.275518][T25717] ? do_fast_syscall_32+0x34/0x80 [ 806.275537][T25717] ? irqentry_exit+0x10f/0x670 [ 806.275554][T25717] do_fast_syscall_32+0x34/0x80 [ 806.275572][T25717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.275593][T25717] RIP: 0023:0xf7f07539 [ 806.275609][T25717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.275624][T25717] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 806.275641][T25717] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 806.275654][T25717] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.275664][T25717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.275675][T25717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.275685][T25717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.275701][T25717] [ 806.580771][ T8842] usb 9-1: new high-speed USB device number 3 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 806.641319][ T5828] Bluetooth: hci0: command tx timeout [ 806.716554][ T129] usb 4-1: USB disconnect, device number 6 [ 806.746397][ T8842] usb 9-1: Using ep0 maxpacket: 32 [ 807.498808][T21503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.540238][ T8842] usb 9-1: device descriptor read/all, error -71 [ 807.608439][T21503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.692193][T21503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.740589][T21503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.808809][T21503] bridge_slave_1: left allmulticast mode [ 807.814474][T21503] bridge_slave_1: left promiscuous mode [ 807.823349][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.832497][T21503] bridge_slave_0: left allmulticast mode [ 807.838426][T21503] bridge_slave_0: left promiscuous mode [ 807.844072][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.915238][T21503] dvmrp0 (unregistering): left allmulticast mode [ 807.923822][T21503] bond2 (unregistering): (slave geneve2): Releasing active interface [ 807.991240][T21503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.003736][T21503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.013305][T21503] bond0 (unregistering): Released all slaves [ 808.022629][T21503] bond1 (unregistering): (slave lo): Releasing backup interface [ 808.031536][T21503] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 808.044746][T21503] bond1 (unregistering): Released all slaves [ 808.059483][T21503] bond2 (unregistering): Released all slaves [ 808.300753][T21503] hsr_slave_0: left promiscuous mode [ 808.311495][T21503] hsr_slave_1: left promiscuous mode [ 808.317448][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.325048][T21503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.335398][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.358269][T21503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.368504][T21503] veth1_macvtap: left promiscuous mode [ 808.373997][T21503] veth0_macvtap: left promiscuous mode [ 808.379806][T21503] veth1_vlan: left promiscuous mode [ 808.385143][T21503] veth0_vlan: left promiscuous mode [ 808.547995][T21503] team0 (unregistering): Port device team_slave_1 removed [ 808.581420][T21503] team0 (unregistering): Port device team_slave_0 removed [ 808.938774][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.945140][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.965591][T21503] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.012351][T21503] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.053799][T21503] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.128697][T21503] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.238682][T21503] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.249056][T21503] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.295377][T21503] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.308972][T21503] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.362049][T21503] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.372495][T21503] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.440892][T21503] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.451864][T21503] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.510616][T21503] bridge_slave_1: left allmulticast mode [ 809.517077][T21503] bridge_slave_1: left promiscuous mode [ 809.522823][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.533864][T21503] bridge_slave_0: left allmulticast mode [ 809.540161][T21503] bridge_slave_0: left promiscuous mode [ 809.545878][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.555769][T21503] bridge_slave_1: left allmulticast mode [ 809.562492][T21503] bridge_slave_1: left promiscuous mode [ 809.568411][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.577300][T21503] bridge_slave_0: left allmulticast mode [ 809.582954][T21503] bridge_slave_0: left promiscuous mode [ 809.590198][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.701837][T21503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.712228][T21503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.721992][T21503] bond0 (unregistering): Released all slaves [ 809.794974][T21503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.805199][T21503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.815164][T21503] bond0 (unregistering): Released all slaves [ 810.115319][T21503] hsr_slave_0: left promiscuous mode [ 810.121481][T21503] hsr_slave_1: left promiscuous mode [ 810.127618][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.135010][T21503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.143225][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.152047][T21503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.161592][T21503] hsr_slave_0: left promiscuous mode [ 810.167632][T21503] hsr_slave_1: left promiscuous mode [ 810.173270][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.180759][T21503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.188382][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.195751][T21503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.207969][T21503] veth1_macvtap: left promiscuous mode [ 810.213482][T21503] veth0_macvtap: left promiscuous mode [ 810.219629][T21503] veth1_vlan: left promiscuous mode [ 810.224865][T21503] veth0_vlan: left promiscuous mode [ 810.230931][T21503] veth1_macvtap: left promiscuous mode [ 810.236477][T21503] veth0_macvtap: left promiscuous mode [ 810.241999][T21503] veth1_vlan: left promiscuous mode [ 810.247346][T21503] veth0_vlan: left promiscuous mode [ 810.429071][T21503] team0 (unregistering): Port device team_slave_1 removed [ 810.455750][T21503] team0 (unregistering): Port device team_slave_0 removed [ 810.658757][T21503] team0 (unregistering): Port device team_slave_1 removed [ 810.689264][T21503] team0 (unregistering): Port device team_slave_0 removed