last executing test programs: 3m6.138197867s ago: executing program 2 (id=157): r0 = io_uring_setup(0x678d, &(0x7f0000000340)={0x0, 0xffffffff, 0x80, 0x0, 0xf1}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 3m5.825482105s ago: executing program 2 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x80004001}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='_', 0x1}], 0x1}}], 0x2, 0xc8000) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3m5.067250459s ago: executing program 2 (id=169): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 3m4.793961465s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m4.508111448s ago: executing program 2 (id=177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1}, 0x3) sendmmsg$alg(r1, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa2b7adf90d8fc637536b3a9d31f56371d75e0206b8f145c055d0efdcf", 0x1d}], 0x1}], 0x1, 0x40044) 3m4.030093463s ago: executing program 2 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12251, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20009080) 3m3.31817322s ago: executing program 32 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12251, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20009080) 43.872114262s ago: executing program 1 (id=1106): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040), 0x4) 42.799402224s ago: executing program 1 (id=1114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x9}], 0x1, 0x40022001, 0x0) 42.700410398s ago: executing program 1 (id=1115): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x274, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 42.49702331s ago: executing program 1 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 42.34559038s ago: executing program 1 (id=1121): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendto$packet(r0, &(0x7f00000001c0)="123c7b3c64a6dd538dcde06645bf1c1dc4044cbbba82b02d2331dd426edff5aec2fb22", 0x23, 0x20048015, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0xf0, 0x6, @broadcast}, 0x14) 41.992757722s ago: executing program 1 (id=1122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) 41.611109709s ago: executing program 33 (id=1122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) 13.382329025s ago: executing program 4 (id=1374): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="4d00330040bc01000802110000000000000000000250505050509400ac0146c0000f9db4a84f2beb2f4ecb945a20a904b02d1a00080010000000000000000300010008000000000406000000090000000600cd000000000004008e0008005700961200ca"], 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) 13.058712075s ago: executing program 4 (id=1375): r0 = getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0x9}, 0x2, 0x10, 0x5, r0, 0x0, 0x1ff, 'syz0\x00', 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12.695202089s ago: executing program 4 (id=1378): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0) 12.46775291s ago: executing program 4 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 12.218384001s ago: executing program 4 (id=1381): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r1 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x5dfc, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f0000000380)="88", 0x1}], 0x1, 0x0) 11.744813445s ago: executing program 4 (id=1386): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 11.183241856s ago: executing program 34 (id=1386): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 7.778781769s ago: executing program 3 (id=1413): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) 7.535163447s ago: executing program 3 (id=1414): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5800000010003904faffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000003800128008000100677265002c0002800800040009000000080001007c190e4c48b80b89b2be3ec63d36b619cefd52ddf8303367e6f6c0d0bab55002706e0545db9c65328974119e9f955ba4c458d89dd3de83bbeee157efbcaea2fffba10931f214548bae701bb2af6a75a67d7e84fa8fa0f048", @ANYRES32=r1, @ANYBLOB="0600020000c00000080014009d000000060011004e210000"], 0x58}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 4.380622127s ago: executing program 6 (id=1440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 4.083380447s ago: executing program 6 (id=1441): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000780)={0x1, 0xfffff800, 0x1ff, 0xa, 0x8, 0x3, 0x2, 0xe, 0x0, 0x40, 0xffffffff, 0x2}) 3.948360414s ago: executing program 3 (id=1442): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000840)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 3.771916274s ago: executing program 3 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 2.807456378s ago: executing program 0 (id=1446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0xf, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb41}}, 0x0, 0x0, 0x3b, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 2.802818329s ago: executing program 6 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.592889002s ago: executing program 3 (id=1448): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = epoll_create1(0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 2.37291644s ago: executing program 3 (id=1450): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xc, 0x4, "ecfe0e18"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x7, 0x4, "dbc98787"}, 0x0, 0x0}) 2.178875414s ago: executing program 5 (id=1451): syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000000b}) 1.929181968s ago: executing program 5 (id=1452): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 1.89639141s ago: executing program 6 (id=1453): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8", 0x49, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.825746992s ago: executing program 0 (id=1454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c) 1.701432235s ago: executing program 5 (id=1455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000004c0)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.402004198s ago: executing program 0 (id=1456): timer_create(0x7, &(0x7f0000000200)={0x0, 0x11}, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.267637875s ago: executing program 5 (id=1457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="3941f6f01ab5", 0x6}], 0x1) 910.729533ms ago: executing program 0 (id=1458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 876.393909ms ago: executing program 6 (id=1459): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 699.103153ms ago: executing program 0 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 600.668426ms ago: executing program 6 (id=1461): syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000011c0)={0x80002005}) 307.586558ms ago: executing program 0 (id=1462): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(r1, r0, 0x0, 0x43) 219.505115ms ago: executing program 5 (id=1463): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}, 0xa5d9}], 0x1, 0x2000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5 (id=1464): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): th an up link [ 191.334078][ T7724] hsr_slave_0: entered promiscuous mode [ 191.342426][ T7724] hsr_slave_1: entered promiscuous mode [ 191.527090][ T7801] team0: Port device team_slave_0 added [ 191.568534][ T7801] team0: Port device team_slave_1 added [ 191.877735][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.893480][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.992897][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.074932][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.100643][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.131233][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.182476][ T12] bridge_slave_1: left allmulticast mode [ 192.190187][ T12] bridge_slave_1: left promiscuous mode [ 192.197739][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.279446][ T12] bridge_slave_0: left allmulticast mode [ 192.285262][ T12] bridge_slave_0: left promiscuous mode [ 192.300034][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.804944][ T5861] Bluetooth: hci2: command tx timeout [ 193.241050][ T5949] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 193.366244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.393687][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.412010][ T5949] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.420705][ T12] bond0 (unregistering): Released all slaves [ 193.438052][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 193.457615][ T5949] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.482189][ T5949] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.498870][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.516756][ T7912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.546056][ T5949] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.622395][ T24] usb 6-1: config 0 has no interfaces? [ 193.644986][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 193.666205][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.675413][ T24] usb 6-1: Product: syz [ 193.680551][ T24] usb 6-1: Manufacturer: syz [ 193.685530][ T24] usb 6-1: SerialNumber: syz [ 193.700500][ T24] usb 6-1: config 0 descriptor?? [ 193.762654][ T10] usb 1-1: USB disconnect, device number 17 [ 193.867359][ T12] bond1 (unregistering): (slave batadv1): Releasing active interface [ 193.886508][ T12] bond1 (unregistering): Released all slaves [ 194.182590][ T7801] hsr_slave_0: entered promiscuous mode [ 194.197176][ T7801] hsr_slave_1: entered promiscuous mode [ 194.205472][ T7801] debugfs: 'hsr0' already exists in 'hsr' [ 194.226017][ T7801] Cannot create hsr debugfs directory [ 194.578898][ T12] hsr_slave_0: left promiscuous mode [ 194.585620][ T12] hsr_slave_1: left promiscuous mode [ 194.593238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.609864][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.620597][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.639229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.684843][ T12] veth1_macvtap: left promiscuous mode [ 194.690900][ T12] veth0_macvtap: left promiscuous mode [ 194.696680][ T12] veth1_vlan: left promiscuous mode [ 194.703949][ T12] veth0_vlan: left promiscuous mode [ 194.883931][ T5861] Bluetooth: hci2: command tx timeout [ 195.946710][ T12] team0 (unregistering): Port device team_slave_1 removed [ 196.051757][ T12] team0 (unregistering): Port device team_slave_0 removed [ 197.321112][ T7958] ======================================================= [ 197.321112][ T7958] WARNING: The mand mount option has been deprecated and [ 197.321112][ T7958] and is ignored by this kernel. Remove the mand [ 197.321112][ T7958] option from the mount to silence this warning. [ 197.321112][ T7958] ======================================================= [ 197.356520][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.226488][ T5949] usb 6-1: USB disconnect, device number 15 [ 199.015540][ T7801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.154018][ T7801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.238480][ T7801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.276268][ T7801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.616494][ T7724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.679723][ T7724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.762639][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.777673][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.819888][ T7724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.875558][ T7724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.293867][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.402858][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.475126][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.532376][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.539790][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.553113][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.575267][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.582934][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.636215][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.665993][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.673580][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.724228][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 200.738816][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 200.754992][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.762504][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.765097][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 200.785634][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 200.813313][ T24] usb 5-1: string descriptor 0 read error: -71 [ 200.828442][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.839265][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.862372][ T24] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 200.921960][ T24] usb 5-1: no configuration chosen from 1 choice [ 200.949432][ T24] usb 5-1: USB disconnect, device number 11 [ 201.172027][ T8047] batadv_slave_1: entered promiscuous mode [ 201.199255][ T8046] batadv_slave_1: left promiscuous mode [ 201.244360][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.288338][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.577067][ T7724] veth0_vlan: entered promiscuous mode [ 201.609314][ T7801] veth0_vlan: entered promiscuous mode [ 201.661892][ T7724] veth1_vlan: entered promiscuous mode [ 201.721637][ T7801] veth1_vlan: entered promiscuous mode [ 201.815624][ T7724] veth0_macvtap: entered promiscuous mode [ 201.883331][ T7724] veth1_macvtap: entered promiscuous mode [ 201.979061][ T7801] veth0_macvtap: entered promiscuous mode [ 202.047677][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.074779][ T7801] veth1_macvtap: entered promiscuous mode [ 202.132235][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.177366][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.191406][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.239985][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.284586][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.313578][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.370917][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.413135][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.569875][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.676617][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.704996][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.887737][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.997819][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.011811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.029865][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.081770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.097610][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 203.119426][ T5949] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.133197][ T5949] usb 5-1: config 0 has no interface number 0 [ 203.142523][ T5949] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.165371][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.193566][ T5949] usb 5-1: Product: syz [ 203.199293][ T8068] syz.0.659 (8068): drop_caches: 2 [ 203.207748][ T5949] usb 5-1: Manufacturer: syz [ 203.226056][ T5949] usb 5-1: SerialNumber: syz [ 203.266563][ T5949] usb 5-1: config 0 descriptor?? [ 203.272222][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.290343][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.310052][ T5949] smsc95xx v2.0.0 [ 203.393658][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.433934][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.493342][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 203.560541][ T8093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.651246][ T982] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 203.738218][ T5949] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 203.765582][ T5949] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.768576][ T8093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.843912][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.876460][ T982] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.919205][ T30] audit: type=1326 audit(1755000670.822:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 203.945766][ T982] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.961194][ T30] audit: type=1326 audit(1755000670.832:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 203.986854][ T30] audit: type=1326 audit(1755000670.832:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.025572][ T982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 204.045943][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 204.073271][ T982] usb 6-1: Product: syz [ 204.080548][ T30] audit: type=1326 audit(1755000670.832:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.108704][ T982] usb 6-1: Manufacturer: syz [ 204.124240][ T982] usb 6-1: SerialNumber: syz [ 204.203427][ T30] audit: type=1326 audit(1755000670.832:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.299225][ T30] audit: type=1326 audit(1755000670.852:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.372598][ T30] audit: type=1326 audit(1755000670.852:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.384567][ T5949] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 204.434071][ T982] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 204.453265][ T5949] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 204.502757][ T30] audit: type=1326 audit(1755000670.852:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.537305][ T30] audit: type=1326 audit(1755000670.872:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.576414][ T5949] usb 5-1: USB disconnect, device number 12 [ 204.714147][ T5872] usb 6-1: USB disconnect, device number 16 [ 204.731025][ T30] audit: type=1326 audit(1755000670.872:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 204.750500][ T5872] usblp0: removed [ 205.046916][ T5927] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.144269][ T8127] capability: warning: `syz.3.673' uses deprecated v2 capabilities in a way that may be insecure [ 205.208709][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 205.230407][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.253310][ T5927] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.272721][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.338720][ T5927] usb 2-1: config 0 descriptor?? [ 205.515651][ T8135] Â: renamed from pim6reg1 [ 205.615280][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 205.671994][ T5927] usb 2-1: USB disconnect, device number 16 [ 205.836287][ T8148] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 205.933709][ T8154] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 206.272627][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 206.469770][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.502347][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.542123][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.560252][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.594370][ T9] usb 1-1: config 0 descriptor?? [ 207.042538][ T9] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 207.123115][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0017/input/input19 [ 207.392815][ T9] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 207.486542][ T9] usb 1-1: USB disconnect, device number 18 [ 207.806079][ T8204] fido_id[8204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 208.027642][ T982] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 208.229690][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.258678][ T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.277693][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.307244][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 208.350584][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 208.407096][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.440623][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.472855][ T982] usb 4-1: Product: syz [ 208.507726][ T982] usb 4-1: Manufacturer: syz [ 208.561086][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 208.566564][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 208.669439][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 208.692635][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 208.823557][ T5927] usb 4-1: USB disconnect, device number 10 [ 209.567915][ T5927] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.729724][ T5927] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.739123][ T5927] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.751514][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.761050][ T5949] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 209.768834][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 209.780297][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 209.793871][ T5927] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.803274][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.811706][ T5927] usb 4-1: Product: syz [ 209.815993][ T5927] usb 4-1: Manufacturer: syz [ 209.830138][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 209.835426][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 209.842675][ T5927] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 209.852529][ T5927] cdc_wdm 4-1:1.0: Unknown control protocol [ 209.958707][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.982191][ T5949] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.996544][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 210.007031][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.027963][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.048821][ T5949] usb 1-1: config 0 descriptor?? [ 210.134268][ T6000] usb 4-1: USB disconnect, device number 11 [ 210.170719][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.314359][ T5949] usbhid 1-1:0.0: can't add hid device: -71 [ 210.326625][ T5949] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 210.345750][ T5949] usb 1-1: USB disconnect, device number 19 [ 210.497967][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 210.670113][ T5872] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 210.686963][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.718246][ T5872] usb 2-1: Product: syz [ 210.722730][ T5872] usb 2-1: Manufacturer: syz [ 210.733999][ T5872] usb 2-1: SerialNumber: syz [ 210.759282][ T5872] usb 2-1: config 0 descriptor?? [ 210.782240][ T8277] loop7: detected capacity change from 0 to 7 [ 210.807699][ T6000] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 210.995118][ T5872] usb 2-1: ignoring: probably an ADSL modem [ 210.997760][ T6000] usb 1-1: Using ep0 maxpacket: 16 [ 211.062318][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.083969][ T6000] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 211.098713][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.149672][ T6000] usb 1-1: config 0 descriptor?? [ 211.355257][ T8277] Dev loop7: unable to read RDB block 7 [ 211.357710][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 211.361508][ T8277] loop7: unable to read partition table [ 211.370949][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 211.398788][ T5872] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 211.413748][ T8277] loop7: partition table beyond EOD, truncated [ 211.434526][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 211.444484][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 211.486066][ T8277] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 211.621871][ T6000] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 211.634525][ T9] usb 2-1: USB disconnect, device number 17 [ 212.048259][ T5927] usb 1-1: USB disconnect, device number 20 [ 212.316735][ T8287] netlink: 14 bytes leftover after parsing attributes in process `syz.3.727'. [ 212.748480][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 212.932931][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 212.943258][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 212.961403][ T8287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.977701][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.005409][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.018253][ T8287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.049000][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.062721][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.088609][ T8287] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 213.108736][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.130484][ T8287] bond0 (unregistering): Released all slaves [ 213.157776][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.430263][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 213.461496][ T9] usbtmc 6-1:16.0: can't read capabilities [ 213.767628][ T5872] usb 6-1: USB disconnect, device number 17 [ 213.773792][ T8295] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 213.985578][ T8325] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 214.067289][ T8325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.448736][ T8330] bond1: (slave geneve2): making interface the new active one [ 214.464220][ T8330] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 214.938051][ T5949] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 215.039126][ T8351] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 215.061938][ T8351] macsec1: entered allmulticast mode [ 215.075739][ T8351] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 215.094158][ T8351] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 215.105108][ T8351] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 215.142532][ T5949] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 215.155597][ T5949] usb 6-1: config 0 has no interface number 0 [ 215.164864][ T5949] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 215.177451][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.186057][ T5949] usb 6-1: Product: syz [ 215.190495][ T5949] usb 6-1: Manufacturer: syz [ 215.195200][ T5949] usb 6-1: SerialNumber: syz [ 215.206519][ T5949] usb 6-1: config 0 descriptor?? [ 216.035153][ T5949] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 216.043183][ T5949] usb 6-1: Firmware version (0.0) predates our first public release. [ 216.051705][ T5949] usb 6-1: Please update to version 0.2 or newer [ 216.282487][ T5949] usb 6-1: USB disconnect, device number 18 [ 217.675641][ T8373] input: syz1 as /devices/virtual/input/input20 [ 218.346684][ T8387] input: syz1 as /devices/virtual/input/input21 [ 218.467990][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.580444][ T8367] syz.1.762 (8367): drop_caches: 2 [ 218.667678][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 218.710135][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 218.728181][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.799295][ T10] usb 5-1: config 0 descriptor?? [ 218.947669][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 219.023251][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 219.131118][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 219.144494][ T9] usb 4-1: config 0 has no interface number 0 [ 219.155465][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.165641][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.174669][ T9] usb 4-1: Product: syz [ 219.179679][ T9] usb 4-1: Manufacturer: syz [ 219.184378][ T9] usb 4-1: SerialNumber: syz [ 219.197105][ T9] usb 4-1: config 0 descriptor?? [ 219.434888][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 219.469846][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 219.516006][ T10] usb 5-1: USB disconnect, device number 13 [ 219.676588][ T8407] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 219.711779][ T8407] macsec1: entered allmulticast mode [ 219.727695][ T8407] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 219.759262][ T8407] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 219.772787][ T8407] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 220.027102][ T9] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 220.077735][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 220.108635][ T9] usb 4-1: Please update to version 0.2 or newer [ 220.381293][ T9] usb 4-1: USB disconnect, device number 12 [ 220.635434][ T8427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.731577][ T8430] binder: 8429:8430 ioctl c0306201 80000240 returned -14 [ 220.833026][ T8419] syz.4.784 (8419): drop_caches: 2 [ 221.101523][ T8437] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.789'. [ 221.947085][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.974396][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.982018][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.558954][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 222.621796][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 223.047587][ T5927] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.237559][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 223.300724][ T5927] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 223.312136][ T5927] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.351304][ T5927] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.358318][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 223.398005][ T6000] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 223.401656][ T5927] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.439960][ T5927] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 223.458173][ T5927] usb 5-1: config 0 has no interface number 0 [ 223.467736][ T5927] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 223.479257][ T5927] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 223.514350][ T5927] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.525451][ T5927] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.539244][ T5927] usb 5-1: config 0 interface 125 has no altsetting 0 [ 223.546081][ T5927] usb 5-1: config 0 interface 125 has no altsetting 2 [ 223.556417][ T5927] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 223.557712][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 223.571213][ T6000] usb 1-1: Using ep0 maxpacket: 8 [ 223.577604][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.586660][ T5927] usb 5-1: Product: syz [ 223.592314][ T5927] usb 5-1: Manufacturer: syz [ 223.592841][ T6000] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 223.602104][ T5927] usb 5-1: SerialNumber: syz [ 223.610366][ T6000] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.626733][ T6000] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.626760][ T5927] usb 5-1: config 0 descriptor?? [ 223.632598][ T5927] usb 5-1: selecting invalid altsetting 2 [ 223.636951][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.658991][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 223.675789][ T6000] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.686634][ T6000] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.700673][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.710246][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.718705][ T6000] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.731383][ T9] usb 6-1: config 0 descriptor?? [ 223.738977][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.835260][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.852383][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.863951][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.882255][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 223.894005][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.910959][ T8496] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 223.951109][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.986452][ T6000] usb 1-1: GET_CAPABILITIES returned 0 [ 224.002512][ T6000] usbtmc 1-1:16.0: can't read capabilities [ 224.268605][ T9] usb 1-1: USB disconnect, device number 21 [ 224.492979][ T9] usb 6-1: USB disconnect, device number 19 [ 224.714393][ T9] usb 5-1: USB disconnect, device number 14 [ 225.206532][ T8519] loop7: detected capacity change from 0 to 7 [ 225.501103][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 225.525866][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 225.525881][ T30] audit: type=1326 audit(1755000692.432:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.591264][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input22 [ 225.614439][ T30] audit: type=1326 audit(1755000692.442:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.630561][ T10] usb 2-1: USB disconnect, device number 18 [ 225.653945][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 225.724635][ T30] audit: type=1326 audit(1755000692.442:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.771341][ T30] audit: type=1326 audit(1755000692.442:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.818155][ T30] audit: type=1326 audit(1755000692.442:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.846711][ T30] audit: type=1326 audit(1755000692.442:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.878451][ T30] audit: type=1326 audit(1755000692.442:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.951330][ T30] audit: type=1326 audit(1755000692.462:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 225.978341][ T30] audit: type=1326 audit(1755000692.462:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 226.008372][ T30] audit: type=1326 audit(1755000692.462:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 226.295506][ T8519] Dev loop7: unable to read RDB block 7 [ 226.301976][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 226.311988][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 226.331073][ T8519] loop7: unable to read partition table [ 226.337015][ T8519] loop7: partition table beyond EOD, truncated [ 226.345293][ T6000] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 226.345337][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 226.364975][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 226.373029][ T8519] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 226.540719][ T6000] usb 1-1: Using ep0 maxpacket: 32 [ 226.551053][ T6000] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 226.574804][ T6000] usb 1-1: config 0 has no interface number 0 [ 226.587715][ T6000] usb 1-1: config 0 interface 184 has no altsetting 0 [ 226.612824][ T6000] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.647907][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.656112][ T6000] usb 1-1: Product: syz [ 226.668209][ T6000] usb 1-1: Manufacturer: syz [ 226.672973][ T6000] usb 1-1: SerialNumber: syz [ 226.711201][ T6000] usb 1-1: config 0 descriptor?? [ 226.742267][ T6000] smsc75xx v1.0.0 [ 226.923485][ T5233] Dev loop7: unable to read RDB block 7 [ 226.929614][ T5233] loop7: unable to read partition table [ 226.935751][ T5233] loop7: partition table beyond EOD, truncated [ 227.553026][ T6000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 227.568782][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 227.576496][ T6000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.730093][ T24] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 227.747605][ T24] usb 5-1: config 0 has no interface number 0 [ 227.784857][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 227.801744][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.821175][ T6000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 227.833825][ T24] usb 5-1: Product: syz [ 227.836945][ T6000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 227.849440][ T24] usb 5-1: Manufacturer: syz [ 227.864457][ T24] usb 5-1: SerialNumber: syz [ 227.874792][ T6000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 227.885840][ T24] usb 5-1: config 0 descriptor?? [ 227.919286][ T6000] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 227.955798][ T6000] usb 1-1: USB disconnect, device number 22 [ 227.993115][ T7448] udevd[7448]: setting owner of /dev/bus/usb/001/022 to uid=0, gid=0 failed: No such file or directory [ 228.748201][ T24] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 228.760330][ T24] usb 5-1: Firmware version (0.0) predates our first public release. [ 228.770757][ T24] usb 5-1: Please update to version 0.2 or newer [ 228.785875][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 228.937588][ T6000] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.978022][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 228.985684][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 228.998343][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.012175][ T24] usb 5-1: USB disconnect, device number 15 [ 229.090465][ T10] usb 6-1: config 0 descriptor?? [ 229.136943][ T6000] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.178161][ T6000] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.216928][ T6000] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.249441][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.281593][ T8567] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 229.309428][ T6000] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.637785][ T982] usb 2-1: USB disconnect, device number 19 [ 229.799150][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 229.865905][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 229.889854][ T8590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.852'. [ 229.925630][ T8590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.852'. [ 230.362530][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 230.394099][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 230.421707][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 230.435929][ T10] usb 6-1: USB disconnect, device number 20 [ 230.649504][ T8606] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 230.661252][ T24] IPVS: starting estimator thread 0... [ 230.778585][ T8612] IPVS: using max 26 ests per chain, 62400 per kthread [ 231.268296][ T5872] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 231.474986][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 231.492794][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.516568][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.549709][ T5872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 231.566834][ T5872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 231.584991][ T5872] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 231.607674][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.637282][ T5872] hub 6-1:1.0: bad descriptor, ignoring hub [ 231.647830][ T5872] hub 6-1:1.0: probe with driver hub failed with error -5 [ 231.669911][ T5872] cdc_wdm 6-1:1.0: skipping garbage [ 231.675358][ T5872] cdc_wdm 6-1:1.0: skipping garbage [ 231.704583][ T5872] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 231.721269][ T5872] cdc_wdm 6-1:1.0: Unknown control protocol [ 231.923356][ T8647] sctp: [Deprecated]: syz.3.877 (pid 8647) Use of int in max_burst socket option. [ 231.923356][ T8647] Use struct sctp_assoc_value instead [ 232.190395][ T5927] usb 6-1: USB disconnect, device number 21 [ 232.305991][ T8658] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 232.480913][ T8662] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 232.492421][ T8662] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 232.518169][ T8662] bond2: (slave wireguard0): making interface the new active one [ 232.527233][ T8662] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 232.547657][ T5927] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 232.673518][ T982] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 232.719495][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.740534][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.771736][ T5927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 232.805771][ T5927] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 232.837420][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.857586][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 232.867364][ T982] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 232.893051][ T8625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.896677][ T982] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.919708][ T5927] hub 6-1:1.0: bad descriptor, ignoring hub [ 232.943851][ T8674] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.944276][ T982] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.951572][ T8674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.961927][ T5927] hub 6-1:1.0: probe with driver hub failed with error -5 [ 232.962583][ T5927] cdc_wdm 6-1:1.0: skipping garbage [ 233.005278][ T982] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.030012][ T5927] cdc_wdm 6-1:1.0: skipping garbage [ 233.036159][ T982] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.073957][ T5927] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 233.086984][ T982] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.107566][ T5927] cdc_wdm 6-1:1.0: Unknown control protocol [ 233.122508][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.129477][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.136117][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.143112][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.146614][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.149556][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.164844][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.177636][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.184305][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.190898][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.197889][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.205701][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 233.212556][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 233.409636][ T9] usb 6-1: USB disconnect, device number 22 [ 233.461407][ T982] usb 2-1: GET_CAPABILITIES returned 0 [ 233.467085][ T982] usbtmc 2-1:16.0: can't read capabilities [ 233.575848][ T8683] loop6: detected capacity change from 0 to 7 [ 233.588861][ T7448] Dev loop6: unable to read RDB block 7 [ 233.594747][ T7448] loop6: AHDI p3 p4 [ 233.600210][ T7448] loop6: partition table partially beyond EOD, truncated [ 233.628550][ T7448] loop6: p3 start 1869967406 is beyond EOD, truncated [ 233.655368][ T8683] Dev loop6: unable to read RDB block 7 [ 233.676187][ T8683] loop6: AHDI p3 p4 [ 233.688776][ T8683] loop6: partition table partially beyond EOD, truncated [ 233.712596][ T8683] loop6: p3 start 1869967406 is beyond EOD, truncated [ 233.841016][ T5872] usb 2-1: USB disconnect, device number 20 [ 233.860577][ T8664] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 233.867038][ T8689] usb 2-1: usbtmc_ioctl_clear_in_halt returned -19 [ 234.292624][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.901'. [ 234.338111][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 234.374312][ T8707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'. [ 234.404740][ T8707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'. [ 235.448141][ T982] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 235.658137][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 235.666195][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.700857][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.717772][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 235.733255][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 235.755612][ T982] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.776200][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.811693][ T982] hub 4-1:1.0: bad descriptor, ignoring hub [ 235.837252][ T982] hub 4-1:1.0: probe with driver hub failed with error -5 [ 235.868729][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 235.874137][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 235.897816][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.927241][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 235.954398][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 236.062793][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.107837][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.162183][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.183386][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.209595][ T10] usb 2-1: SerialNumber: syz [ 236.329845][ T5872] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 236.346590][ T5927] usb 4-1: USB disconnect, device number 13 [ 236.461066][ T10] usb 2-1: 0:2 : does not exist [ 236.508577][ T10] usb 2-1: USB disconnect, device number 21 [ 236.517718][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 236.544754][ T5872] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 236.580067][ T5872] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.642362][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.679451][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.696151][ T5927] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 236.719578][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.767208][ T5872] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.816696][ T5872] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.844877][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.884674][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.901812][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.944012][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 236.997866][ T5927] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.023683][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.060439][ T8734] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.100643][ T5927] hub 4-1:1.0: bad descriptor, ignoring hub [ 237.106934][ T5927] hub 4-1:1.0: probe with driver hub failed with error -5 [ 237.168421][ T5872] usb 6-1: GET_CAPABILITIES returned 0 [ 237.174094][ T5872] usbtmc 6-1:16.0: can't read capabilities [ 237.198746][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 237.204036][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 237.236007][ T5927] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 237.258641][ T5927] cdc_wdm 4-1:1.0: Unknown control protocol [ 237.322420][ T5927] usb 4-1: USB disconnect, device number 14 [ 237.529682][ T10] usb 6-1: USB disconnect, device number 23 [ 237.535885][ T8749] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 237.575535][ T8759] usb 6-1: usbtmc_ioctl_clear_in_halt returned -19 [ 238.009448][ T8773] sctp: [Deprecated]: syz.0.929 (pid 8773) Use of int in max_burst socket option. [ 238.009448][ T8773] Use struct sctp_assoc_value instead [ 238.287571][ T5927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 238.357157][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 238.448187][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 238.478034][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.509310][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.547701][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.575347][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.615661][ T5927] usb 2-1: config 0 descriptor?? [ 238.649224][ T5927] hub 2-1:0.0: USB hub found [ 238.657644][ T5872] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 238.817182][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.943'. [ 238.856071][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.867542][ T5927] hub 2-1:0.0: 9 ports detected [ 238.872538][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 238.873138][ T5927] hub 2-1:0.0: insufficient power available to use all downstream ports [ 238.891093][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.901607][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.915058][ T5872] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.926745][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.958521][ T5872] usb 6-1: config 0 descriptor?? [ 239.079652][ T5927] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 239.086795][ T5927] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 239.104714][ T1168] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 239.125093][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 239.137676][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 239.209398][ T5927] usb 2-1: USB disconnect, device number 22 [ 239.278320][ T1168] usb 1-1: Using ep0 maxpacket: 8 [ 239.287235][ T1168] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.320846][ T1168] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.332787][ T1168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 239.347005][ T1168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 239.359370][ T1168] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.378494][ T5872] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 239.386332][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.415169][ T5872] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 239.443966][ T1168] hub 1-1:1.0: bad descriptor, ignoring hub [ 239.464487][ T1168] hub 1-1:1.0: probe with driver hub failed with error -5 [ 239.487436][ T1168] cdc_wdm 1-1:1.0: skipping garbage [ 239.493500][ T1168] cdc_wdm 1-1:1.0: skipping garbage [ 239.513800][ T1168] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 239.536947][ T1168] cdc_wdm 1-1:1.0: Unknown control protocol [ 239.684942][ T1168] usb 6-1: USB disconnect, device number 24 [ 239.989350][ T10] usb 1-1: USB disconnect, device number 23 [ 240.035626][ T5872] IPVS: starting estimator thread 0... [ 240.138454][ T5927] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.148129][ T8825] IPVS: using max 32 ests per chain, 76800 per kthread [ 240.308289][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 240.317675][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 240.320226][ T5927] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 240.347581][ T5927] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.373054][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.394218][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.405375][ T5927] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.429419][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.451041][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.491017][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.525036][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.541817][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 240.556881][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.575785][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.592661][ T8802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.606387][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 240.622253][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 240.633565][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 240.640562][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 240.652414][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 240.662611][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 240.705886][ T5927] usb 5-1: GET_CAPABILITIES returned 0 [ 240.713523][ T5927] usbtmc 5-1:16.0: can't read capabilities [ 240.750231][ T982] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.907685][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 240.928554][ T982] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 240.938623][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.939623][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 240.947349][ T982] usb 4-1: Product: syz [ 240.954040][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 240.954548][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 240.961343][ T982] usb 4-1: Manufacturer: syz [ 240.965056][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 240.995542][ T10] usb 5-1: USB disconnect, device number 16 [ 241.035443][ T982] usb 4-1: SerialNumber: syz [ 241.045435][ T982] usb 4-1: config 0 descriptor?? [ 241.060991][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.067661][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.074353][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.081017][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.088733][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.095669][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.105199][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.111885][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.118750][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.125482][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.131975][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 241.141065][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 241.280759][ T982] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 242.311314][ T982] gspca_sunplus: reg_w_riv err -71 [ 242.316791][ T982] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 242.365324][ T8865] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.967'. [ 242.376078][ T982] usb 4-1: USB disconnect, device number 15 [ 243.103859][ T8890] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 244.347693][ T6000] usb 1-1: USB disconnect, device number 24 [ 244.947631][ T1168] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 245.112412][ T1168] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.127556][ T1168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.144801][ T1168] usb 6-1: Product: syz [ 245.157578][ T1168] usb 6-1: Manufacturer: syz [ 245.164660][ T1168] usb 6-1: SerialNumber: syz [ 245.687675][ T5927] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 245.913262][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 245.949171][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.967538][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.988485][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.024315][ T5927] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.044132][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.101733][ T5927] usb 2-1: config 0 descriptor?? [ 246.212317][ T1168] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 246.227542][ T1168] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 246.401025][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 246.415126][ T1168] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 246.459389][ T1168] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 246.483571][ T8963] vxlan0: entered promiscuous mode [ 246.501025][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.534892][ T5927] HID 045e:07da: Invalid code 65791 type 1 [ 246.542961][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.546452][ T1168] usb 6-1: USB disconnect, device number 25 [ 246.575467][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.590878][ T5927] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001A/input/input24 [ 246.607440][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.639031][ T1168] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 246.689352][ T5927] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 246.768535][ T5927] usb 2-1: USB disconnect, device number 23 [ 247.009002][ T8964] fido_id[8964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 247.519072][ T5927] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 247.697581][ T5949] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 247.705640][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 247.730126][ T5927] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 247.759810][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.810898][ T5927] usb 5-1: Product: syz [ 247.815485][ T5927] usb 5-1: Manufacturer: syz [ 247.842216][ T5927] usb 5-1: SerialNumber: syz [ 247.871099][ T5927] usb 5-1: config 0 descriptor?? [ 247.890801][ T5927] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 247.921118][ T5949] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 247.936648][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.969800][ T5949] usb 4-1: config 0 descriptor?? [ 248.011830][ T8986] loop2: detected capacity change from 0 to 7 [ 248.059810][ T8986] Dev loop2: unable to read RDB block 7 [ 248.065871][ T8986] loop2: unable to read partition table [ 248.109205][ T8986] loop2: partition table beyond EOD, truncated [ 248.128571][ T8986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.659674][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 248.678757][ T8994] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 248.686689][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1021'. [ 248.819857][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 248.826051][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.904185][ T5949] usb 4-1: USB disconnect, device number 16 [ 249.120273][ T5927] gspca_topro: reg_w err -71 [ 249.147632][ T5927] gspca_topro: Sensor soi763a [ 249.201016][ T5927] usb 5-1: USB disconnect, device number 17 [ 249.967924][ T5949] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 250.137959][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 250.146003][ T5949] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 250.156648][ T5949] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.186729][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.227980][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.244563][ T5949] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.308004][ T5949] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.359690][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.618256][ T5949] usb 6-1: GET_CAPABILITIES returned 0 [ 250.627934][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 250.950315][ T9015] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 250.957120][ T5927] usb 6-1: USB disconnect, device number 26 [ 252.079840][ T5927] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 252.161661][ T9080] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 252.255562][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.297454][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.315381][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.340167][ T5927] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.356978][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.378946][ T5927] usb 6-1: config 0 descriptor?? [ 252.843418][ T5927] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 253.662319][ T9108] loop2: detected capacity change from 0 to 7 [ 253.693921][ T9108] Dev loop2: unable to read RDB block 7 [ 253.711802][ T9108] loop2: AHDI p2 p3 [ 253.721014][ T9108] loop2: partition table partially beyond EOD, truncated [ 253.729986][ T9108] loop2: p3 start 335544320 is beyond EOD, truncated [ 254.025115][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 254.863351][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 254.863371][ T30] audit: type=1326 audit(1755000721.772:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.4.1086" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87539 code=0x0 [ 254.962273][ T30] audit: type=1326 audit(1755000721.872:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 254.992919][ T30] audit: type=1326 audit(1755000721.872:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95558 code=0x7ffc0000 [ 254.993581][ T5872] usb 6-1: USB disconnect, device number 27 [ 255.026210][ T30] audit: type=1326 audit(1755000721.872:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 255.158460][ T30] audit: type=1326 audit(1755000721.872:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95558 code=0x7ffc0000 [ 255.324328][ T30] audit: type=1326 audit(1755000721.872:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 255.482828][ T30] audit: type=1326 audit(1755000721.872:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95558 code=0x7ffc0000 [ 255.657336][ T30] audit: type=1326 audit(1755000721.872:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 255.862472][ T30] audit: type=1326 audit(1755000721.872:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 255.985819][ T30] audit: type=1326 audit(1755000721.872:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.5.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95558 code=0x7ffc0000 [ 256.727921][ T5927] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 256.907692][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 256.957634][ T5927] usb 2-1: config 0 has no interfaces? [ 256.981497][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 257.001120][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.016363][ T5927] usb 2-1: Product: syz [ 257.031500][ T5927] usb 2-1: Manufacturer: syz [ 257.049494][ T5927] usb 2-1: SerialNumber: syz [ 257.094778][ T5927] usb 2-1: config 0 descriptor?? [ 257.345390][ T5927] usb 2-1: USB disconnect, device number 24 [ 258.497634][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.675625][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 258.696785][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 258.696844][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.696871][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.696898][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.696926][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.696973][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.696999][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.933177][ T10] usb 1-1: usb_control_msg returned -32 [ 258.933232][ T10] usbtmc 1-1:16.0: can't read capabilities [ 259.288658][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.299621][ T9220] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 259.460064][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.485442][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.502006][ T5872] usb 1-1: USB disconnect, device number 25 [ 259.513058][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.554555][ T10] usb 5-1: config 0 descriptor?? [ 259.792865][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 259.807747][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.828846][ T10] usb 5-1: USB disconnect, device number 18 [ 260.308699][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 260.487565][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 260.506743][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.536726][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 260.612609][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.639011][ T10] usb 5-1: config 0 descriptor?? [ 260.664570][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 260.733375][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 260.937240][ C1] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 260.947409][ T9246] loop2: detected capacity change from 0 to 7 [ 260.965137][ T9246] Dev loop2: unable to read RDB block 7 [ 260.997684][ T9246] loop2: unable to read partition table [ 261.012156][ T9246] loop2: partition table beyond EOD, truncated [ 261.041504][ T9246] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.125913][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.167992][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.181623][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.191164][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.215438][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.228755][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.237812][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.266113][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 261.367575][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 261.544206][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.577706][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.596684][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.617802][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.638582][ T9252] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.703685][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.919815][ T24] usb 6-1: USB disconnect, device number 28 [ 261.958157][ T982] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 262.009333][ T9256] chnl_net:caif_netlink_parms(): no params data found [ 262.127798][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 262.129604][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.146716][ T982] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 262.155767][ T982] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.160179][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.167795][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.184872][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.185357][ T9256] bridge_slave_0: entered allmulticast mode [ 262.195697][ T982] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.211125][ T9256] bridge_slave_0: entered promiscuous mode [ 262.218303][ T982] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.238913][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.241868][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.263544][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.276872][ T9256] bridge_slave_1: entered allmulticast mode [ 262.301155][ T9256] bridge_slave_1: entered promiscuous mode [ 262.305285][ T24] usb 5-1: USB disconnect, device number 19 [ 262.320551][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 262.465286][ T982] usb 4-1: usb_control_msg returned -32 [ 262.477094][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.487910][ T982] usbtmc 4-1:16.0: can't read capabilities [ 262.509934][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.581242][ T9256] team0: Port device team_slave_0 added [ 262.597209][ T9256] team0: Port device team_slave_1 added [ 262.707119][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.747618][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.774283][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.818789][ T30] kauditd_printk_skb: 970 callbacks suppressed [ 262.818809][ T30] audit: type=1326 audit(1755000729.732:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1138" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87539 code=0x0 [ 262.875189][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.945330][ T9283] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 262.999224][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.016597][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.043247][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.137386][ T24] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 263.154017][ T5949] usb 4-1: USB disconnect, device number 17 [ 263.193085][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.277909][ T5875] Bluetooth: hci2: command tx timeout [ 263.320483][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.342169][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.357736][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.374965][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.384945][ T24] usb 6-1: Product: syz [ 263.393995][ T24] usb 6-1: Manufacturer: syz [ 263.407689][ T24] usb 6-1: SerialNumber: syz [ 263.414660][ T9256] hsr_slave_0: entered promiscuous mode [ 263.427052][ T9256] hsr_slave_1: entered promiscuous mode [ 263.439132][ T9256] debugfs: 'hsr0' already exists in 'hsr' [ 263.445185][ T9256] Cannot create hsr debugfs directory [ 263.630603][ T24] usb 6-1: 0:2 : does not exist [ 263.676643][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 263.825688][ T24] usb 6-1: USB disconnect, device number 29 [ 263.956166][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.128133][ T9256] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.171378][ T9256] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.237282][ T9256] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.293539][ T9256] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.549519][ T9311] Zero length message leads to an empty skb [ 264.638155][ T5949] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 264.749283][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.857614][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 264.878577][ T5949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.894401][ T9256] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.917258][ T5949] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 264.920061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.934727][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.962064][ T5949] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.977698][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.001874][ T5949] usb 6-1: Product: syz [ 265.006109][ T5949] usb 6-1: Manufacturer: syz [ 265.032224][ T5949] usb 6-1: SerialNumber: syz [ 265.050016][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.057284][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.322012][ T9308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 265.362255][ T5875] Bluetooth: hci2: command tx timeout [ 265.392850][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.630659][ T9256] veth0_vlan: entered promiscuous mode [ 265.669674][ T9256] veth1_vlan: entered promiscuous mode [ 265.781731][ T9256] veth0_macvtap: entered promiscuous mode [ 265.801381][ T9256] veth1_macvtap: entered promiscuous mode [ 265.827689][ T5927] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.842895][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.925057][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.973288][ T9308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 265.976741][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.012315][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.012553][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 266.037273][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.088972][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.114262][ T5927] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 266.138790][ T5927] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.177731][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.211784][ T5949] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 266.219285][ T5949] cdc_ncm 6-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 266.226974][ T5949] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 266.239076][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.275212][ T5927] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.347012][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.387714][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.408415][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.429223][ T5949] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 266.440045][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.532911][ T30] audit: type=1326 audit(1755000733.432:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.570581][ T5949] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 266.638102][ T30] audit: type=1326 audit(1755000733.432:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.670965][ T5949] usb 6-1: USB disconnect, device number 30 [ 266.739587][ T5949] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 266.770116][ T30] audit: type=1326 audit(1755000733.502:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.799679][ T5927] usb 5-1: usb_control_msg returned -32 [ 266.805813][ T5927] usbtmc 5-1:16.0: can't read capabilities [ 266.832663][ T30] audit: type=1326 audit(1755000733.502:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.919676][ T30] audit: type=1326 audit(1755000733.502:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.950406][ T30] audit: type=1326 audit(1755000733.502:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 266.983111][ T30] audit: type=1326 audit(1755000733.502:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 267.034081][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.072863][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.144544][ T30] audit: type=1326 audit(1755000733.502:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 267.187896][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 267.255609][ T30] audit: type=1326 audit(1755000733.512:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 267.294519][ T9338] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 267.379729][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.416785][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.437785][ T5875] Bluetooth: hci2: command tx timeout [ 267.490970][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.515040][ T5949] usb 5-1: USB disconnect, device number 20 [ 267.582454][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.617288][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.674908][ T5927] usb 4-1: config 0 descriptor?? [ 267.827751][ T5942] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 268.017032][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 268.047910][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.104154][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.159957][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.202619][ T5927] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.244395][ T5942] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.307021][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.334618][ T5942] usb 1-1: config 0 descriptor?? [ 268.591859][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 268.729060][ T6000] usb 4-1: USB disconnect, device number 18 [ 268.785323][ T5942] HID 045e:07da: Invalid code 65791 type 1 [ 268.847740][ T5942] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001D/input/input25 [ 268.920029][ T5942] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 268.995133][ T5927] usb 1-1: USB disconnect, device number 26 [ 269.254930][ T9371] fido_id[9371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 269.518601][ T5875] Bluetooth: hci2: command tx timeout [ 270.058087][ T9404] team0: entered promiscuous mode [ 270.063754][ T9404] team_slave_0: entered promiscuous mode [ 270.070102][ T9404] team_slave_1: entered promiscuous mode [ 270.084668][ T9404] batadv_slave_0: entered promiscuous mode [ 270.092290][ T9403] batadv_slave_0: left promiscuous mode [ 270.107905][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 270.122869][ T9403] team0: left promiscuous mode [ 270.144713][ T9403] team_slave_0: left promiscuous mode [ 270.175359][ T9403] team_slave_1: left promiscuous mode [ 270.273548][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 270.306615][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.357089][ T24] usb 1-1: config 0 has no interfaces? [ 270.377541][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 270.387433][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.493638][ T24] usb 1-1: config 0 descriptor?? [ 270.777600][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 270.789452][ T9] usb 1-1: USB disconnect, device number 27 [ 270.954686][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.978192][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.990804][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.005351][ T24] usb 5-1: config 0 descriptor?? [ 271.245658][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 271.257815][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.283947][ T24] usb 5-1: USB disconnect, device number 21 [ 271.722485][ T6000] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.732300][ T5942] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 271.937854][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 271.948891][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.953079][ T9447] loop2: detected capacity change from 0 to 7 [ 271.974232][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.997840][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.014718][ T9447] Dev loop2: unable to read RDB block 7 [ 272.021056][ T6000] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 272.043090][ T9447] loop2: AHDI p1 p2 [ 272.043133][ T5942] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.056580][ T9447] loop2: partition table partially beyond EOD, truncated [ 272.058564][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.085166][ T9447] loop2: p1 start 8388608 is beyond EOD, truncated [ 272.095393][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.110884][ T6000] usb 5-1: config 0 descriptor?? [ 272.134717][ T6000] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 272.154804][ T5942] usb 1-1: config 0 descriptor?? [ 272.191375][ T6000] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 272.410545][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 272.591932][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 272.600039][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 272.607991][ T5942] usb 1-1: string descriptor 0 read error: -32 [ 272.630992][ T5942] usb 1-1: USB disconnect, device number 28 [ 272.741173][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 273.307824][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 273.492683][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.527852][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.556817][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.579799][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.607544][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.621493][ T24] usb 7-1: config 0 descriptor?? [ 273.811324][ T1168] usb 5-1: USB disconnect, device number 22 [ 273.828624][ T1168] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 274.084751][ T24] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 274.125392][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 274.401460][ T24] usb 7-1: USB disconnect, device number 2 [ 274.696647][ T9514] gretap1: entered promiscuous mode [ 274.716444][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 274.716463][ T30] audit: type=1326 audit(1755000741.622:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 274.804879][ T30] audit: type=1326 audit(1755000741.662:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 274.913596][ T30] audit: type=1326 audit(1755000741.672:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 275.024102][ T30] audit: type=1326 audit(1755000741.672:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 275.116975][ T9522] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1232'. [ 275.131087][ T30] audit: type=1326 audit(1755000741.682:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 275.197250][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.245973][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.312523][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.347591][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.370935][ T30] audit: type=1326 audit(1755000741.682:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 275.380548][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.474631][ T30] audit: type=1326 audit(1755000741.682:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 275.499760][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.527216][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.541005][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.562100][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.581852][ T30] audit: type=1326 audit(1755000741.682:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de558 code=0x7ffc0000 [ 275.582794][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 275.675927][ T30] audit: type=1326 audit(1755000741.682:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 275.717430][ T24] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [] on [ 275.719281][ T9530] loop6: detected capacity change from 0 to 524287999 [ 275.805725][ T30] audit: type=1326 audit(1755000741.682:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 276.348191][ T6000] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 276.522228][ T6000] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 276.563889][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.618623][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.661635][ T9559] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1249'. [ 276.667574][ T6000] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.745256][ T6000] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 276.765104][ T6000] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 276.788605][ T6000] usb 6-1: Manufacturer: syz [ 276.828620][ T6000] usb 6-1: config 0 descriptor?? [ 277.466530][ T6000] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 277.548352][ T9587] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'. [ 277.627984][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 278.020822][ T5942] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 278.105529][ T6000] usb 6-1: USB disconnect, device number 31 [ 278.236239][ T5942] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.284130][ T5942] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 278.311101][ T5942] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.331715][ T5942] usb 5-1: config 1 interface 0 has no altsetting 0 [ 278.343173][ T5942] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 278.357090][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.366783][ T5942] usb 5-1: Product: syz [ 278.371827][ T5942] usb 5-1: Manufacturer: syz [ 278.378546][ T5942] usb 5-1: SerialNumber: syz [ 278.392801][ T9591] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.668481][ T5942] usbhid 5-1:1.0: can't add hid device: -71 [ 278.683030][ T5942] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 278.713724][ T5942] usb 5-1: USB disconnect, device number 23 [ 278.827271][ T5949] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 279.193408][ T9631] syzkaller1: entered promiscuous mode [ 279.200333][ T9631] syzkaller1: entered allmulticast mode [ 280.100425][ T9653] input: syz1 as /devices/virtual/input/input27 [ 280.529964][ T9660] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.437654][ T5942] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 281.572238][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 281.608513][ T9688] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1303'. [ 281.627648][ T9688] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1303'. [ 281.657113][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.733705][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.752360][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1302'. [ 281.817288][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.868524][ T5942] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.896512][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.915389][ T5942] usb 7-1: config 0 descriptor?? [ 282.372125][ T5942] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 282.452272][ T5942] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 282.997585][ T5942] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 283.198230][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 283.224307][ T5942] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 283.244577][ T5942] usb 6-1: config 0 has no interface number 0 [ 283.264715][ T5942] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 283.314907][ T9721] tipc: Started in network mode [ 283.323633][ T5942] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 283.335374][ T9721] tipc: Node identity 4, cluster identity 4711 [ 283.345003][ T5942] usb 6-1: config 0 interface 41 has no altsetting 0 [ 283.365746][ T9721] tipc: Node number set to 4 [ 283.368483][ T5942] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 283.388110][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.432118][ T5942] usb 6-1: Product: syz [ 283.445920][ T5942] usb 6-1: Manufacturer: syz [ 283.457411][ T5942] usb 6-1: SerialNumber: syz [ 283.479298][ T5942] usb 6-1: config 0 descriptor?? [ 283.492179][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 283.518145][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 283.757448][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 283.795824][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 283.956989][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 284.175137][ T9739] netlink: 210968 bytes leftover after parsing attributes in process `syz.3.1325'. [ 284.227020][ T5942] Error reading MAC address [ 284.239115][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 284.257233][ T9708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 284.490948][ T5942] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 284.539176][ T6000] usb 7-1: USB disconnect, device number 3 [ 284.559747][ T5942] usb 6-1: USB disconnect, device number 32 [ 284.738794][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 284.939358][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.967416][ T9] usb 4-1: config 0 has no interface number 0 [ 284.975498][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 285.003603][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 285.061243][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.088318][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.121134][ T9] usb 4-1: config 0 descriptor?? [ 285.128274][ T9748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.177296][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 285.330332][ T9770] syzkaller1: entered promiscuous mode [ 285.336284][ T9770] syzkaller1: entered allmulticast mode [ 285.395278][ T5942] usb 4-1: USB disconnect, device number 19 [ 285.401490][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 286.170604][ T5942] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 286.361217][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.395532][ T5942] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 286.447257][ T9806] netlink: 'syz.0.1356': attribute type 29 has an invalid length. [ 286.455244][ T5942] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 286.494922][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.508697][ T9806] netlink: 'syz.0.1356': attribute type 29 has an invalid length. [ 286.519927][ T5942] usb 5-1: config 0 descriptor?? [ 286.529901][ T9809] binder: 9808:9809 ioctl c0306201 800003c0 returned -14 [ 286.847678][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1362'. [ 286.955164][ T5942] Bluetooth: Can't get version to change to load ram patch err [ 286.974541][ T5942] Bluetooth: Loading patch file failed [ 286.990223][ T5942] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 287.025459][ T5942] usb 5-1: USB disconnect, device number 24 [ 287.156707][ T9826] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1365'. [ 287.523116][ T5949] hid_parser_main: 8 callbacks suppressed [ 287.523141][ T5949] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 287.667814][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 287.683766][ T5949] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 287.899654][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.969961][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.074703][ T24] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 288.178404][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.278735][ T24] usb 6-1: config 0 descriptor?? [ 288.544429][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.568213][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.749762][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 288.860645][ T24] hid-steam 0003:28DE:1142.0024: unknown main item tag 0x0 [ 288.933409][ T24] hid-steam 0003:28DE:1142.0024: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 289.038092][ T24] hid-steam 0003:28DE:1142.0024: Steam wireless receiver connected [ 289.070325][ T24] hid-steam 0003:28DE:1142.0024: No HID_FEATURE_REPORT submitted - nothing to read [ 289.160113][ T24] hid-steam 0003:28DE:1142.0025: unknown main item tag 0x0 [ 289.224382][ T24] hid-steam 0003:28DE:1142.0025: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 289.237785][ T5927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 289.253536][ T24] usb 6-1: USB disconnect, device number 33 [ 289.314862][ T24] hid-steam 0003:28DE:1142.0024: Steam wireless receiver disconnected [ 289.397636][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 289.409663][ T5927] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 289.437869][ T5927] usb 4-1: config 0 has no interface number 0 [ 289.462886][ T5927] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 289.492893][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.500022][ T9861] fido_id[9861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 289.516875][ T5927] usb 4-1: Product: syz [ 289.516904][ T5927] usb 4-1: Manufacturer: syz [ 289.516924][ T5927] usb 4-1: SerialNumber: syz [ 289.561216][ T5927] usb 4-1: config 0 descriptor?? [ 289.572099][ T5927] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 289.627675][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.637235][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.645737][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.655151][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.700536][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.728049][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.766596][ T5872] hid-generic 0000:007F:0005.0026: unknown main item tag 0x0 [ 289.792636][ T5927] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.816643][ T5872] hid-generic 0000:007F:0005.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.864398][ T5927] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 290.077215][ T9869] fido_id[9869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 290.245756][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 290.254287][ T5927] usb 4-1: USB disconnect, device number 20 [ 290.274774][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 290.338046][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 290.375040][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.378422][ T5927] quatech2 4-1:0.51: device disconnected [ 290.583107][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.691243][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.039618][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.317600][ T5927] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 291.490247][ T13] bridge_slave_1: left allmulticast mode [ 291.496649][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.562888][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.612004][ T5927] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.634100][ T13] bridge_slave_0: left allmulticast mode [ 291.641532][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.661323][ T13] bridge_slave_0: left promiscuous mode [ 291.695976][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.740794][ T5927] usb 4-1: config 0 descriptor?? [ 291.768759][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.779216][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.792809][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.809977][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.820679][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.058471][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 292.064567][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.104816][ T5927] usb 4-1: USB disconnect, device number 21 [ 292.424680][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 292.558129][ T5927] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 292.740199][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 292.751807][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.769570][ T5927] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 292.783239][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.795059][ T9922] tls_set_device_offload_rx: netdev not found [ 292.807683][ T5927] usb 4-1: config 0 descriptor?? [ 292.886754][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.911084][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.932181][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 292.950209][ T13] bond0 (unregistering): Released all slaves [ 293.039410][ T5927] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 293.052905][ T5927] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 293.313163][ T9931] sock: sock_set_timeout: `syz.0.1404' (pid 9931) tries to set negative timeout [ 293.333245][ T13] bond1 (unregistering): Released all slaves [ 293.363181][ T9907] netlink: 'syz.6.1398': attribute type 12 has an invalid length. [ 293.387519][ T9907] netlink: 'syz.6.1398': attribute type 29 has an invalid length. [ 293.395402][ T9907] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1398'. [ 293.440265][ T9907] netlink: 'syz.6.1398': attribute type 2 has an invalid length. [ 293.467162][ T9907] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1398'. [ 293.488319][ C1] powermate: config urb returned -71 [ 293.495766][ C1] powermate: config urb returned -71 [ 293.501933][ C1] powermate: config urb returned -71 [ 293.508475][ C1] powermate: config urb returned -71 [ 293.527198][ T24] usb 4-1: USB disconnect, device number 22 [ 293.533725][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 293.728842][ T13] tipc: Left network mode [ 293.920009][ T5875] Bluetooth: hci1: command tx timeout [ 294.448289][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 294.528574][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1414'. [ 294.748493][ T13] hsr_slave_0: left promiscuous mode [ 294.794641][ T13] hsr_slave_1: left promiscuous mode [ 294.802231][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.810278][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.852810][ T13] veth1_macvtap: left promiscuous mode [ 294.871127][ T13] veth0_macvtap: left promiscuous mode [ 294.897332][ T13] veth1_vlan: left promiscuous mode [ 294.927125][ T13] veth0_vlan: left promiscuous mode [ 295.998325][ T5875] Bluetooth: hci1: command tx timeout [ 296.420019][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 296.420039][ T30] audit: type=1326 audit(1755000763.332:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 296.567417][ T30] audit: type=1326 audit(1755000763.332:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 296.604418][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.634154][ T30] audit: type=1326 audit(1755000763.332:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 296.656282][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.735276][T10015] loop7: detected capacity change from 0 to 7 [ 296.754503][T10015] Dev loop7: unable to read RDB block 7 [ 296.782489][ T30] audit: type=1326 audit(1755000763.332:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 296.805229][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.817668][T10015] loop7: unable to read partition table [ 296.826196][T10015] loop7: partition table beyond EOD, truncated [ 296.835100][T10015] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.868443][ T13] team0 (unregistering): Port device team_slave_1 removed [ 296.878437][ T30] audit: type=1326 audit(1755000763.332:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 297.014840][ T13] team0 (unregistering): Port device team_slave_0 removed [ 297.310313][T10025] netlink: 'syz.0.1438': attribute type 1 has an invalid length. [ 297.323327][T10025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1438'. [ 298.087890][ T5875] Bluetooth: hci1: command tx timeout [ 298.282894][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 298.368023][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 298.374736][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 298.382806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.390939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.398963][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.407358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.415538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.423432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.431441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.439328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.447295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.455276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.463502][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.471443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.479804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.487983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.496127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.504136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.512142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.520727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.528772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.536777][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.545052][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.552991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.561032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.569112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.577197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.585099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.593376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.601472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.609482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.617744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.625909][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.633916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.641937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.650038][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.658318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.666513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.674877][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.682936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.690940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.699100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.707087][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.715331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.723420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.731416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.739689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.747682][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.763249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.771763][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.779890][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.788154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.796452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.804451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.812610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.820508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.828772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.836629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.844702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.852599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.860608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.868605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.876734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.884697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.892689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.900595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.909162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.917204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.925744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.933827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.942155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.950369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.958380][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.966486][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.974487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.982481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 298.990660][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 298.998578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 299.006647][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 299.015024][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 299.236090][ T9903] chnl_net:caif_netlink_parms(): no params data found [ 299.384331][T10053] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 299.896174][ T9903] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.912916][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.927807][ T5949] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 299.954234][ T9903] bridge_slave_0: entered allmulticast mode [ 299.986167][ T9903] bridge_slave_0: entered promiscuous mode [ 300.035127][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.062310][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.101097][ T9903] bridge_slave_1: entered allmulticast mode [ 300.108634][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 300.131266][ T5949] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 300.142649][ T9903] bridge_slave_1: entered promiscuous mode [ 300.162138][ T5949] usb 4-1: config 0 has no interface number 0 [ 300.168002][ T5875] Bluetooth: hci1: command tx timeout [ 300.226871][ T5949] usb 4-1: config 0 interface 184 has no altsetting 0 [ 300.300181][ T5949] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 300.312472][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.357616][ T5949] usb 4-1: Product: syz [ 300.361867][ T5949] usb 4-1: Manufacturer: syz [ 300.377717][ T5949] usb 4-1: SerialNumber: syz [ 300.395989][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.416777][ T5949] usb 4-1: config 0 descriptor?? [ 300.452154][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.466157][ T5949] smsc75xx v1.0.0 [ 300.637097][T10085] binder: 10084:10085 ioctl 40046205 0 returned -22 [ 300.720038][ T9903] team0: Port device team_slave_0 added [ 300.774893][ T9903] team0: Port device team_slave_1 added [ 300.934639][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.949720][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.027671][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.089142][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.096447][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.142450][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.404055][ T9903] hsr_slave_0: entered promiscuous mode [ 301.435927][ T9903] hsr_slave_1: entered promiscuous mode [ 301.452901][ T9903] debugfs: 'hsr0' already exists in 'hsr' [ 301.465225][ T9903] Cannot create hsr debugfs directory [ 301.657559][ T5934] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 301.689600][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 301.719084][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.752737][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 301.788559][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 301.835387][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 301.857652][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 301.865196][ T5949] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 301.876793][ T5934] usb 7-1: config 0 has no interfaces? [ 301.885562][ T5934] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 301.919925][ T5949] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 301.928526][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.928564][ T5934] usb 7-1: Product: syz [ 301.928582][ T5934] usb 7-1: Manufacturer: syz [ 301.928598][ T5934] usb 7-1: SerialNumber: syz [ 301.956610][ T5934] usb 7-1: config 0 descriptor?? [ 302.045769][ T5949] usb 4-1: USB disconnect, device number 23 [ 302.053040][T10113] [ 302.055425][T10113] ===================================================== [ 302.062479][T10113] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 302.070114][T10113] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 302.077261][T10113] ----------------------------------------------------- [ 302.084223][T10113] syz.5.1464/10113 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 302.092677][T10113] ffff8880799ab018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 302.101564][T10113] [ 302.101564][T10113] and this task is already holding: [ 302.109083][T10113] ffff888033e97028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 302.119943][T10113] which would create a new lock dependency: [ 302.125952][T10113] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 302.134913][T10113] [ 302.134913][T10113] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 302.144842][T10113] (&dev->event_lock#2){..-.}-{3:3} [ 302.144889][T10113] [ 302.144889][T10113] ... which became SOFTIRQ-irq-safe at: [ 302.158022][T10113] lock_acquire+0x120/0x360 [ 302.163044][T10113] _raw_spin_lock_irqsave+0xa7/0xf0 [ 302.168542][T10113] input_event+0x76/0xe0 [ 302.173062][T10113] powermate_irq+0x156/0x390 [ 302.177760][T10113] __usb_hcd_giveback_urb+0x41a/0x690 [ 302.183370][T10113] dummy_timer+0x862/0x4550 [ 302.188016][T10113] __hrtimer_run_queues+0x52c/0xc60 [ 302.193630][T10113] hrtimer_run_softirq+0x187/0x2b0 [ 302.198867][T10113] handle_softirqs+0x283/0x870 [ 302.204197][T10113] __irq_exit_rcu+0xca/0x1f0 [ 302.209176][T10113] irq_exit_rcu+0x9/0x30 [ 302.213756][T10113] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 302.219633][T10113] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.225901][T10113] do_futex+0x300/0x420 [ 302.230258][T10113] __se_sys_futex_time32+0x360/0x3e0 [ 302.235650][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 302.240883][T10113] do_fast_syscall_32+0x34/0x80 [ 302.246193][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.252803][T10113] [ 302.252803][T10113] to a SOFTIRQ-irq-unsafe lock: [ 302.260037][T10113] (tasklist_lock){.+.+}-{3:3} [ 302.260067][T10113] [ 302.260067][T10113] ... which became SOFTIRQ-irq-unsafe at: [ 302.272836][T10113] ... [ 302.272854][T10113] lock_acquire+0x120/0x360 [ 302.280135][T10113] _raw_read_lock+0x36/0x50 [ 302.284827][T10113] __do_wait+0xde/0x740 [ 302.289088][T10113] do_wait+0x1f8/0x520 [ 302.293341][T10113] kernel_wait+0xab/0x170 [ 302.297774][T10113] call_usermodehelper_exec_work+0xbe/0x230 [ 302.303795][T10113] process_scheduled_works+0xade/0x17b0 [ 302.309541][T10113] worker_thread+0x8a0/0xda0 [ 302.314321][T10113] kthread+0x70e/0x8a0 [ 302.318497][T10113] ret_from_fork+0x3f9/0x770 [ 302.323414][T10113] ret_from_fork_asm+0x1a/0x30 [ 302.328404][T10113] [ 302.328404][T10113] other info that might help us debug this: [ 302.328404][T10113] [ 302.338758][T10113] Chain exists of: [ 302.338758][T10113] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 302.338758][T10113] [ 302.352636][T10113] Possible interrupt unsafe locking scenario: [ 302.352636][T10113] [ 302.360965][T10113] CPU0 CPU1 [ 302.366540][T10113] ---- ---- [ 302.371944][T10113] lock(tasklist_lock); [ 302.376305][T10113] local_irq_disable(); [ 302.383515][T10113] lock(&dev->event_lock#2); [ 302.390752][T10113] lock(&client->buffer_lock); [ 302.398322][T10113] [ 302.401963][T10113] lock(&dev->event_lock#2); [ 302.406846][T10113] [ 302.406846][T10113] *** DEADLOCK *** [ 302.406846][T10113] [ 302.415092][T10113] 7 locks held by syz.5.1464/10113: [ 302.420503][T10113] #0: ffff88802948a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 302.429908][T10113] #1: ffff88801d33a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 302.440274][T10113] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 302.449988][T10113] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 302.459656][T10113] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 302.468862][T10113] #5: ffff888033e97028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 302.479260][T10113] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 302.489338][T10113] [ 302.489338][T10113] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 302.500390][T10113] -> (&dev->event_lock#2){..-.}-{3:3} { [ 302.506268][T10113] IN-SOFTIRQ-W at: [ 302.510530][T10113] lock_acquire+0x120/0x360 [ 302.516973][T10113] _raw_spin_lock_irqsave+0xa7/0xf0 [ 302.524021][T10113] input_event+0x76/0xe0 [ 302.530484][T10113] powermate_irq+0x156/0x390 [ 302.536914][T10113] __usb_hcd_giveback_urb+0x41a/0x690 [ 302.544307][T10113] dummy_timer+0x862/0x4550 [ 302.550932][T10113] __hrtimer_run_queues+0x52c/0xc60 [ 302.558066][T10113] hrtimer_run_softirq+0x187/0x2b0 [ 302.565028][T10113] handle_softirqs+0x283/0x870 [ 302.571634][T10113] __irq_exit_rcu+0xca/0x1f0 [ 302.578341][T10113] irq_exit_rcu+0x9/0x30 [ 302.584713][T10113] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 302.592218][T10113] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.600489][T10113] do_futex+0x300/0x420 [ 302.606584][T10113] __se_sys_futex_time32+0x360/0x3e0 [ 302.613717][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 302.620816][T10113] do_fast_syscall_32+0x34/0x80 [ 302.627612][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.635889][T10113] INITIAL USE at: [ 302.639981][T10113] lock_acquire+0x120/0x360 [ 302.646620][T10113] _raw_spin_lock_irqsave+0xa7/0xf0 [ 302.653946][T10113] input_inject_event+0xa5/0x340 [ 302.660677][T10113] kbd_led_trigger_activate+0xbc/0x100 [ 302.668625][T10113] led_trigger_set+0x52a/0x950 [ 302.675428][T10113] led_trigger_set_default+0x260/0x2a0 [ 302.682758][T10113] led_classdev_register_ext+0x73d/0x930 [ 302.690328][T10113] input_leds_connect+0x517/0x790 [ 302.697455][T10113] input_register_device+0xd00/0x1140 [ 302.704896][T10113] atkbd_connect+0x72e/0xa00 [ 302.711600][T10113] serio_driver_probe+0x7f/0xd0 [ 302.718207][T10113] really_probe+0x26d/0x9e0 [ 302.724574][T10113] __driver_probe_device+0x18c/0x2f0 [ 302.731632][T10113] driver_probe_device+0x4f/0x430 [ 302.738428][T10113] __driver_attach+0x452/0x700 [ 302.745058][T10113] bus_for_each_dev+0x233/0x2b0 [ 302.751764][T10113] serio_handle_event+0x1f9/0x8d0 [ 302.758561][T10113] process_scheduled_works+0xade/0x17b0 [ 302.765958][T10113] worker_thread+0x8a0/0xda0 [ 302.772311][T10113] kthread+0x70e/0x8a0 [ 302.778249][T10113] ret_from_fork+0x3f9/0x770 [ 302.784769][T10113] ret_from_fork_asm+0x1a/0x30 [ 302.791328][T10113] } [ 302.793918][T10113] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 302.803234][T10113] -> (&client->buffer_lock){....}-{3:3} { [ 302.809164][T10113] INITIAL USE at: [ 302.813191][T10113] lock_acquire+0x120/0x360 [ 302.819475][T10113] _raw_spin_lock_irqsave+0xa7/0xf0 [ 302.826258][T10113] evdev_ioctl_handler+0x1969/0x1f10 [ 302.833416][T10113] __ia32_compat_sys_ioctl+0x543/0x840 [ 302.840901][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 302.847982][T10113] do_fast_syscall_32+0x34/0x80 [ 302.854429][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.862540][T10113] } [ 302.865228][T10113] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 302.873695][T10113] ... acquired at: [ 302.877694][T10113] lock_acquire+0x120/0x360 [ 302.882690][T10113] _raw_spin_lock+0x2e/0x40 [ 302.887788][T10113] evdev_pass_values+0xb9/0xbd0 [ 302.893304][T10113] evdev_events+0x1e6/0x340 [ 302.898531][T10113] input_pass_values+0x285/0x890 [ 302.903930][T10113] input_event_dispose+0x330/0x6b0 [ 302.909406][T10113] input_inject_event+0x1dd/0x340 [ 302.914713][T10113] evdev_write+0x2fc/0x480 [ 302.919352][T10113] vfs_write+0x27b/0xb30 [ 302.923884][T10113] ksys_write+0x145/0x250 [ 302.928416][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 302.933836][T10113] do_fast_syscall_32+0x34/0x80 [ 302.938895][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.945435][T10113] [ 302.947897][T10113] [ 302.947897][T10113] the dependencies between the lock to be acquired [ 302.947909][T10113] and SOFTIRQ-irq-unsafe lock: [ 302.961937][T10113] -> (tasklist_lock){.+.+}-{3:3} { [ 302.967532][T10113] HARDIRQ-ON-R at: [ 302.971717][T10113] lock_acquire+0x120/0x360 [ 302.978265][T10113] _raw_read_lock+0x36/0x50 [ 302.984977][T10113] __do_wait+0xde/0x740 [ 302.991151][T10113] do_wait+0x1f8/0x520 [ 302.997499][T10113] kernel_wait+0xab/0x170 [ 303.003937][T10113] call_usermodehelper_exec_work+0xbe/0x230 [ 303.011947][T10113] process_scheduled_works+0xade/0x17b0 [ 303.019598][T10113] worker_thread+0x8a0/0xda0 [ 303.026198][T10113] kthread+0x70e/0x8a0 [ 303.032387][T10113] ret_from_fork+0x3f9/0x770 [ 303.039085][T10113] ret_from_fork_asm+0x1a/0x30 [ 303.045970][T10113] SOFTIRQ-ON-R at: [ 303.050138][T10113] lock_acquire+0x120/0x360 [ 303.057095][T10113] _raw_read_lock+0x36/0x50 [ 303.063700][T10113] __do_wait+0xde/0x740 [ 303.069904][T10113] do_wait+0x1f8/0x520 [ 303.076533][T10113] kernel_wait+0xab/0x170 [ 303.083328][T10113] call_usermodehelper_exec_work+0xbe/0x230 [ 303.091339][T10113] process_scheduled_works+0xade/0x17b0 [ 303.098900][T10113] worker_thread+0x8a0/0xda0 [ 303.105508][T10113] kthread+0x70e/0x8a0 [ 303.111609][T10113] ret_from_fork+0x3f9/0x770 [ 303.118244][T10113] ret_from_fork_asm+0x1a/0x30 [ 303.125306][T10113] INITIAL USE at: [ 303.129663][T10113] lock_acquire+0x120/0x360 [ 303.136289][T10113] _raw_write_lock_irq+0xa2/0xf0 [ 303.143246][T10113] copy_process+0x224f/0x3c00 [ 303.150131][T10113] kernel_clone+0x21e/0x840 [ 303.156850][T10113] user_mode_thread+0xdd/0x140 [ 303.163738][T10113] rest_init+0x23/0x300 [ 303.169999][T10113] start_kernel+0x3a9/0x410 [ 303.176508][T10113] x86_64_start_reservations+0x24/0x30 [ 303.184100][T10113] x86_64_start_kernel+0x143/0x1c0 [ 303.191798][T10113] common_startup_64+0x13e/0x147 [ 303.198847][T10113] INITIAL READ USE at: [ 303.203452][T10113] lock_acquire+0x120/0x360 [ 303.210719][T10113] _raw_read_lock+0x36/0x50 [ 303.217592][T10113] __do_wait+0xde/0x740 [ 303.224202][T10113] do_wait+0x1f8/0x520 [ 303.230731][T10113] kernel_wait+0xab/0x170 [ 303.237602][T10113] call_usermodehelper_exec_work+0xbe/0x230 [ 303.246059][T10113] process_scheduled_works+0xade/0x17b0 [ 303.254062][T10113] worker_thread+0x8a0/0xda0 [ 303.261188][T10113] kthread+0x70e/0x8a0 [ 303.267793][T10113] ret_from_fork+0x3f9/0x770 [ 303.275379][T10113] ret_from_fork_asm+0x1a/0x30 [ 303.282953][T10113] } [ 303.285725][T10113] ... key at: [] tasklist_lock+0x18/0x40 [ 303.293907][T10113] ... acquired at: [ 303.297897][T10113] lock_acquire+0x120/0x360 [ 303.302874][T10113] _raw_read_lock+0x36/0x50 [ 303.307674][T10113] send_sigurg+0x12b/0x420 [ 303.312291][T10113] sk_send_sigurg+0x6c/0x2e0 [ 303.317176][T10113] queue_oob+0x420/0x4f0 [ 303.321620][T10113] unix_stream_sendmsg+0xc3f/0xdf0 [ 303.326930][T10113] __sock_sendmsg+0x21c/0x270 [ 303.331901][T10113] ____sys_sendmsg+0x52d/0x830 [ 303.337122][T10113] ___sys_sendmsg+0x21f/0x2a0 [ 303.342022][T10113] __sys_sendmmsg+0x28e/0x430 [ 303.347171][T10113] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 303.352920][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.358227][T10113] do_fast_syscall_32+0x34/0x80 [ 303.363292][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.369983][T10113] [ 303.372461][T10113] -> (&f_owner->lock){....}-{3:3} { [ 303.378180][T10113] INITIAL USE at: [ 303.382918][T10113] lock_acquire+0x120/0x360 [ 303.389633][T10113] _raw_write_lock_irq+0xa2/0xf0 [ 303.396436][T10113] __f_setown+0x67/0x370 [ 303.402606][T10113] fcntl_dirnotify+0x3fa/0x6a0 [ 303.409219][T10113] do_fcntl+0x6d0/0x1910 [ 303.415479][T10113] do_compat_fcntl64+0x477/0x720 [ 303.422452][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.429413][T10113] do_fast_syscall_32+0x34/0x80 [ 303.436108][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.444320][T10113] INITIAL READ USE at: [ 303.448772][T10113] lock_acquire+0x120/0x360 [ 303.455509][T10113] _raw_read_lock_irqsave+0xaf/0x100 [ 303.463266][T10113] send_sigio+0x38/0x370 [ 303.469910][T10113] dnotify_handle_event+0x169/0x440 [ 303.477402][T10113] fsnotify+0x1671/0x1a80 [ 303.484208][T10113] __fsnotify_parent+0x3fe/0x540 [ 303.491628][T10113] notify_change+0xb70/0xe40 [ 303.498549][T10113] do_truncate+0x1a4/0x220 [ 303.505272][T10113] vfs_truncate+0x493/0x520 [ 303.512339][T10113] do_sys_truncate+0xdb/0x190 [ 303.519493][T10113] __ia32_compat_sys_truncate+0x5b/0x70 [ 303.527271][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.534597][T10113] do_fast_syscall_32+0x34/0x80 [ 303.541963][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.550777][T10113] } [ 303.553386][T10113] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 303.562883][T10113] ... acquired at: [ 303.566888][T10113] lock_acquire+0x120/0x360 [ 303.571685][T10113] _raw_read_lock_irqsave+0xaf/0x100 [ 303.577170][T10113] send_sigio+0x38/0x370 [ 303.581704][T10113] kill_fasync+0x24d/0x4d0 [ 303.586399][T10113] sock_wake_async+0x137/0x160 [ 303.591450][T10113] sock_def_readable+0x3bb/0x550 [ 303.596581][T10113] queue_oob+0x452/0x4f0 [ 303.601027][T10113] unix_stream_sendmsg+0xc3f/0xdf0 [ 303.606431][T10113] __sock_sendmsg+0x21c/0x270 [ 303.611426][T10113] ____sys_sendmsg+0x52d/0x830 [ 303.616487][T10113] ___sys_sendmsg+0x21f/0x2a0 [ 303.621720][T10113] __sys_sendmmsg+0x28e/0x430 [ 303.626777][T10113] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 303.632796][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.638108][T10113] do_fast_syscall_32+0x34/0x80 [ 303.643158][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.649918][T10113] [ 303.652353][T10113] -> (&new->fa_lock){....}-{3:3} { [ 303.657605][T10113] INITIAL USE at: [ 303.661828][T10113] lock_acquire+0x120/0x360 [ 303.667921][T10113] _raw_write_lock_irq+0xa2/0xf0 [ 303.674451][T10113] fasync_remove_entry+0xf1/0x1c0 [ 303.681141][T10113] sock_fasync+0x85/0xf0 [ 303.687001][T10113] __fput+0x8a2/0xa70 [ 303.692737][T10113] task_work_run+0x1d4/0x260 [ 303.699092][T10113] exit_to_user_mode_loop+0xec/0x110 [ 303.706147][T10113] __do_fast_syscall_32+0x1f4/0x2b0 [ 303.713017][T10113] do_fast_syscall_32+0x34/0x80 [ 303.719632][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.727986][T10113] INITIAL READ USE at: [ 303.732439][T10113] lock_acquire+0x120/0x360 [ 303.739076][T10113] _raw_read_lock_irqsave+0xaf/0x100 [ 303.746407][T10113] kill_fasync+0x199/0x4d0 [ 303.753035][T10113] sock_wake_async+0x137/0x160 [ 303.759847][T10113] sk_send_sigurg+0x1f1/0x2e0 [ 303.766572][T10113] queue_oob+0x420/0x4f0 [ 303.772915][T10113] unix_stream_sendmsg+0xc3f/0xdf0 [ 303.780233][T10113] __sock_sendmsg+0x21c/0x270 [ 303.787295][T10113] ____sys_sendmsg+0x52d/0x830 [ 303.794111][T10113] ___sys_sendmsg+0x21f/0x2a0 [ 303.800890][T10113] __sys_sendmmsg+0x28e/0x430 [ 303.807897][T10113] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 303.815558][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.822866][T10113] do_fast_syscall_32+0x34/0x80 [ 303.829755][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.838191][T10113] } [ 303.840704][T10113] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 303.849715][T10113] ... acquired at: [ 303.853539][T10113] lock_acquire+0x120/0x360 [ 303.858438][T10113] _raw_read_lock_irqsave+0xaf/0x100 [ 303.863936][T10113] kill_fasync+0x199/0x4d0 [ 303.868653][T10113] evdev_pass_values+0x627/0xbd0 [ 303.873970][T10113] evdev_events+0x1e6/0x340 [ 303.878869][T10113] input_pass_values+0x285/0x890 [ 303.884877][T10113] input_event_dispose+0x330/0x6b0 [ 303.890346][T10113] input_inject_event+0x1dd/0x340 [ 303.895691][T10113] evdev_write+0x2fc/0x480 [ 303.900522][T10113] vfs_write+0x27b/0xb30 [ 303.905142][T10113] ksys_write+0x145/0x250 [ 303.909796][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.915119][T10113] do_fast_syscall_32+0x34/0x80 [ 303.920342][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.927135][T10113] [ 303.929675][T10113] [ 303.929675][T10113] stack backtrace: [ 303.935887][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.5.1464 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 303.935911][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.935929][T10113] Call Trace: [ 303.935939][T10113] [ 303.935947][T10113] dump_stack_lvl+0x189/0x250 [ 303.935975][T10113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.935997][T10113] ? __pfx__printk+0x10/0x10 [ 303.936026][T10113] validate_chain+0x1f05/0x2140 [ 303.936056][T10113] __lock_acquire+0xab9/0xd20 [ 303.936085][T10113] ? kill_fasync+0x199/0x4d0 [ 303.936104][T10113] lock_acquire+0x120/0x360 [ 303.936130][T10113] ? kill_fasync+0x199/0x4d0 [ 303.936154][T10113] _raw_read_lock_irqsave+0xaf/0x100 [ 303.936178][T10113] ? kill_fasync+0x199/0x4d0 [ 303.936197][T10113] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 303.936219][T10113] ? do_raw_spin_lock+0x121/0x290 [ 303.936244][T10113] kill_fasync+0x199/0x4d0 [ 303.936263][T10113] ? kill_fasync+0x53/0x4d0 [ 303.936284][T10113] evdev_pass_values+0x627/0xbd0 [ 303.936314][T10113] ? evdev_pass_values+0x5a1/0xbd0 [ 303.936342][T10113] evdev_events+0x1e6/0x340 [ 303.936367][T10113] ? evdev_events+0x79/0x340 [ 303.936392][T10113] ? input_pass_values+0x8d/0x890 [ 303.936417][T10113] input_pass_values+0x285/0x890 [ 303.936444][T10113] ? input_handle_event+0x70c/0xf30 [ 303.936465][T10113] input_event_dispose+0x330/0x6b0 [ 303.936487][T10113] input_inject_event+0x1dd/0x340 [ 303.936508][T10113] ? input_inject_event+0xb6/0x340 [ 303.936528][T10113] evdev_write+0x2fc/0x480 [ 303.936557][T10113] ? __pfx_evdev_write+0x10/0x10 [ 303.936583][T10113] ? bpf_lsm_file_permission+0x9/0x20 [ 303.936605][T10113] ? security_file_permission+0x75/0x290 [ 303.936629][T10113] ? rw_verify_area+0x255/0x4d0 [ 303.936657][T10113] ? __lock_acquire+0xab9/0xd20 [ 303.936681][T10113] ? __pfx_evdev_write+0x10/0x10 [ 303.936708][T10113] vfs_write+0x27b/0xb30 [ 303.936734][T10113] ? __pfx_vfs_write+0x10/0x10 [ 303.936757][T10113] ? __fget_files+0x2a/0x420 [ 303.936773][T10113] ? __fget_files+0x2a/0x420 [ 303.936787][T10113] ? __fget_files+0x3a0/0x420 [ 303.936801][T10113] ? __fget_files+0x2a/0x420 [ 303.936819][T10113] ksys_write+0x145/0x250 [ 303.936844][T10113] ? __pfx_ksys_write+0x10/0x10 [ 303.936868][T10113] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.936894][T10113] __do_fast_syscall_32+0xb6/0x2b0 [ 303.936921][T10113] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.936946][T10113] do_fast_syscall_32+0x34/0x80 [ 303.936972][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.936995][T10113] RIP: 0023:0xf7f95539 [ 303.937021][T10113] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.937037][T10113] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 303.937057][T10113] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 303.937070][T10113] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.937081][T10113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.937091][T10113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.937103][T10113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.937120][T10113] [ 303.964368][ T9903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 304.305858][ T9903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.331209][ T9903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 304.365430][ T9903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.474792][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.510607][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.523186][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.530416][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.573316][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.580531][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.715072][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.757291][ T9903] veth0_vlan: entered promiscuous mode [ 304.785783][ T9903] veth1_vlan: entered promiscuous mode [ 304.825718][ T9903] veth0_macvtap: entered promiscuous mode [ 304.840843][ T9903] veth1_macvtap: entered promiscuous mode [ 304.863993][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.887221][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.904078][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.926143][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.936037][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.950147][ T3509] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.974861][ T9903] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 305.015776][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.031208][ T9903] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 305.041275][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.082072][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.090569][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.190347][ T5934] usb 7-1: USB disconnect, device number 4 [ 309.367583][ T5875] Bluetooth: hci4: command 0x0406 tx timeout