last executing test programs: 10.73675591s ago: executing program 4 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r3, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.111933558s ago: executing program 4 (id=3639): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c2, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0xdb9b, 0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000000000000800040001000000", 0x24) 8.995623915s ago: executing program 4 (id=3648): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 8.656518108s ago: executing program 4 (id=3651): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) fchmod(r0, 0x129) 8.403062499s ago: executing program 4 (id=3654): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 7.994475355s ago: executing program 4 (id=3658): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 6.302528485s ago: executing program 1 (id=3663): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r3, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) 4.847224066s ago: executing program 2 (id=3672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x1) recvmsg$can_raw(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000380)=""/115, 0x73}], 0x2}, 0x1) 4.676493762s ago: executing program 2 (id=3673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x240400c1) 4.458658394s ago: executing program 2 (id=3674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4.306973916s ago: executing program 1 (id=3675): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 4.040185358s ago: executing program 1 (id=3677): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 3.419272396s ago: executing program 2 (id=3678): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40003, 0x40, 0x5, 0x100, 0x10000000, 0x20010}) syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 3.069434896s ago: executing program 1 (id=3679): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x400c4150, 0x0) 2.790603069s ago: executing program 1 (id=3680): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_clone3(&(0x7f0000000380)={0x1181700, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.683287286s ago: executing program 0 (id=3681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) read$alg(r1, &(0x7f00000013c0)=""/4096, 0x1000) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=@delpolicy={0x1000, 0x14, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x4, 0x4e20, 0x884, 0xa, 0x100, 0x0, 0x5e}, 0x6e6bb0, 0x3}, [@algo_auth={0xfad, 0x1, {{'sha3-384\x00'}, 0x7b28, "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"}}]}, 0x1000}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40001) 2.503121304s ago: executing program 0 (id=3682): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.358723651s ago: executing program 0 (id=3684): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b'], 0x0, 0x0, 0x0, 0x0}) 1.835312539s ago: executing program 3 (id=3686): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 1.73890427s ago: executing program 2 (id=3687): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80a02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xa0a1}}) io_uring_enter(r3, 0x2def, 0xb80c, 0xe, 0x0, 0x0) 1.62567859s ago: executing program 3 (id=3688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) 1.474911982s ago: executing program 2 (id=3689): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0x1, "c8"}, 0x0, 0x0, 0x0, 0x0}) 1.378471606s ago: executing program 3 (id=3690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1}, 0x2101) 1.085623748s ago: executing program 3 (id=3691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001840)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000014c0)="b2dab37e2f40d6f5140e40d67b67d3982d9da4906e2ddfd758cda2f2f134e59230cc82103022af34d0ce85ec16c9e83b999351e29ef25badeddf865dd1dc1c76466606e0361e5844041acaad412ed84315", 0x51}, {&(0x7f0000000300)="b3d188d3b10d13037d9ff5368faa542125e216bcc6192c94b74b58ad6657", 0x1e}, {&(0x7f0000001540)="533a1449a96bba6fb7376f0b221a6ecfa15d46491df2e765623927cdc46e86dcc92e0091da29bd0510d71cab8e68ebb14ee4b364c7aa4799f10a3ac98d703691755dd49037d788e4078bc1ff34df6e8f95b257767c0058c7be3df34095e7a94a7f569771acd6e1711eff26923c511c79a34d8de2d430c0e4e781712f7304be417b11938b309aa9889ca9b0a7168e23e201991d0b0b77bda1ba661301d0a53ef745c4916a59f26577604e725e987cba550ac932c8afda5c9b998e1f60ce046f624f", 0xc1}], 0x3, &(0x7f0000001640)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24048090}], 0x1, 0x40840) recvmsg$unix(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x10020) 957.52298ms ago: executing program 1 (id=3692): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 875.920863ms ago: executing program 3 (id=3693): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) 349.17518ms ago: executing program 0 (id=3694): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x232}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 186.558851ms ago: executing program 3 (id=3695): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd6000000010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 124.622165ms ago: executing program 0 (id=3696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 0s ago: executing program 0 (id=3697): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000040)={0x0, 0xdfd2, 0x10100, 0x1, 0x16}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x50, 0x6000, @fd=r1, 0x40, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): 56786][T12440] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 387.056786][T12440] ~^>Ƥr&Dq.;쀯<2AU,1) r0 ' [ 387.242620][T12444] sit0: entered promiscuous mode [ 387.283930][T12444] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 387.314484][T12444] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2646'. [ 387.591427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.892682][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 388.312355][ T5918] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 388.387567][ T30] audit: type=1326 audit(1755881396.774:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 388.514946][ T30] audit: type=1326 audit(1755881396.774:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 388.545636][ T30] audit: type=1326 audit(1755881396.774:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 388.572228][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 388.585192][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 388.613933][ T30] audit: type=1326 audit(1755881396.774:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 388.618605][ T5918] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 388.645618][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.748982][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.766606][ T5918] usb 4-1: Product: syz [ 388.776994][ T5918] usb 4-1: Manufacturer: syz [ 388.802245][ T30] audit: type=1326 audit(1755881396.774:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 388.818781][ T5918] usb 4-1: SerialNumber: syz [ 388.846095][T12477] syzkaller1: entered promiscuous mode [ 388.861457][T12477] syzkaller1: entered allmulticast mode [ 388.886440][ T5918] usb 4-1: config 0 descriptor?? [ 388.886647][ T30] audit: type=1326 audit(1755881396.774:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 388.990142][ T30] audit: type=1326 audit(1755881396.774:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 389.151740][ T30] audit: type=1326 audit(1755881396.774:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 389.265104][ T30] audit: type=1326 audit(1755881396.774:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 389.313977][ T30] audit: type=1326 audit(1755881396.774:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 389.343983][ T5918] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 389.675642][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.036765][ T5868] usb 4-1: USB disconnect, device number 44 [ 390.231591][ T5918] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 390.411594][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 390.424186][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.455487][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.496067][ T5918] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 390.523478][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.560272][ T5918] usb 3-1: config 0 descriptor?? [ 390.711375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.787080][T12519] sit0: entered promiscuous mode [ 390.805345][T12519] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 390.829097][T12519] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2673'. [ 390.960370][T12525] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2675'. [ 391.319721][T12537] syzkaller1: entered promiscuous mode [ 391.331954][T12537] syzkaller1: entered allmulticast mode [ 391.410305][ T5918] letsketch 0003:6161:4D15.0037: Device info: ఁ [ 391.640657][ T5918] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 391.661629][ T5918] letsketch 0003:6161:4D15.0037: probe with driver letsketch failed with error -71 [ 391.719963][ T5918] usb 3-1: USB disconnect, device number 41 [ 391.751334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.791423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.823954][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 392.862653][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 392.884201][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 393.221997][T12594] ======================================================= [ 393.221997][T12594] WARNING: The mand mount option has been deprecated and [ 393.221997][T12594] and is ignored by this kernel. Remove the mand [ 393.221997][T12594] option from the mount to silence this warning. [ 393.221997][T12594] ======================================================= [ 393.831360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.011435][ T5868] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 394.181370][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 394.188268][ T5868] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 394.198320][ T5868] usb 4-1: config 8 has no interface number 0 [ 394.204725][ T5868] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 394.216540][ T5868] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 394.226493][ T5868] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 394.237596][ T5868] usb 4-1: config 8 interface 39 has no altsetting 0 [ 394.253705][ T5868] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 394.263323][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.271914][ T5868] usb 4-1: Product: syz [ 394.276409][ T5868] usb 4-1: Manufacturer: syz [ 394.281133][ T5868] usb 4-1: SerialNumber: syz [ 394.368682][ T5958] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 394.534008][ T5958] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.545126][ T5958] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.559887][ T5958] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.577736][ T5958] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 394.589437][ T5958] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 394.643319][ T5958] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.755427][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.806998][ T5958] usb 5-1: Product: syz [ 394.813982][ T5958] usb 5-1: Manufacturer: syz [ 394.855961][ T5958] cdc_wdm 5-1:1.0: skipping garbage [ 394.866149][ T5958] cdc_wdm 5-1:1.0: skipping garbage [ 394.872637][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.885540][ T5958] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 394.911792][ T5958] cdc_wdm 5-1:1.0: Unknown control protocol [ 394.954775][ T5868] ipheth 4-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 395.002699][ T5868] ipheth 4-1:8.39: Apple iPhone USB Ethernet device attached [ 395.035389][ T5868] usb 4-1: USB disconnect, device number 45 [ 395.195795][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 395.202578][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 395.209722][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 395.216389][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 395.223102][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 395.229795][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 395.229971][ T5958] usb 5-1: USB disconnect, device number 51 [ 395.236083][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 395.276183][ T5868] ipheth 4-1:8.39: Apple iPhone USB Ethernet now disconnected [ 395.652096][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 395.827490][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 395.851366][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.859557][ T9] usb 1-1: Product: syz [ 395.881362][ T9] usb 1-1: Manufacturer: syz [ 395.886059][ T9] usb 1-1: SerialNumber: syz [ 395.906020][ T9] usb 1-1: config 0 descriptor?? [ 395.911449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.926644][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 396.950713][ T9] usb 1-1: failed to send control message: -71 [ 396.961471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.967827][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 396.994669][ T9] usb 1-1: USB disconnect, device number 37 [ 397.021062][ T9] ch341 1-1:0.0: device disconnected [ 397.868871][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 397.868896][ T30] audit: type=1326 audit(1755881406.254:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.3.2730" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 397.897279][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.991944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.341731][ T5918] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 398.515230][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 398.525465][ T5918] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 398.543934][ T5918] usb 1-1: config 0 has no interface number 0 [ 398.560680][ T5918] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.590710][ T5918] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 398.610908][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.637524][ T5918] usb 1-1: Product: syz [ 398.642184][ T5918] usb 1-1: Manufacturer: syz [ 398.647094][ T5918] usb 1-1: SerialNumber: syz [ 398.676379][ T5918] usb 1-1: config 0 descriptor?? [ 398.699389][ T5918] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 398.722437][ T5918] em28xx 1-1:0.132: Video interface 132 found: [ 398.959027][T12709] binder: 12708:12709 ioctl c018620c 80000100 returned -1 [ 399.031426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.128824][ T5918] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 399.554190][ T5918] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 399.568966][ T5918] em28xx 1-1:0.132: board has no eeprom [ 399.632316][ T5918] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 399.640691][ T5918] em28xx 1-1:0.132: analog set to bulk mode. [ 399.659606][ T5960] em28xx 1-1:0.132: Registering V4L2 extension [ 399.679469][ T5918] usb 1-1: USB disconnect, device number 38 [ 399.713893][ T5918] em28xx 1-1:0.132: Disconnecting em28xx [ 399.958204][ T5960] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 399.967553][ T5960] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 399.998825][ T5960] em28xx 1-1:0.132: No AC97 audio processor [ 400.041026][ T5960] usb 1-1: Decoder not found [ 400.049795][ T5960] em28xx 1-1:0.132: failed to create media graph [ 400.061384][ T5960] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 400.071417][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.096152][ T5960] em28xx 1-1:0.132: Remote control support is not available for this card. [ 400.111719][ T5918] em28xx 1-1:0.132: Closing input extension [ 400.193713][ T5918] em28xx 1-1:0.132: Freeing device [ 400.223723][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 401.111425][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.111886][ T5958] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 401.153879][T12755] sctp: [Deprecated]: syz.3.2760 (pid 12755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.153879][T12755] Use struct sctp_sack_info instead [ 401.291784][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.329670][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 401.349108][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 401.369634][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.391084][ T5958] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 401.401145][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.442319][ T5958] usb 1-1: Product: syz [ 401.447165][ T5958] usb 1-1: Manufacturer: syz [ 401.460896][ T5958] usb 1-1: SerialNumber: syz [ 401.479027][ T5958] usb 1-1: config 0 descriptor?? [ 401.489873][T12748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.661420][ T5958] rc_core: IR keymap rc-imon-rsc not found [ 401.697661][ T5958] Registered IR keymap rc-empty [ 401.718730][ T5958] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 401.747539][T12778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.758916][ T5958] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 401.798253][ T5958] usb 1-1: USB disconnect, device number 39 [ 402.151441][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.875724][T12799] lo: entered promiscuous mode [ 402.892588][T12799] lo: entered allmulticast mode [ 402.898998][T12798] lo: left allmulticast mode [ 402.908060][T12798] lo: left promiscuous mode [ 402.981502][ T5918] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 403.201409][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.209918][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 403.226850][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.252406][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.280122][ T5918] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 403.306963][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.343790][ T5918] usb 2-1: config 0 descriptor?? [ 403.833292][ T5918] savu 0003:1E7D:2D5A.0038: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 404.117096][ T5918] usb 2-1: USB disconnect, device number 37 [ 404.231420][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.271424][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 404.433384][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.451434][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 404.471455][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 404.491162][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.503468][ T9] usb 5-1: config 0 descriptor?? [ 404.591475][ T5958] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 404.755392][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.769273][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 404.781753][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 404.792303][ T5868] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 404.800306][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 404.815879][ T5958] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.825319][ T5958] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.833619][ T5958] usb 3-1: Manufacturer: syz [ 404.842556][ T5958] usb 3-1: config 0 descriptor?? [ 404.928202][ T9] kovaplus 0003:1E7D:2D50.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 404.966009][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 404.974374][ T5868] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 404.990133][ T5868] usb 1-1: config 0 has no interface number 0 [ 404.996644][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 405.005312][ T5868] usb 1-1: config 0 interface 12 has no altsetting 0 [ 405.018398][ T5868] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 405.028568][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.040932][ T5868] usb 1-1: Product: syz [ 405.045283][ T5868] usb 1-1: Manufacturer: syz [ 405.050053][ T5868] usb 1-1: SerialNumber: syz [ 405.071205][ T5868] usb 1-1: config 0 descriptor?? [ 405.083413][ T5868] f81534 1-1:0.12: required endpoints missing [ 405.152209][ T5958] rc_core: IR keymap rc-hauppauge not found [ 405.158629][ T5958] Registered IR keymap rc-empty [ 405.163938][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.177848][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.189813][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.205760][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 405.215478][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.223071][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.235679][ T10] usb 2-1: config 0 descriptor?? [ 405.244283][ T5958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 405.260609][ T5958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 405.281607][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.291795][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.311743][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.320643][ T9] kovaplus 0003:1E7D:2D50.0039: couldn't init struct kovaplus_device [ 405.330913][ T5918] usb 1-1: USB disconnect, device number 40 [ 405.367467][ T9] kovaplus 0003:1E7D:2D50.0039: couldn't install mouse [ 405.378204][ T9] kovaplus 0003:1E7D:2D50.0039: probe with driver kovaplus failed with error -71 [ 405.391704][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.404665][ T9] usb 5-1: USB disconnect, device number 52 [ 405.411763][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.434852][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.476249][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.501549][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.521758][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.543707][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.566270][ T5958] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 405.607510][ T5958] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 405.619131][ T5958] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 405.640653][ T5958] usb 3-1: USB disconnect, device number 42 [ 405.695572][ T10] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 405.966516][ T5918] usb 2-1: USB disconnect, device number 38 [ 406.152550][T12842] syz.4.2795 (12842): drop_caches: 2 [ 406.159548][T12842] syz.4.2795 (12842): drop_caches: 2 [ 406.311536][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.511471][ T5958] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 406.614070][T12860] vlan3: entered allmulticast mode [ 406.619789][T12860] bond0: entered allmulticast mode [ 406.625638][T12860] bond_slave_0: entered allmulticast mode [ 406.631656][T12860] bond_slave_1: entered allmulticast mode [ 406.693527][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.706385][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.717231][ T5958] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 406.726800][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.742211][ T5958] usb 5-1: config 0 descriptor?? [ 406.801483][ T5918] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 406.961534][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 406.980870][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.997725][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 407.011130][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.028601][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.054781][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.074879][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.183360][ T5958] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 407.223357][ T5958] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 407.309053][ T5918] usb 3-1: GET_CAPABILITIES returned 0 [ 407.321421][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 407.351420][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.377171][ T5958] cp2112 0003:10C4:EA90.003B: Part Number: 0x82 Device Version: 0xFE [ 407.499553][T12877] binder: 12875:12877 ioctl c0306201 80000540 returned -14 [ 407.554907][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 407.573952][ T5918] usb 3-1: USB disconnect, device number 43 [ 407.779900][ T5958] cp2112 0003:10C4:EA90.003B: error setting SMBus config [ 407.804411][ T5958] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -71 [ 407.855312][ T5958] usb 5-1: USB disconnect, device number 53 [ 408.037614][T12894] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2818'. [ 408.217810][T12898] unknown channel width for channel at 909000KHz? [ 408.229511][T12898] unknown channel width for channel at 909000KHz? [ 408.255027][T12898] unknown channel width for channel at 909000KHz? [ 408.391422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.471368][ T5958] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 408.671953][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 408.683113][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.708972][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.774509][ T5958] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.804711][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.840136][ T5958] usb 3-1: config 0 descriptor?? [ 409.011508][ T980] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 409.174999][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.191414][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.207722][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.224084][ T980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.235296][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.247248][ T980] usb 5-1: config 0 descriptor?? [ 409.292439][ T5958] savu 0003:1E7D:2D5A.003C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 409.431531][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.596593][ T5958] usb 3-1: USB disconnect, device number 44 [ 409.727233][ T980] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 409.964167][T12940] netlink: 'syz.0.2837': attribute type 9 has an invalid length. [ 410.000930][ T980] usb 5-1: USB disconnect, device number 54 [ 410.051529][T12943] netlink: 'syz.0.2837': attribute type 9 has an invalid length. [ 410.471496][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.660882][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 410.778170][T12965] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2847'. [ 411.032842][ T5958] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 411.194533][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 411.213813][ T5958] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 411.227195][ T5958] usb 1-1: config 150 has no interface number 0 [ 411.261604][ T5958] usb 1-1: config 150 interface 204 has no altsetting 0 [ 411.274600][ T5958] usb 1-1: config 150 interface 1 has no altsetting 0 [ 411.295250][ T5958] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 411.315462][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.350287][ T5958] usb 1-1: Product: syz [ 411.363532][ T5958] usb 1-1: Manufacturer: syz [ 411.374320][ T5958] usb 1-1: SerialNumber: syz [ 411.511428][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.619547][ T5958] xr_serial 1-1:150.204: xr_serial converter detected [ 411.661469][ T980] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 411.833666][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 411.841080][ T980] usb 5-1: config 0 has no interfaces? [ 411.851725][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.863247][ T980] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.875002][ T980] usb 5-1: Manufacturer: syz [ 411.895128][ T980] usb 5-1: config 0 descriptor?? [ 412.190769][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 412.244553][ T24] usb 5-1: USB disconnect, device number 55 [ 412.421200][ T5958] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 412.429411][ T5958] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 412.450294][ T5958] usb 1-1: USB disconnect, device number 41 [ 412.468701][ T5958] xr_serial 1-1:150.204: device disconnected [ 412.551690][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.173313][T13031] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.587176][T13051] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 413.594835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.631587][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.731984][ T5958] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 414.901518][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 414.918839][ T5958] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 414.953169][ T5958] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 414.972824][ T30] audit: type=1326 audit(1755881423.334:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5558 code=0x7ffc0000 [ 415.001453][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.041633][ T5958] usb 5-1: Product: syz [ 415.050863][ T5958] usb 5-1: Manufacturer: syz [ 415.056424][ T30] audit: type=1326 audit(1755881423.334:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 415.091522][ T5958] usb 5-1: SerialNumber: syz [ 415.120435][ T5958] usb 5-1: config 0 descriptor?? [ 415.140457][T13081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.150300][ T5958] hub 5-1:0.0: bad descriptor, ignoring hub [ 415.166597][ T30] audit: type=1326 audit(1755881423.334:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 415.189230][ T5958] hub 5-1:0.0: probe with driver hub failed with error -5 [ 415.240262][ T30] audit: type=1326 audit(1755881423.334:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5558 code=0x7ffc0000 [ 415.343611][ T30] audit: type=1326 audit(1755881423.334:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 415.367484][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.411517][ T30] audit: type=1326 audit(1755881423.334:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 415.437397][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.520485][ T30] audit: type=1326 audit(1755881423.334:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5558 code=0x7ffc0000 [ 415.628057][ T30] audit: type=1326 audit(1755881423.334:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5558 code=0x7ffc0000 [ 415.650381][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.671787][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.702030][ T30] audit: type=1326 audit(1755881423.334:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 415.784323][ T30] audit: type=1326 audit(1755881423.334:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.1.2893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5558 code=0x7ffc0000 [ 415.812599][ T5958] usb 5-1: reset high-speed USB device number 56 using dummy_hcd [ 415.859299][ T5958] usb 5-1: device reset changed ep0 maxpacket size! [ 415.916618][ T5958] usb 5-1: USB disconnect, device number 56 [ 416.129604][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 416.281434][ T5958] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 416.508398][ T5958] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 416.525194][ T5958] usb 5-1: config 0 has no interface number 0 [ 416.537512][ T5958] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 416.551335][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.578184][ T5958] usb 5-1: Product: syz [ 416.609734][ T5958] usb 5-1: Manufacturer: syz [ 416.626743][ T5958] usb 5-1: SerialNumber: syz [ 416.636691][ T5958] usb 5-1: config 0 descriptor?? [ 416.711693][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.864162][ T5958] cdc_subset 5-1:0.90: probe with driver cdc_subset failed with error -71 [ 416.894055][ T5958] usb 5-1: USB disconnect, device number 57 [ 416.927579][T13124] veth0: entered promiscuous mode [ 416.949866][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 417.060804][T13127] syzkaller1: entered promiscuous mode [ 417.068354][T13127] syzkaller1: entered allmulticast mode [ 417.517066][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 417.683222][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.703568][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.719228][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.734777][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.744336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.751425][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.778378][ T24] usb 4-1: config 0 descriptor?? [ 417.791562][ T5918] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 417.961578][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 417.970293][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.984060][ T5918] usb 5-1: config 0 has no interface number 0 [ 417.990460][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.007643][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.029998][ T5918] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 418.040220][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.059513][ T5918] usb 5-1: config 0 descriptor?? [ 418.252827][ T24] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 418.516784][ T10] usb 4-1: USB disconnect, device number 46 [ 418.690949][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.003F/input/input54 [ 418.790230][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.003F/input/input55 [ 418.802048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.835007][ T5918] uclogic 0003:28BD:0071.003F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 418.962155][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 418.986797][ T980] usb 5-1: USB disconnect, device number 58 [ 419.032724][T13164] fido_id[13164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 419.144261][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.156289][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 419.181519][ T5918] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 419.190299][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 419.220755][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.254624][ T10] usb 1-1: config 0 descriptor?? [ 419.363760][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 419.375701][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 419.387518][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 419.401079][ T5918] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 419.410473][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.419747][ T5918] usb 3-1: Product: syz [ 419.424515][ T5918] usb 3-1: Manufacturer: syz [ 419.429164][ T5918] usb 3-1: SerialNumber: syz [ 419.437515][ T5918] usb 3-1: config 0 descriptor?? [ 419.443852][T13166] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 419.451410][T13166] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 419.460330][ T5918] usb 3-1: ucan: probing device on interface #0 [ 419.541468][ T980] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 419.696584][ T10] kovaplus 0003:1E7D:2D50.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 419.711474][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 419.736689][ T980] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.764243][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.775283][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.796628][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.821420][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.831451][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.839131][ T980] usb 4-1: Product: syz [ 419.843702][ T980] usb 4-1: Manufacturer: syz [ 419.848372][ T980] usb 4-1: SerialNumber: syz [ 420.086539][ T10] kovaplus 0003:1E7D:2D50.0040: couldn't init struct kovaplus_device [ 420.098557][ T10] kovaplus 0003:1E7D:2D50.0040: couldn't install mouse [ 420.109344][ T10] kovaplus 0003:1E7D:2D50.0040: probe with driver kovaplus failed with error -71 [ 420.119218][ T5918] ucan 3-1:0.0 can0: registered device [ 420.133835][ T10] usb 1-1: USB disconnect, device number 42 [ 420.261599][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 420.299054][ T980] usb 4-1: 0:2 : does not exist [ 420.307983][ T5918] ucan 3-1:0.0 can0: firmware string: unknown [ 420.329690][ T5918] usb 3-1: USB disconnect, device number 45 [ 420.426111][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.435681][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.448516][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.458041][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 420.469355][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 420.484994][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.494771][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.502986][ T24] usb 2-1: Product: syz [ 420.507274][ T24] usb 2-1: Manufacturer: syz [ 420.523872][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 420.529672][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 420.538880][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 420.545605][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 420.871469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.919270][ T980] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 420.995267][ T980] usb 4-1: USB disconnect, device number 47 [ 421.064556][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.241548][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 421.276454][T13209] input: syz0 as /devices/virtual/input/input56 [ 421.283149][T13209] input: failed to attach handler leds to device input56, error: -6 [ 421.328935][ T5958] usb 2-1: USB disconnect, device number 39 [ 421.402233][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 421.427980][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.449710][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.474079][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 421.498962][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.521093][ T24] usb 5-1: config 0 descriptor?? [ 421.911518][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.999510][ T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0041/input/input57 [ 422.116815][ T24] creative-sb0540 0003:041E:3100.0041: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 422.222471][ T980] usb 5-1: USB disconnect, device number 59 [ 422.281496][ T5918] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 422.301958][ T5958] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 422.409627][T13239] fido_id[13239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 422.436403][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 422.462069][ T5918] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 422.473079][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.492478][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.495427][ T5958] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 422.508534][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.520167][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.551713][ T5958] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 422.567063][ T5958] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 422.585730][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.585787][ T5958] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 422.598370][ T5958] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 422.636277][ T5958] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.649236][ T5958] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 422.650535][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.665952][ T5958] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 422.675578][ T5958] usb 3-1: Product: syz [ 422.680111][ T5958] usb 3-1: Manufacturer: syz [ 422.685652][ T5958] usb 3-1: SerialNumber: syz [ 422.692889][ T24] usb 1-1: config 0 has no interfaces? [ 422.702294][ T5958] usb 3-1: config 0 descriptor?? [ 422.707279][ T24] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 422.712661][T13233] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.717818][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.734380][ T24] usb 1-1: Product: syz [ 422.739771][ T24] usb 1-1: Manufacturer: syz [ 422.739951][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.763762][ T5958] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 422.771381][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.784735][ T24] usb 1-1: SerialNumber: syz [ 422.800548][ T24] usb 1-1: config 0 descriptor?? [ 422.800959][ T5958] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 422.811367][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.862963][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.873196][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.923478][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.932158][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.946315][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.958336][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.021738][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.037635][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.071497][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.101862][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.118265][ T24] usb 3-1: USB disconnect, device number 46 [ 423.128927][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.140847][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 423.160135][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.191362][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.199589][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.237384][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.263159][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.280150][ T5958] usb 1-1: USB disconnect, device number 43 [ 423.298736][ T5918] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 423.325841][ T5918] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 423.350750][ T5918] usb 2-1: Product: syz [ 423.369131][ T5918] usb 2-1: Manufacturer: syz [ 423.413789][ T5918] usb 2-1: SerialNumber: syz [ 423.443015][ T5918] usb 2-1: config 0 descriptor?? [ 423.484195][ T5918] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 423.694828][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 423.871330][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 423.884231][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 423.893301][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 423.912144][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.951729][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 423.964924][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.981382][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.991403][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.000201][ T9] usb 4-1: Product: syz [ 424.009724][ T9] usb 4-1: Manufacturer: syz [ 424.029880][ T9] usb 4-1: SerialNumber: syz [ 424.270653][ T24] usb 2-1: USB disconnect, device number 40 [ 424.288273][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 424.518591][T13263] batadv_slave_1: entered promiscuous mode [ 424.528261][T13262] batadv_slave_1: left promiscuous mode [ 424.770051][ T9] usb 4-1: 0:2 : does not exist [ 424.816669][ T9] usb 4-1: USB disconnect, device number 48 [ 424.896505][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.031503][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.040895][T13273] pim6reg1: entered promiscuous mode [ 425.058905][T13273] pim6reg1: entered allmulticast mode [ 425.428784][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 425.428808][ T30] audit: type=1326 audit(1755881433.814:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.460632][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.519631][ T30] audit: type=1326 audit(1755881433.854:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.544186][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.646752][ T30] audit: type=1326 audit(1755881433.864:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.700646][T13302] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2992'. [ 425.724873][ T30] audit: type=1326 audit(1755881433.864:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.748589][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.848579][ T30] audit: type=1326 audit(1755881433.864:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.904022][ T30] audit: type=1326 audit(1755881433.864:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.927534][ T30] audit: type=1326 audit(1755881433.864:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.950716][ T30] audit: type=1326 audit(1755881433.864:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 425.977689][ T30] audit: type=1326 audit(1755881433.864:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 426.001950][ T30] audit: type=1326 audit(1755881433.864:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 426.071424][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.507105][T13328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3003'. [ 426.516578][T13328] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3003'. [ 426.525939][T13328] netlink: 'syz.1.3003': attribute type 6 has an invalid length. [ 426.539941][T13328] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 426.548188][T13328] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3003'. [ 427.111421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.391487][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 427.541587][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 427.549511][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 427.558283][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 427.567488][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 427.577017][ T9] usb 3-1: config 1 has no interface number 0 [ 427.583851][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.595409][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 427.608705][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 427.621388][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.681560][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 427.876121][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 428.151471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.366202][ T24] usb 3-1: USB disconnect, device number 47 [ 428.380764][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 428.511724][ T5918] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 428.681363][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 428.688475][ T5918] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.699847][ T5918] usb 1-1: config 0 has no interface number 0 [ 428.706087][ T5918] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.718275][ T5918] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.728557][ T5918] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 428.737885][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.750466][ T5918] usb 1-1: config 0 descriptor?? [ 428.771440][ T980] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 428.941580][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 428.986644][ T980] usb 2-1: config 0 has no interfaces? [ 429.003368][ T980] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.017284][ T980] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.025745][ T980] usb 2-1: Manufacturer: syz [ 429.042239][ T980] usb 2-1: config 0 descriptor?? [ 429.157261][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 429.170071][T13385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3027'. [ 429.184029][T13385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3027'. [ 429.201443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.396450][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3019'. [ 429.420454][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0042/input/input58 [ 429.439801][ T980] usb 2-1: USB disconnect, device number 41 [ 429.561292][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0042/input/input59 [ 429.605191][ T5918] uclogic 0003:28BD:0071.0042: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 429.710332][ T5918] usb 1-1: USB disconnect, device number 44 [ 429.829393][T13394] fido_id[13394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 430.085330][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.194152][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3034'. [ 430.231407][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.302456][T13405] syzkaller1: entered promiscuous mode [ 430.308191][T13405] syzkaller1: entered allmulticast mode [ 431.271611][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.281587][ T43] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 431.461392][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 431.468913][ T43] usb 3-1: config 0 has no interfaces? [ 431.521967][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.531182][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.586000][ T43] usb 3-1: Manufacturer: syz [ 431.618772][ T43] usb 3-1: config 0 descriptor?? [ 431.792916][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 431.941070][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3044'. [ 431.973264][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 431.979028][ T43] usb 3-1: USB disconnect, device number 48 [ 432.000280][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 432.022018][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.039576][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.056670][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.069362][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.098297][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.108939][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.294684][T13461] pim6reg1: entered promiscuous mode [ 432.300203][T13461] pim6reg1: entered allmulticast mode [ 432.312261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.345444][ T10] usb 1-1: usb_control_msg returned -32 [ 432.352497][ T10] usbtmc 1-1:16.0: can't read capabilities [ 433.351546][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.699647][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 433.738535][T13498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3072'. [ 434.391572][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.634306][ T10] usb 1-1: USB disconnect, device number 45 [ 434.641943][ T43] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 434.831408][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 434.843559][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.863990][ T43] usb 3-1: config 0 has no interfaces? [ 434.874205][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 434.903872][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.933159][ T43] usb 3-1: config 0 descriptor?? [ 435.199183][ T5918] usb 3-1: USB disconnect, device number 49 [ 435.331572][ T5958] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 435.431414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.483690][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 435.494035][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.515558][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.545495][ T5958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 435.567874][ T5958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 435.589949][ T5958] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 435.609614][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.640377][ T5958] hub 4-1:1.0: bad descriptor, ignoring hub [ 435.654379][T13554] loop6: detected capacity change from 0 to 1 [ 435.672566][ T5958] hub 4-1:1.0: probe with driver hub failed with error -5 [ 435.677906][T13554] Dev loop6: unable to read RDB block 1 [ 435.697070][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 435.701701][T13554] loop6: unable to read partition table [ 435.717135][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 435.732687][T13554] loop6: partition table beyond EOD, truncated [ 435.744547][ T5958] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 435.763061][ T5958] cdc_wdm 4-1:1.0: Unknown control protocol [ 435.771934][T13554] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 436.354122][T13569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.471414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.697718][T13540] cdc_wdm 4-1:1.0: Error autopm - -16 [ 436.697944][ T5958] usb 4-1: USB disconnect, device number 49 [ 436.891467][ T5958] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 437.077313][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.164040][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.207845][ T5958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 437.220202][ T5958] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 437.229927][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.263327][T13561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.310769][ T5958] hub 4-1:1.0: bad descriptor, ignoring hub [ 437.343839][ T5958] hub 4-1:1.0: probe with driver hub failed with error -5 [ 437.367382][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 437.401929][ T5958] cdc_wdm 4-1:1.0: skipping garbage [ 437.430271][ T5958] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 437.445138][ T5958] cdc_wdm 4-1:1.0: Unknown control protocol [ 437.511511][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.514818][ T5958] usb 4-1: USB disconnect, device number 50 [ 437.565252][T13599] syzkaller1: entered promiscuous mode [ 437.576962][T13599] syzkaller1: entered allmulticast mode [ 437.952609][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 438.131884][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 438.155471][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 438.191370][ T10] usb 1-1: config 0 has no interface number 0 [ 438.197583][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.244111][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 438.294745][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.313500][ T10] usb 1-1: Product: syz [ 438.318297][T13616] netlink: 'syz.4.3124': attribute type 10 has an invalid length. [ 438.338371][ T10] usb 1-1: Manufacturer: syz [ 438.348327][ T10] usb 1-1: SerialNumber: syz [ 438.371765][T13616] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 438.387553][ T10] usb 1-1: config 0 descriptor?? [ 438.438811][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 438.491401][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 438.551532][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.843501][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 439.441801][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 439.459012][ T10] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 439.472135][ T10] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 439.495875][ T10] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 439.581447][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.591498][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.610043][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 439.631967][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 439.646154][ T5958] em28xx 1-1:0.132: Registering V4L2 extension [ 439.654532][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.672728][ T10] usb 1-1: USB disconnect, device number 46 [ 439.680175][ T9] usb 3-1: config 0 has no interface number 0 [ 439.700665][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 439.710946][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 439.713025][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3141'. [ 439.730886][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.757238][T13657] hsr_slave_0: left promiscuous mode [ 439.760149][ T9] usb 3-1: Product: syz [ 439.787862][T13657] hsr_slave_1: left promiscuous mode [ 439.796774][ T9] usb 3-1: Manufacturer: syz [ 439.802019][ T9] usb 3-1: SerialNumber: syz [ 439.826767][ T9] usb 3-1: config 0 descriptor?? [ 439.858328][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 440.056544][ T5958] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 440.090438][ T5958] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 440.115654][ T5958] em28xx 1-1:0.132: No AC97 audio processor [ 440.134195][ T5958] usb 1-1: Decoder not found [ 440.140031][ T5958] em28xx 1-1:0.132: failed to create media graph [ 440.150648][ T5958] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 440.176647][ T5958] em28xx 1-1:0.132: Remote control support is not available for this card. [ 440.202450][ T10] em28xx 1-1:0.132: Closing input extension [ 440.226607][ T10] em28xx 1-1:0.132: Freeing device [ 440.631497][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.109834][ T9] gspca_spca1528: reg_w err -71 [ 441.117451][ T9] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 441.238161][ T9] usb 3-1: USB disconnect, device number 50 [ 441.531477][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 441.671528][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.696461][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 441.714222][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 441.771485][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 441.805770][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.836935][ T10] usb 5-1: config 0 descriptor?? [ 441.851754][T13694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.878523][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 442.512035][ T10] apple 0003:05AC:0264.0043: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.4-1/input0 [ 442.676279][ T10] usb 5-1: USB disconnect, device number 60 [ 442.711585][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.910187][T13718] fido_id[13718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 443.269261][T13732] input: syz0 as /devices/virtual/input/input60 [ 443.751402][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.300814][T13769] syzkaller1: entered promiscuous mode [ 444.302787][T13764] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 444.318283][T13769] syzkaller1: entered allmulticast mode [ 444.342451][T13764] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.350112][T13764] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.388175][T13764] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.397812][T13764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.405801][T13764] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.413299][T13764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.437872][T13764] bridge0: entered promiscuous mode [ 444.445613][T13764] bridge0: entered allmulticast mode [ 444.454747][T13764] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 444.711970][ T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 444.776244][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 444.791543][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.883309][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 444.900813][ T9] usb 4-1: config 0 has no interface number 0 [ 444.915452][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 444.941937][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.964216][ T9] usb 4-1: Product: syz [ 444.968503][ T9] usb 4-1: Manufacturer: syz [ 444.975796][ T9] usb 4-1: SerialNumber: syz [ 444.990324][ T9] usb 4-1: config 0 descriptor?? [ 445.004490][ T5918] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 445.182180][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 445.206500][ T5918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.228170][ T5918] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 445.249434][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.259177][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.268214][ T5918] usb 1-1: Product: syz [ 445.273046][ T5918] usb 1-1: Manufacturer: syz [ 445.278044][ T5918] usb 1-1: SerialNumber: syz [ 445.515533][T13783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.831456][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.853716][ T9] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 445.875178][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 445.889920][ T9] usb 4-1: Please update to version 0.2 or newer [ 445.998665][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.005512][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.132489][T13783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 446.176987][ T9] usb 4-1: USB disconnect, device number 51 [ 446.378924][ T5918] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 446.388402][ T5918] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 446.396867][ T5918] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 446.561016][ T5918] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 446.601550][ T980] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 446.618073][ T5918] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 446.661514][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 446.696514][ T5918] usb 1-1: USB disconnect, device number 47 [ 446.719005][ T5918] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 446.793766][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 446.813770][ T980] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 446.837146][ T980] usb 3-1: config 0 has no interface number 0 [ 446.854501][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.871434][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.884642][ T980] usb 3-1: config 0 interface 184 has no altsetting 0 [ 446.903989][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.924802][ T980] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.937579][ T43] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 446.947613][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.956060][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.971484][ T980] usb 3-1: Product: syz [ 446.975842][ T980] usb 3-1: Manufacturer: syz [ 446.980609][ T980] usb 3-1: SerialNumber: syz [ 447.002640][ T43] usb 2-1: config 0 descriptor?? [ 447.030970][ T980] usb 3-1: config 0 descriptor?? [ 447.053547][ T980] smsc75xx v1.0.0 [ 447.883349][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 447.911447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.954351][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 448.066269][ T43] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0044/input/input61 [ 448.137741][ T43] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0044/input/input62 [ 448.210710][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 448.243860][ T43] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0044/input/input63 [ 448.273748][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 448.304497][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 448.384592][ T43] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0044/input/input64 [ 448.397813][ T980] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 448.622314][ T980] usb 3-1: USB disconnect, device number 51 [ 448.651366][ T43] uclogic 0003:256C:006D.0044: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 448.750415][T13877] netlink: 'syz.3.3222': attribute type 10 has an invalid length. [ 448.861809][ T43] usb 2-1: USB disconnect, device number 42 [ 448.892868][T13877] bridge0: entered promiscuous mode [ 448.914653][T13877] bridge0: entered allmulticast mode [ 448.950591][T13877] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 448.961421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.976200][T13878] fido_id[13878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 449.001991][T13851] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 449.008802][T13851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.130998][T13851] vhci_hcd vhci_hcd.0: Device attached [ 449.131480][T13881] vhci_hcd: connection closed [ 449.156214][ T1003] vhci_hcd: stop threads [ 449.201486][ T1003] vhci_hcd: release socket [ 449.206078][ T1003] vhci_hcd: disconnect device [ 449.351499][ T5868] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 449.549519][ T5868] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 449.579705][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.594952][ T5868] usb 3-1: config 0 descriptor?? [ 449.651575][ T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 449.826861][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 449.866969][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 449.923246][ T43] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 449.937593][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.971494][ T43] usb 2-1: Product: syz [ 449.975723][ T43] usb 2-1: Manufacturer: syz [ 449.980352][ T43] usb 2-1: SerialNumber: syz [ 449.991402][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.057583][ T43] usb 2-1: config 0 descriptor?? [ 450.072162][T13886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 450.079515][T13886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 450.356900][T13886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 450.386292][T13886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 450.828324][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 450.880679][ T5868] usb 3-1: Cannot set autoneg [ 450.888270][ T5868] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 450.925017][ T5868] usb 3-1: USB disconnect, device number 52 [ 451.031427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.039595][ T43] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 451.098684][ T43] usb 2-1: USB disconnect, device number 43 [ 451.870194][T13932] loop2: detected capacity change from 0 to 7 [ 451.932039][T13932] Dev loop2: unable to read RDB block 7 [ 451.955228][T13932] loop2: AHDI p2 p3 [ 451.996552][T13932] loop2: partition table partially beyond EOD, truncated [ 452.071516][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.084298][T13932] loop2: p3 start 335544320 is beyond EOD, truncated [ 452.507133][T13946] dummy0: entered promiscuous mode [ 452.534808][T13946] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 452.574966][T13946] hsr2: entered allmulticast mode [ 452.594078][T13946] dummy0: entered allmulticast mode [ 452.600102][T13946] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 453.111533][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.553765][T13982] binder: 13980:13982 ioctl c0306201 80000240 returned -14 [ 453.765426][T13987] netlink: 'syz.1.3260': attribute type 10 has an invalid length. [ 453.798500][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.805938][T13987] bridge0: port 2(bridge_slave_1) entered listening state [ 453.813531][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.821066][T13987] bridge0: port 1(bridge_slave_0) entered listening state [ 453.902365][T13987] bridge0: entered allmulticast mode [ 453.923866][T13987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 454.120646][T13999] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.3265'. [ 454.151394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.071573][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 455.191639][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.223095][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 455.238605][ T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.266137][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.281016][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 455.300561][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 455.337998][ T980] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 455.358862][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.403720][ T980] hub 1-1:1.0: bad descriptor, ignoring hub [ 455.420176][ T980] hub 1-1:1.0: probe with driver hub failed with error -5 [ 455.448147][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 455.463042][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 455.485428][ T980] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 455.510152][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.547053][ T980] cdc_wdm 1-1:1.0: Unknown control protocol [ 455.556603][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.581572][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.602522][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.610155][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.632307][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.645460][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 455.655582][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.675842][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.695564][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.706996][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 455.730112][ T5918] hid-generic 00A0:0006:0003.0045: unknown main item tag 0x0 [ 455.761439][ T43] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 455.814907][ T5918] hid-generic 00A0:0006:0003.0045: hidraw0: HID v0.05 Device [syz1] on syz0 [ 455.924371][ T43] usb 4-1: config 0 has no interfaces? [ 455.932108][ T43] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 455.976830][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.015372][T14051] input: syz0 as /devices/virtual/input/input65 [ 456.032636][ T43] usb 4-1: config 0 descriptor?? [ 456.086059][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 456.128650][T14025] cdc_wdm 1-1:1.0: Error autopm - -16 [ 456.134689][ T9] usb 1-1: USB disconnect, device number 48 [ 456.231895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.251438][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 456.255435][ T43] usb 4-1: USB disconnect, device number 52 [ 456.268827][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.294033][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 456.326142][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.362025][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 456.385634][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.420406][ T10] usb 3-1: config 0 descriptor?? [ 456.495477][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.506679][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 456.517321][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 456.529691][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 456.540231][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.577168][T14046] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 456.590241][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 456.608787][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 456.618094][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 456.623955][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 456.639083][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 456.646944][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 456.652015][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 456.823804][ T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 456.842928][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.862257][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.888779][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.908637][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.920155][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.931952][ T9] usb 1-1: USB disconnect, device number 49 [ 456.945599][ T24] usb 2-1: config 0 descriptor?? [ 457.031646][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 457.044812][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 457.050759][ T10] ft260 0003:0403:6030.0046: chip code: 6424 8183 [ 457.064600][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 457.079928][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.092094][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.131537][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.141856][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.206521][T14067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.257235][ T10] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 457.271554][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.372313][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 457.383957][ T43] usbtmc 5-1:16.0: can't read capabilities [ 457.453604][ T24] plantronics 0003:047F:FFFF.0047: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 457.586561][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 457.643387][ T9] usb 5-1: USB disconnect, device number 61 [ 457.666622][ T10] ft260 0003:0403:6030.0046: failed to retrieve status: -71 [ 457.684860][ T24] usb 2-1: USB disconnect, device number 44 [ 457.708669][ T10] ft260 0003:0403:6030.0046: failed to reset I2C controller: -71 [ 457.792720][ T10] usb 3-1: USB disconnect, device number 53 [ 458.147366][T14090] netlink: 752 bytes leftover after parsing attributes in process `syz.3.3306'. [ 458.311477][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.414189][T14103] input: syz1 as /devices/virtual/input/input66 [ 458.471894][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 458.681375][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 458.707711][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.730647][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.781500][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.831728][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.906196][ T10] usb 4-1: config 0 descriptor?? [ 458.930080][ T10] hub 4-1:0.0: USB hub found [ 459.137950][ T10] hub 4-1:0.0: 1 port detected [ 459.351631][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.521473][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 459.728945][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.749738][ T10] hub 4-1:0.0: activate --> -90 [ 459.770527][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 459.819052][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.861284][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.922578][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.950214][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.985469][ T24] usb 3-1: config 0 descriptor?? [ 460.007452][T14125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 460.179051][ T10] usb 4-1-port1: config error [ 460.199108][ T9] usb 4-1: USB disconnect, device number 53 [ 460.391486][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.517942][ T24] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 461.431500][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.905321][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 461.966205][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 462.471471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.644853][ T9] usb 3-1: USB disconnect, device number 54 [ 463.511392][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.631475][ T24] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 463.875785][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.924388][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 463.974585][ T24] usb 5-1: can't read configurations, error -71 [ 464.551482][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.591498][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.469563][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 466.513029][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 466.631572][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.795917][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 467.671476][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.220279][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 468.220302][ T30] audit: type=1326 audit(1755881476.604:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14332 comm="syz.4.3405" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 468.345179][ T30] audit: type=1326 audit(1755881476.624:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.0.3404" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66539 code=0x0 [ 468.711606][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.208726][T14358] syzkaller1: entered promiscuous mode [ 469.214603][T14358] syzkaller1: entered allmulticast mode [ 469.751383][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.051597][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 470.213715][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.243989][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.253926][T14398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 470.266984][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.295378][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.314645][T14382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.331170][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.431832][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 470.556644][ T24] usb 3-1: USB disconnect, device number 55 [ 470.601388][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 470.650787][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.686025][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.732590][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.787850][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.801509][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.823837][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.864302][ T9] usb 2-1: config 0 descriptor?? [ 471.295194][ T9] microsoft 0003:045E:07DA.0049: ignoring exceeding usage max [ 471.319552][ T9] microsoft 0003:045E:07DA.0049: unsupported Resolution Multiplier 0 [ 471.373079][ T5958] hid_parser_main: 6 callbacks suppressed [ 471.373108][ T5958] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 471.459137][ T5958] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.487443][ T9] microsoft 0003:045E:07DA.0049: unsupported Resolution Multiplier 0 [ 471.518598][ T9] microsoft 0003:045E:07DA.0049: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 471.544313][ T9] microsoft 0003:045E:07DA.0049: no inputs found [ 471.557747][ T9] microsoft 0003:045E:07DA.0049: could not initialize ff, continuing anyway [ 471.698159][ T43] usb 2-1: USB disconnect, device number 45 [ 471.831547][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.945440][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 472.871797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.091478][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 473.251893][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 473.277093][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 473.291406][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.319401][ T43] usb 4-1: Product: syz [ 473.329729][ T43] usb 4-1: Manufacturer: syz [ 473.341042][ T43] usb 4-1: SerialNumber: syz [ 473.360412][ T43] usb 4-1: config 0 descriptor?? [ 473.374523][ T43] gspca_main: sq930x-2.14.0 probing 2770:930c [ 473.507518][T14483] sctp: [Deprecated]: syz.2.3467 (pid 14483) Use of int in max_burst socket option. [ 473.507518][T14483] Use struct sctp_assoc_value instead [ 473.911505][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.941410][ T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 474.119021][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.152900][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 474.174936][ T9] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.189925][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 474.209270][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 474.231603][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.239682][ T9] usb 2-1: Product: syz [ 474.275585][ T9] usb 2-1: Manufacturer: syz [ 474.280280][ T9] usb 2-1: SerialNumber: syz [ 474.317783][T14489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 474.566786][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 474.582798][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 474.630997][ T9] usb 2-1: USB disconnect, device number 46 [ 474.641594][ T43] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 474.871472][ T43] gspca_sq930x: Sensor ov9630 not yet treated [ 474.880161][ T43] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 474.903322][ T43] usb 4-1: USB disconnect, device number 54 [ 474.951529][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.361491][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 475.526256][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 475.545252][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.575046][ T9] usb 1-1: Product: syz [ 475.579296][ T9] usb 1-1: Manufacturer: syz [ 475.594082][ T9] usb 1-1: SerialNumber: syz [ 475.652215][ T9] usb 1-1: config 0 descriptor?? [ 475.992078][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.109162][ T9] airspy 1-1:0.0: Board ID: 00 [ 476.120250][ T9] airspy 1-1:0.0: Firmware version: [ 476.371543][ T5868] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 476.473291][T14550] batadv_slave_1: entered promiscuous mode [ 476.490455][T14549] batadv_slave_1: left promiscuous mode [ 476.522780][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 476.543456][ T5868] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 476.558707][ T5868] usb 4-1: config 0 has no interface number 0 [ 476.578676][ T5868] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 476.597687][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.628138][ T5868] usb 4-1: Product: syz [ 476.636764][ T5868] usb 4-1: Manufacturer: syz [ 476.643016][ T5868] usb 4-1: SerialNumber: syz [ 476.656737][ T5868] usb 4-1: config 0 descriptor?? [ 476.675612][ T5868] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 476.880140][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 476.914944][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 476.930231][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 476.958654][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 476.971894][ T9] airspy 1-1:0.0: Registered as swradio24 [ 476.984328][ T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 477.001582][T14560] netlink: 'syz.4.3501': attribute type 18 has an invalid length. [ 477.029107][ T9] usb 1-1: USB disconnect, device number 50 [ 477.041494][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.130658][T14562] vivid-000: disconnect [ 477.212774][T14560] vxlan1: entered promiscuous mode [ 477.261504][ T5958] vivid-000: reconnect [ 477.296382][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 477.307300][ T9] usb 4-1: USB disconnect, device number 55 [ 477.318261][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.349619][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.362850][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 477.388844][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.418347][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.430633][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 477.480587][ T9] quatech2 4-1:0.51: device disconnected [ 477.737283][T14560] syz.4.3501 (14560) used greatest stack depth: 17960 bytes left [ 478.071389][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.621348][ T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 478.722715][T14618] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3523'. [ 478.823433][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.845954][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 478.886157][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.912544][ T43] usb 2-1: config 0 descriptor?? [ 479.111519][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.424912][ T43] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor [ 479.489942][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004B/input/input68 [ 479.682488][ T43] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 479.710011][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3536'. [ 479.787509][T14650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.817375][ T5918] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 479.903099][T14650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.998235][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.029381][ T5918] usb 5-1: config 0 has no interfaces? [ 480.046309][ T5918] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 480.056579][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.065905][ T5918] usb 5-1: Product: syz [ 480.070346][ T5918] usb 5-1: Manufacturer: syz [ 480.076708][ T5918] usb 5-1: SerialNumber: syz [ 480.088189][ T5918] usb 5-1: config 0 descriptor?? [ 480.151564][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.182554][ T5868] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 480.221666][T14658] loop6: detected capacity change from 0 to 1 [ 480.231646][T14658] Dev loop6: unable to read RDB block 1 [ 480.237462][T14658] loop6: AHDI p1 p3 [ 480.260187][T14658] loop6: partition table partially beyond EOD, truncated [ 480.283879][T14658] loop6: p3 start 663044492 is beyond EOD, truncated [ 480.336103][ T5868] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 480.353410][ T5918] usb 5-1: USB disconnect, device number 64 [ 480.361602][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.396784][ T5868] usb 4-1: Product: syz [ 480.420250][ T5868] usb 4-1: Manufacturer: syz [ 480.448125][ T5868] usb 4-1: SerialNumber: syz [ 480.467986][ T5868] usb 4-1: config 0 descriptor?? [ 480.487614][ T5868] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 480.858799][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 480.878978][T14670] netlink: 'syz.0.3543': attribute type 5 has an invalid length. [ 480.912734][T14670] vxlan0: entered promiscuous mode [ 480.925325][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.946906][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.958922][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.975389][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.191470][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.492421][ T5958] usb 2-1: USB disconnect, device number 47 [ 481.755223][ T5868] usb 4-1: USB disconnect, device number 56 [ 481.777921][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 481.961510][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 481.971093][ T9] usb 5-1: config 0 has no interfaces? [ 481.984789][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 482.012280][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.026044][ T9] usb 5-1: Product: syz [ 482.030300][ T9] usb 5-1: Manufacturer: syz [ 482.046524][ T9] usb 5-1: SerialNumber: syz [ 482.055851][ T9] usb 5-1: config 0 descriptor?? [ 482.231564][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.309740][ T5958] usb 5-1: USB disconnect, device number 65 [ 482.729841][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3567'. [ 483.271500][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.822075][ T5918] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 483.981445][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 483.994155][ T5918] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 484.024784][ T5918] usb 3-1: config 0 has no interface number 0 [ 484.043032][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 484.082891][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.116410][ T5918] usb 3-1: Product: syz [ 484.120740][ T5918] usb 3-1: Manufacturer: syz [ 484.157920][ T5918] usb 3-1: SerialNumber: syz [ 484.189838][ T5918] usb 3-1: config 0 descriptor?? [ 484.216530][ T5918] smsc95xx v2.0.0 [ 484.227576][T14778] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3587'. [ 484.283009][T14781] netlink: 'syz.0.3588': attribute type 11 has an invalid length. [ 484.311413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.394208][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 484.403512][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 484.559039][T14788] input: syz1 as /devices/virtual/input/input69 [ 484.639739][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 484.680188][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.711452][ T5958] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 484.865318][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 484.879272][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.908759][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.913086][T14797] loop9: detected capacity change from 0 to 7 [ 484.931542][ T5958] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 484.944248][T14797] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 484.954132][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.970575][T14797] loop9: partition table partially beyond EOD, truncated [ 484.986137][ T5958] usb 4-1: config 0 descriptor?? [ 484.989614][T14797] loop9: p1 size 501170297 extends beyond EOD, truncated [ 485.174701][ T5971] udevd[5971]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 485.316194][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 485.351418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.362897][ T5918] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 485.367949][ T30] audit: type=1800 audit(1755881493.754:1531): pid=14803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3597" name="file1" dev="tmpfs" ino=3256 res=0 errno=0 [ 485.393831][ T5918] usb 3-1: USB disconnect, device number 56 [ 485.486048][ T5958] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.004C/input/input70 [ 485.621811][ T5958] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.004C/input/input71 [ 485.715617][ T5958] kye 0003:0458:5012.004C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 485.811811][ T5958] usb 4-1: USB disconnect, device number 57 [ 486.043982][ T9] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 486.075100][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 486.114194][T14808] fido_id[14808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 486.236179][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.251480][ T9] usb 2-1: config 0 has no interface number 0 [ 486.306662][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 486.363820][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 486.391679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.396356][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 486.461416][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.505113][ T9] usb 2-1: config 0 descriptor?? [ 486.532273][T14807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.562150][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 486.741463][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 486.817087][ T9] usb 2-1: USB disconnect, device number 48 [ 486.817191][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 486.951393][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 486.994344][ T43] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 487.031322][ T43] usb 3-1: config 0 has no interface number 0 [ 487.046558][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 487.081281][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.089906][ T43] usb 3-1: Product: syz [ 487.150478][ T43] usb 3-1: Manufacturer: syz [ 487.155339][ T43] usb 3-1: SerialNumber: syz [ 487.175601][ T43] usb 3-1: config 0 descriptor?? [ 487.196226][ T43] smsc95xx v2.0.0 [ 487.431835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.647947][T14840] netlink: 'syz.0.3614': attribute type 4 has an invalid length. [ 487.906043][T14851] input: syz1 as /devices/virtual/input/input72 [ 488.230673][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 488.255288][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 488.269866][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 488.289719][ T43] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 488.322041][T14861] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 488.340354][ T43] usb 3-1: USB disconnect, device number 57 [ 488.362754][T14861] netlink: 'syz.4.3623': attribute type 2 has an invalid length. [ 488.429824][T14861] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 488.459163][T14861] netlink: 'syz.4.3623': attribute type 2 has an invalid length. [ 488.471578][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.511397][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.614923][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3634'. [ 489.681529][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 489.747225][T14891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.866497][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.915182][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 489.929408][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.961373][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.999352][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.044635][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.076756][ T9] usb 4-1: config 0 descriptor?? [ 490.105169][T14895] "syz.0.3636" (14895) uses obsolete ecb(arc4) skcipher [ 490.112722][T14887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.551436][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.571949][ T9] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 490.823447][ T43] usb 4-1: USB disconnect, device number 58 [ 490.832264][T14920] mmap: syz.1.3643 (14920): VmData 37765120 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 490.959921][T14921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.405475][T14929] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3648'. [ 491.591442][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.864954][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 491.982763][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 492.157744][ T43] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 492.223475][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.251345][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.291312][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.298793][ T1343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.333746][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.368055][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.412310][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.425470][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.460807][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.502624][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.522804][ T1343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.541527][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 492.541746][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.578250][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.610089][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.619094][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.631400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.657687][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.684178][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.693888][ T1343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.711716][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 492.715077][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.720054][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.741683][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.762951][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.766357][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.792741][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.814726][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.829946][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.845196][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.865085][ T9] usb 4-1: Product: syz [ 492.869416][ T9] usb 4-1: Manufacturer: syz [ 492.881257][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.885771][ T9] usb 4-1: SerialNumber: syz [ 492.912076][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.931290][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.944711][ T1343] bond0: (slave netdevsim0): Releasing backup interface [ 492.952910][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.978284][ T1343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.983464][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 493.008431][ T43] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 493.029852][ T43] usb 3-1: Product: syz [ 493.069904][ T43] usb 3-1: Manufacturer: syz [ 493.076730][ T43] usb 3-1: SerialNumber: syz [ 493.131433][ T43] usb 3-1: config 0 descriptor?? [ 493.141647][ T9] usb 4-1: 0:2 : does not exist [ 493.177094][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 493.182235][ T43] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 493.301701][ T9] usb 4-1: USB disconnect, device number 59 [ 493.459055][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.578679][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 493.604436][ T5918] usb 3-1: USB disconnect, device number 58 [ 493.621789][T14951] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 493.658964][ T5918] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 493.671423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.715472][ T1343] bridge_slave_1: left allmulticast mode [ 493.746863][ T1343] bridge_slave_1: left promiscuous mode [ 493.776888][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.852771][ T1343] bridge_slave_0: left allmulticast mode [ 493.858638][ T1343] bridge_slave_0: left promiscuous mode [ 493.891767][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.299114][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.313377][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.323576][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.334458][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.343160][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.376624][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.385101][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.395271][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.405082][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.438765][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.711416][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.428092][ T5918] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 495.611740][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 495.615802][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3673'. [ 495.631027][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.644867][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.660297][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 495.672800][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.682804][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.701671][ T5918] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.711280][ T5918] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.735487][ T5918] usb 1-1: Manufacturer: syz [ 495.750530][ T5918] usb 1-1: config 0 descriptor?? [ 495.756166][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.818950][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.830551][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.842047][ T1343] bond0 (unregistering): Released all slaves [ 495.859010][T14960] all: renamed from bridge_slave_0 (while UP) [ 495.888802][T14998] netlink: 'syz.2.3674': attribute type 13 has an invalid length. [ 496.211440][ T5918] rc_core: IR keymap rc-hauppauge not found [ 496.217741][ T5918] Registered IR keymap rc-empty [ 496.245665][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.283409][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.337825][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 496.370713][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input74 [ 496.428385][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.476432][ T5865] Bluetooth: hci3: command tx timeout [ 496.484768][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.521725][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.554294][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.581468][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.611488][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.633838][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.661481][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.698057][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.752555][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.791722][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.804153][ T5918] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 496.815327][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.872187][ T5918] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.895863][ T5918] usb 1-1: USB disconnect, device number 51 [ 497.221584][ T5868] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 497.404972][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 497.420703][ T5868] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 497.444284][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.501301][ T5868] usb 3-1: config 0 has no interface number 0 [ 497.533654][ T5868] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 497.551088][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.579595][ T5868] usb 3-1: Product: syz [ 497.595352][ T5868] usb 3-1: Manufacturer: syz [ 497.617585][ T5868] usb 3-1: SerialNumber: syz [ 497.640515][ T5868] usb 3-1: config 0 descriptor?? [ 497.661985][ T5868] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 497.688152][ T5868] usb 3-1: No valid video chain found. [ 497.831627][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.878848][ T5868] usb 3-1: USB disconnect, device number 59 [ 498.225112][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 498.405393][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.415939][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 498.431404][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.482563][ T24] usb 1-1: config 0 descriptor?? [ 498.550149][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 498.571271][ T5865] Bluetooth: hci3: command tx timeout [ 498.871551][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.954841][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 498.973492][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 498.988348][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 499.101882][ T5958] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 499.203892][ T1343] team0 (unregistering): Port device team_slave_1 removed [ 499.245126][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 499.264679][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 499.280115][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 499.320555][ T5958] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 499.334764][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 499.343684][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 499.347835][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.367291][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 499.378401][ T5958] usb 3-1: config 0 descriptor?? [ 499.407173][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 499.416523][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 499.424382][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 499.435625][ T5958] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 499.459223][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 499.468130][ T1343] team0 (unregistering): Port device team_slave_0 removed [ 499.471293][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 499.501766][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 499.533242][ T24] pwc: Registered as video103. [ 499.546949][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input75 [ 499.586088][ T24] usb 1-1: USB disconnect, device number 52 [ 499.634360][ T43] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 499.646780][ T5958] gp8psk: usb in 128 operation failed. [ 499.837535][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 499.872409][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.894976][ T5958] gp8psk: usb in 146 operation failed. [ 499.900821][ T5958] gp8psk: failed to get FW version [ 499.911456][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.920189][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.938544][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 499.947841][ T5958] gp8psk: usb in 149 operation failed. [ 499.959395][ T5958] gp8psk: failed to get FPGA version [ 499.972818][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 499.987868][ T43] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 500.024244][ T43] usb 2-1: Manufacturer: syz [ 500.035596][ T43] usb 2-1: config 0 descriptor?? [ 500.170314][ T5958] gp8psk: usb out operation failed. [ 500.177133][ T5958] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 500.195365][ T5958] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 500.249695][ T5958] usb 3-1: USB disconnect, device number 60 [ 500.332243][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 500.495260][ T43] appleir 0003:05AC:8243.004E: unknown main item tag 0x0 [ 500.510432][ T43] appleir 0003:05AC:8243.004E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 500.524102][ T24] usb 4-1: config 0 has no interfaces? [ 500.529929][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 500.556925][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.570711][ T24] usb 4-1: config 0 descriptor?? [ 500.601476][ T5868] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 500.635686][ T5865] Bluetooth: hci3: command tx timeout [ 500.757513][ T5868] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.788217][ T5868] usb 1-1: config 0 has no interface number 0 [ 500.804740][ T5868] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 500.818525][T15064] [ 500.820912][T15064] ===================================================== [ 500.828179][T15064] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 500.835763][T15064] syzkaller #0 Not tainted [ 500.840388][T15064] ----------------------------------------------------- [ 500.847520][T15064] syz.3.3695/15064 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 500.855669][T15064] ffff88805b70c360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 500.865071][T15064] [ 500.865071][T15064] and this task is already holding: [ 500.872645][T15064] ffff888030007028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 500.882976][T15064] which would create a new lock dependency: [ 500.888934][T15064] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 500.897263][T15064] [ 500.897263][T15064] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 500.906773][T15064] (&client->buffer_lock){..-.}-{3:3} [ 500.906809][T15064] [ 500.906809][T15064] ... which became SOFTIRQ-irq-safe at: [ 500.919979][T15064] lock_acquire+0x120/0x360 [ 500.924742][T15064] _raw_spin_lock+0x2e/0x40 [ 500.929384][T15064] evdev_pass_values+0xb9/0xbd0 [ 500.934443][T15064] evdev_events+0x1e6/0x340 [ 500.939498][T15064] input_pass_values+0x285/0x890 [ 500.944678][T15064] input_event_dispose+0x3e5/0x6b0 [ 500.950515][T15064] input_event+0x89/0xe0 [ 500.954862][T15064] hidinput_hid_event+0x132c/0x1c90 [ 500.960165][T15064] hid_process_event+0x4be/0x620 [ 500.965199][T15064] hid_report_raw_event+0xe91/0x16d0 [ 500.970599][T15064] hid_input_report+0x43e/0x520 [ 500.975563][T15064] hid_irq_in+0x47e/0x6d0 [ 500.980000][T15064] __usb_hcd_giveback_urb+0x41a/0x690 [ 500.985496][T15064] dummy_timer+0x862/0x4550 [ 500.990112][T15064] __hrtimer_run_queues+0x52c/0xc60 [ 500.995488][T15064] hrtimer_run_softirq+0x187/0x2b0 [ 501.000699][T15064] handle_softirqs+0x283/0x870 [ 501.005645][T15064] __irq_exit_rcu+0xca/0x1f0 [ 501.010335][T15064] irq_exit_rcu+0x9/0x30 [ 501.014670][T15064] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 501.020493][T15064] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.026571][T15064] lock_acquire+0x175/0x360 [ 501.031201][T15064] batadv_nc_worker+0xef/0x610 [ 501.036081][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.041743][T15064] worker_thread+0x8a0/0xda0 [ 501.046427][T15064] kthread+0x70e/0x8a0 [ 501.050590][T15064] ret_from_fork+0x3f9/0x770 [ 501.055278][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.060143][T15064] [ 501.060143][T15064] to a SOFTIRQ-irq-unsafe lock: [ 501.067163][T15064] (tasklist_lock){.+.+}-{3:3} [ 501.067194][T15064] [ 501.067194][T15064] ... which became SOFTIRQ-irq-unsafe at: [ 501.080138][T15064] ... [ 501.080149][T15064] lock_acquire+0x120/0x360 [ 501.087568][T15064] _raw_read_lock+0x36/0x50 [ 501.092215][T15064] __do_wait+0xde/0x740 [ 501.096587][T15064] do_wait+0x1f8/0x520 [ 501.100849][T15064] kernel_wait+0xab/0x170 [ 501.105464][T15064] call_usermodehelper_exec_work+0xbe/0x230 [ 501.111498][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.117233][T15064] worker_thread+0x8a0/0xda0 [ 501.121931][T15064] kthread+0x70e/0x8a0 [ 501.126099][T15064] ret_from_fork+0x3f9/0x770 [ 501.130780][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.135653][T15064] [ 501.135653][T15064] other info that might help us debug this: [ 501.135653][T15064] [ 501.145900][T15064] Chain exists of: [ 501.145900][T15064] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 501.145900][T15064] [ 501.159421][T15064] Possible interrupt unsafe locking scenario: [ 501.159421][T15064] [ 501.167938][T15064] CPU0 CPU1 [ 501.173314][T15064] ---- ---- [ 501.178785][T15064] lock(tasklist_lock); [ 501.183062][T15064] local_irq_disable(); [ 501.189827][T15064] lock(&client->buffer_lock); [ 501.197292][T15064] lock(&new->fa_lock); [ 501.204099][T15064] [ 501.207595][T15064] lock(&client->buffer_lock); [ 501.212654][T15064] [ 501.212654][T15064] *** DEADLOCK *** [ 501.212654][T15064] [ 501.220804][T15064] 7 locks held by syz.3.3695/15064: [ 501.226098][T15064] #0: ffff88823bef6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 501.235365][T15064] #1: ffff88802076b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 501.245692][T15064] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 501.255469][T15064] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 501.265100][T15064] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 501.274361][T15064] #5: ffff888030007028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 501.284604][T15064] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 501.293719][T15064] [ 501.293719][T15064] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 501.304138][T15064] -> (&client->buffer_lock){..-.}-{3:3} { [ 501.309951][T15064] IN-SOFTIRQ-W at: [ 501.313943][T15064] lock_acquire+0x120/0x360 [ 501.320123][T15064] _raw_spin_lock+0x2e/0x40 [ 501.326289][T15064] evdev_pass_values+0xb9/0xbd0 [ 501.332822][T15064] evdev_events+0x1e6/0x340 [ 501.338995][T15064] input_pass_values+0x285/0x890 [ 501.345601][T15064] input_event_dispose+0x3e5/0x6b0 [ 501.352377][T15064] input_event+0x89/0xe0 [ 501.358282][T15064] hidinput_hid_event+0x132c/0x1c90 [ 501.365141][T15064] hid_process_event+0x4be/0x620 [ 501.371740][T15064] hid_report_raw_event+0xe91/0x16d0 [ 501.378693][T15064] hid_input_report+0x43e/0x520 [ 501.385226][T15064] hid_irq_in+0x47e/0x6d0 [ 501.391223][T15064] __usb_hcd_giveback_urb+0x41a/0x690 [ 501.398356][T15064] dummy_timer+0x862/0x4550 [ 501.404620][T15064] __hrtimer_run_queues+0x52c/0xc60 [ 501.411496][T15064] hrtimer_run_softirq+0x187/0x2b0 [ 501.418367][T15064] handle_softirqs+0x283/0x870 [ 501.424905][T15064] __irq_exit_rcu+0xca/0x1f0 [ 501.431296][T15064] irq_exit_rcu+0x9/0x30 [ 501.437309][T15064] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 501.444609][T15064] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.452256][T15064] lock_acquire+0x175/0x360 [ 501.458429][T15064] batadv_nc_worker+0xef/0x610 [ 501.464983][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.472188][T15064] worker_thread+0x8a0/0xda0 [ 501.478442][T15064] kthread+0x70e/0x8a0 [ 501.484261][T15064] ret_from_fork+0x3f9/0x770 [ 501.490552][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.496982][T15064] INITIAL USE at: [ 501.500903][T15064] lock_acquire+0x120/0x360 [ 501.507009][T15064] _raw_spin_lock+0x2e/0x40 [ 501.513091][T15064] evdev_pass_values+0xb9/0xbd0 [ 501.519613][T15064] evdev_events+0x1e6/0x340 [ 501.525917][T15064] input_pass_values+0x285/0x890 [ 501.532712][T15064] input_event_dispose+0x330/0x6b0 [ 501.539401][T15064] input_inject_event+0x1dd/0x340 [ 501.546116][T15064] evdev_write+0x2fc/0x480 [ 501.552219][T15064] vfs_write+0x27b/0xb30 [ 501.558046][T15064] ksys_write+0x145/0x250 [ 501.564123][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 501.570905][T15064] do_fast_syscall_32+0x34/0x80 [ 501.577346][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.585337][T15064] } [ 501.587841][T15064] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 501.596193][T15064] [ 501.596193][T15064] the dependencies between the lock to be acquired [ 501.596205][T15064] and SOFTIRQ-irq-unsafe lock: [ 501.609926][T15064] -> (tasklist_lock){.+.+}-{3:3} { [ 501.615245][T15064] HARDIRQ-ON-R at: [ 501.619422][T15064] lock_acquire+0x120/0x360 [ 501.625953][T15064] _raw_read_lock+0x36/0x50 [ 501.632471][T15064] __do_wait+0xde/0x740 [ 501.638645][T15064] do_wait+0x1f8/0x520 [ 501.644725][T15064] kernel_wait+0xab/0x170 [ 501.651066][T15064] call_usermodehelper_exec_work+0xbe/0x230 [ 501.659019][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.666580][T15064] worker_thread+0x8a0/0xda0 [ 501.673494][T15064] kthread+0x70e/0x8a0 [ 501.679666][T15064] ret_from_fork+0x3f9/0x770 [ 501.686266][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.693062][T15064] SOFTIRQ-ON-R at: [ 501.697235][T15064] lock_acquire+0x120/0x360 [ 501.703752][T15064] _raw_read_lock+0x36/0x50 [ 501.710271][T15064] __do_wait+0xde/0x740 [ 501.716615][T15064] do_wait+0x1f8/0x520 [ 501.722780][T15064] kernel_wait+0xab/0x170 [ 501.729129][T15064] call_usermodehelper_exec_work+0xbe/0x230 [ 501.737043][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.744687][T15064] worker_thread+0x8a0/0xda0 [ 501.751288][T15064] kthread+0x70e/0x8a0 [ 501.757638][T15064] ret_from_fork+0x3f9/0x770 [ 501.764326][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.771199][T15064] INITIAL USE at: [ 501.775278][T15064] lock_acquire+0x120/0x360 [ 501.781822][T15064] _raw_write_lock_irq+0xa2/0xf0 [ 501.788777][T15064] copy_process+0x224f/0x3c00 [ 501.795465][T15064] kernel_clone+0x21e/0x840 [ 501.802079][T15064] user_mode_thread+0xdd/0x140 [ 501.808788][T15064] rest_init+0x23/0x300 [ 501.815135][T15064] start_kernel+0x3a9/0x410 [ 501.821675][T15064] x86_64_start_reservations+0x24/0x30 [ 501.829332][T15064] x86_64_start_kernel+0x143/0x1c0 [ 501.836376][T15064] common_startup_64+0x13e/0x147 [ 501.843243][T15064] INITIAL READ USE at: [ 501.847931][T15064] lock_acquire+0x120/0x360 [ 501.855304][T15064] _raw_read_lock+0x36/0x50 [ 501.863191][T15064] __do_wait+0xde/0x740 [ 501.869826][T15064] do_wait+0x1f8/0x520 [ 501.876741][T15064] kernel_wait+0xab/0x170 [ 501.883731][T15064] call_usermodehelper_exec_work+0xbe/0x230 [ 501.892098][T15064] process_scheduled_works+0xae1/0x17b0 [ 501.900098][T15064] worker_thread+0x8a0/0xda0 [ 501.907072][T15064] kthread+0x70e/0x8a0 [ 501.913550][T15064] ret_from_fork+0x3f9/0x770 [ 501.920677][T15064] ret_from_fork_asm+0x1a/0x30 [ 501.928199][T15064] } [ 501.930916][T15064] ... key at: [] tasklist_lock+0x18/0x40 [ 501.940094][T15064] ... acquired at: [ 501.944176][T15064] lock_acquire+0x120/0x360 [ 501.948903][T15064] _raw_read_lock+0x36/0x50 [ 501.953598][T15064] send_sigurg+0x12b/0x420 [ 501.958502][T15064] sk_send_sigurg+0x6c/0x2e0 [ 501.963279][T15064] tcp_check_urg+0x200/0x760 [ 501.968182][T15064] tcp_urg+0x164/0x3f0 [ 501.972443][T15064] tcp_rcv_established+0xf93/0x1eb0 [ 501.977833][T15064] tcp_v6_do_rcv+0xa9d/0x13f0 [ 501.982781][T15064] __release_sock+0x1c5/0x350 [ 501.987730][T15064] release_sock+0x5f/0x1f0 [ 501.992421][T15064] tcp_sendmsg+0x39/0x50 [ 501.997135][T15064] __sock_sendmsg+0xe5/0x270 [ 502.002043][T15064] ____sys_sendmsg+0x52d/0x830 [ 502.006988][T15064] ___sys_sendmsg+0x21f/0x2a0 [ 502.012110][T15064] __sys_sendmmsg+0x28e/0x430 [ 502.017237][T15064] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 502.023095][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.028528][T15064] do_fast_syscall_32+0x34/0x80 [ 502.033656][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.040174][T15064] [ 502.042529][T15064] -> (&f_owner->lock){....}-{3:3} { [ 502.047880][T15064] INITIAL USE at: [ 502.052037][T15064] lock_acquire+0x120/0x360 [ 502.058386][T15064] _raw_write_lock_irq+0xa2/0xf0 [ 502.065190][T15064] __f_setown+0x67/0x370 [ 502.071266][T15064] do_fcntl+0x15ff/0x1910 [ 502.078073][T15064] do_compat_fcntl64+0x477/0x720 [ 502.085202][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.092097][T15064] do_fast_syscall_32+0x34/0x80 [ 502.098802][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.107617][T15064] INITIAL READ USE at: [ 502.112277][T15064] lock_acquire+0x120/0x360 [ 502.119350][T15064] _raw_read_lock_irqsave+0xaf/0x100 [ 502.127118][T15064] send_sigurg+0x55/0x420 [ 502.133911][T15064] sk_send_sigurg+0x6c/0x2e0 [ 502.140878][T15064] queue_oob+0x420/0x4f0 [ 502.147588][T15064] unix_stream_sendmsg+0xc3f/0xdf0 [ 502.155172][T15064] __sock_sendmsg+0x21c/0x270 [ 502.162476][T15064] ____sys_sendmsg+0x52d/0x830 [ 502.169453][T15064] ___sys_sendmsg+0x21f/0x2a0 [ 502.177667][T15064] __sys_sendmmsg+0x28e/0x430 [ 502.184566][T15064] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 502.192890][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.200508][T15064] do_fast_syscall_32+0x34/0x80 [ 502.207652][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.216355][T15064] } [ 502.219047][T15064] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 502.228083][T15064] ... acquired at: [ 502.232080][T15064] lock_acquire+0x120/0x360 [ 502.237481][T15064] _raw_read_lock_irqsave+0xaf/0x100 [ 502.243525][T15064] send_sigio+0x38/0x370 [ 502.248468][T15064] kill_fasync+0x24d/0x4d0 [ 502.253644][T15064] lease_break_callback+0x26/0x30 [ 502.259480][T15064] __break_lease+0x6a2/0x1620 [ 502.264635][T15064] do_dentry_open+0x8b7/0x13f0 [ 502.269903][T15064] vfs_open+0x3b/0x340 [ 502.274570][T15064] path_openat+0x2ee5/0x3830 [ 502.279831][T15064] do_filp_open+0x1fa/0x410 [ 502.285686][T15064] do_sys_openat2+0x121/0x1c0 [ 502.291211][T15064] __ia32_compat_sys_openat+0x131/0x160 [ 502.297266][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.302704][T15064] do_fast_syscall_32+0x34/0x80 [ 502.308131][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.315606][T15064] [ 502.318093][T15064] -> (&new->fa_lock){....}-{3:3} { [ 502.323341][T15064] INITIAL USE at: [ 502.327294][T15064] lock_acquire+0x120/0x360 [ 502.334152][T15064] _raw_write_lock_irq+0xa2/0xf0 [ 502.341059][T15064] fasync_remove_entry+0xf1/0x1c0 [ 502.347949][T15064] pipe_fasync+0xa9/0x1e0 [ 502.354071][T15064] __fput+0x8a2/0xa70 [ 502.359676][T15064] task_work_run+0x1d4/0x260 [ 502.365875][T15064] exit_to_user_mode_loop+0xec/0x110 [ 502.372929][T15064] __do_fast_syscall_32+0x1f4/0x2b0 [ 502.379721][T15064] do_fast_syscall_32+0x34/0x80 [ 502.386190][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.394201][T15064] INITIAL READ USE at: [ 502.398545][T15064] lock_acquire+0x120/0x360 [ 502.405192][T15064] _raw_read_lock_irqsave+0xaf/0x100 [ 502.412790][T15064] kill_fasync+0x199/0x4d0 [ 502.419261][T15064] splice_file_to_pipe+0x344/0x440 [ 502.426518][T15064] do_splice+0xdc0/0x1660 [ 502.433070][T15064] __se_sys_splice+0x2e1/0x460 [ 502.439975][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.447309][T15064] do_fast_syscall_32+0x34/0x80 [ 502.454621][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.463538][T15064] } [ 502.466046][T15064] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 502.474759][T15064] ... acquired at: [ 502.478655][T15064] lock_acquire+0x120/0x360 [ 502.483477][T15064] _raw_read_lock_irqsave+0xaf/0x100 [ 502.489057][T15064] kill_fasync+0x199/0x4d0 [ 502.493916][T15064] evdev_pass_values+0x627/0xbd0 [ 502.499058][T15064] evdev_events+0x1e6/0x340 [ 502.503881][T15064] input_pass_values+0x285/0x890 [ 502.509070][T15064] input_event_dispose+0x330/0x6b0 [ 502.514884][T15064] input_inject_event+0x1dd/0x340 [ 502.520775][T15064] evdev_write+0x2fc/0x480 [ 502.526034][T15064] vfs_write+0x27b/0xb30 [ 502.530864][T15064] ksys_write+0x145/0x250 [ 502.536500][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.542351][T15064] do_fast_syscall_32+0x34/0x80 [ 502.547619][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.554434][T15064] [ 502.556806][T15064] [ 502.556806][T15064] stack backtrace: [ 502.563269][T15064] CPU: 1 UID: 0 PID: 15064 Comm: syz.3.3695 Not tainted syzkaller #0 PREEMPT(full) [ 502.563298][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.563314][T15064] Call Trace: [ 502.563325][T15064] [ 502.563336][T15064] dump_stack_lvl+0x189/0x250 [ 502.563366][T15064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.563388][T15064] ? __pfx__printk+0x10/0x10 [ 502.563418][T15064] validate_chain+0x1f05/0x2140 [ 502.563454][T15064] __lock_acquire+0xab9/0xd20 [ 502.563484][T15064] ? kill_fasync+0x199/0x4d0 [ 502.563504][T15064] lock_acquire+0x120/0x360 [ 502.563529][T15064] ? kill_fasync+0x199/0x4d0 [ 502.563554][T15064] _raw_read_lock_irqsave+0xaf/0x100 [ 502.563581][T15064] ? kill_fasync+0x199/0x4d0 [ 502.563599][T15064] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 502.563622][T15064] ? do_raw_spin_lock+0x121/0x290 [ 502.563648][T15064] kill_fasync+0x199/0x4d0 [ 502.563667][T15064] ? kill_fasync+0x53/0x4d0 [ 502.563688][T15064] evdev_pass_values+0x627/0xbd0 [ 502.563720][T15064] ? evdev_pass_values+0x661/0xbd0 [ 502.563749][T15064] evdev_events+0x1e6/0x340 [ 502.563773][T15064] ? evdev_events+0x79/0x340 [ 502.563800][T15064] ? input_pass_values+0x8d/0x890 [ 502.563825][T15064] input_pass_values+0x285/0x890 [ 502.563853][T15064] ? input_handle_event+0x70c/0xf30 [ 502.563875][T15064] input_event_dispose+0x330/0x6b0 [ 502.563897][T15064] input_inject_event+0x1dd/0x340 [ 502.563918][T15064] ? input_inject_event+0xb6/0x340 [ 502.563939][T15064] evdev_write+0x2fc/0x480 [ 502.563966][T15064] ? futex_private_hash_put+0x245/0x280 [ 502.563988][T15064] ? __pfx_evdev_write+0x10/0x10 [ 502.564015][T15064] ? bpf_lsm_file_permission+0x9/0x20 [ 502.564038][T15064] ? security_file_permission+0x75/0x290 [ 502.564062][T15064] ? rw_verify_area+0x255/0x4d0 [ 502.564085][T15064] ? __lock_acquire+0xab9/0xd20 [ 502.564109][T15064] ? __pfx_evdev_write+0x10/0x10 [ 502.564136][T15064] vfs_write+0x27b/0xb30 [ 502.564163][T15064] ? __pfx_vfs_write+0x10/0x10 [ 502.564186][T15064] ? __fget_files+0x2a/0x420 [ 502.564215][T15064] ? __fget_files+0x2a/0x420 [ 502.564241][T15064] ? __fget_files+0x3a0/0x420 [ 502.564267][T15064] ? __fget_files+0x2a/0x420 [ 502.564380][T15064] ksys_write+0x145/0x250 [ 502.564422][T15064] ? __pfx_ksys_write+0x10/0x10 [ 502.564448][T15064] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.564479][T15064] __do_fast_syscall_32+0xb6/0x2b0 [ 502.564515][T15064] do_fast_syscall_32+0x34/0x80 [ 502.564545][T15064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.564580][T15064] RIP: 0023:0xf70be539 [ 502.564602][T15064] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.564620][T15064] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 502.564642][T15064] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 502.564655][T15064] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.564667][T15064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.564679][T15064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.564690][T15064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.564708][T15064] [ 502.896902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.919603][ T5865] Bluetooth: hci3: command tx timeout [ 502.921369][ T5868] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 502.940015][ T5868] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.949957][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.983563][ T5868] usb 1-1: config 0 descriptor?? [ 502.989663][T15068] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 503.045101][T14969] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 503.086879][ T5868] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 503.402240][ T43] usb 4-1: USB disconnect, device number 60 [ 503.913629][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.019610][ T10] usb 1-1: USB disconnect, device number 53 [ 504.031129][ T24] usb 2-1: USB disconnect, device number 49 [ 504.066943][ T1343] IPVS: stop unused estimator thread 0... [ 504.538309][ T1343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.608246][ T1343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.698072][ T1343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.786314][ T1343] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 504.795658][ T1343] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.909351][ T1343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.920722][ T1343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.951535][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.988252][ T1343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.998947][ T1343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.070040][ T1343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.082906][ T1343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.142703][ T1343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.155830][ T1343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.284615][ T1343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.295311][ T1343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.340179][ T1343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.355296][ T1343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.410382][ T1343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.427418][ T1343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.478639][ T1343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.492025][ T1343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.616350][ T1343] bridge_slave_1: left allmulticast mode [ 505.625299][ T1343] bridge_slave_1: left promiscuous mode [ 505.632657][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.642347][ T1343] bridge_slave_0: left allmulticast mode [ 505.648056][ T1343] bridge_slave_0: left promiscuous mode [ 505.656078][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.666315][ T1343] bridge_slave_1: left allmulticast mode [ 505.672800][ T1343] bridge_slave_1: left promiscuous mode [ 505.678680][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.688475][ T1343] bridge_slave_0: left allmulticast mode [ 505.694853][ T1343] bridge_slave_0: left promiscuous mode [ 505.700634][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.735299][ T1343] bridge_slave_1: left allmulticast mode [ 505.741034][ T1343] bridge_slave_1: left promiscuous mode [ 505.747109][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.755977][ T1343] bridge_slave_0: left allmulticast mode [ 505.763545][ T1343] bridge_slave_0: left promiscuous mode [ 505.769620][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.782694][ T1343] bridge_slave_1: left allmulticast mode [ 505.788523][ T1343] bridge_slave_1: left promiscuous mode [ 505.796369][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.805738][ T1343] bridge_slave_0: left allmulticast mode [ 505.814860][ T1343] bridge_slave_0: left promiscuous mode [ 505.821410][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.001698][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.150310][ T1343] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 506.159091][ T1343] bridge0 (unregistering): left promiscuous mode [ 506.166844][ T1343] bridge0 (unregistering): left allmulticast mode [ 506.237661][ T1343] bond0 (unregistering): left promiscuous mode [ 506.244192][ T1343] bond_slave_0: left promiscuous mode [ 506.249783][ T1343] bond_slave_1: left promiscuous mode [ 506.258695][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.267703][ T1343] bond_slave_0: left allmulticast mode [ 506.274364][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.283468][ T1343] bond_slave_1: left allmulticast mode [ 506.289296][ T1343] bond0 (unregistering): Released all slaves [ 506.302057][ T1343] bond1 (unregistering): (slave bond2): Releasing backup interface [ 506.310000][ T1343] bond2 (unregistering): left promiscuous mode [ 506.317250][ T1343] bond1 (unregistering): Released all slaves [ 506.466794][ T1343] bond2 (unregistering): Released all slaves [ 506.497640][ T1343] ip6gretap0 (unregistering): left allmulticast mode [ 506.667925][ T1343] bridge0 (unregistering): left promiscuous mode [ 506.886529][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.898077][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.908018][ T1343] bond0 (unregistering): Released all slaves [ 507.041591][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.075125][ T1343] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 507.083639][ T1343] bridge0 (unregistering): left promiscuous mode [ 507.090006][ T1343] bridge0 (unregistering): left allmulticast mode [ 507.262520][ T1343] bond0 (unregistering): left promiscuous mode [ 507.268768][ T1343] bond_slave_0: left promiscuous mode [ 507.274600][ T1343] bond_slave_1: left promiscuous mode [ 507.281381][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.291667][ T1343] bond_slave_0: left allmulticast mode [ 507.298517][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.307891][ T1343] bond_slave_1: left allmulticast mode [ 507.314497][ T1343] bond0 (unregistering): Released all slaves [ 507.425709][ T1343] bond1 (unregistering): Released all slaves [ 507.435530][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.442205][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.524620][ T1343] team0: Port device vlan2 removed [ 507.593807][ T1343] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 507.602694][ T1343] bridge0 (unregistering): left allmulticast mode [ 507.666818][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.676766][ T1343] bond_slave_0: left allmulticast mode [ 507.683808][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.692947][ T1343] bond_slave_1: left allmulticast mode [ 507.699221][ T1343] bond0 (unregistering): Released all slaves [ 508.071545][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.108941][ T1343] : left promiscuous mode [ 509.114150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.179789][ T1343] tipc: Disabling bearer [ 509.187829][ T1343] tipc: Left network mode [ 509.199234][ T1343] tipc: Disabling bearer [ 509.211601][ T1343] tipc: Left network mode [ 509.218526][ T1343] tipc: Left network mode [ 509.923962][ T1343] dummy0: left promiscuous mode [ 509.935778][ T1343] hsr_slave_0: left promiscuous mode [ 509.946773][ T1343] hsr_slave_1: left promiscuous mode [ 509.954963][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.963549][ T1343] dummy0: left promiscuous mode [ 509.969418][ T1343] team0: left promiscuous mode [ 509.975061][ T1343] team_slave_0: left promiscuous mode [ 509.980892][ T1343] team_slave_1: left promiscuous mode [ 509.992856][ T1343] hsr_slave_0: left promiscuous mode [ 509.998957][ T1343] hsr_slave_1: left promiscuous mode [ 510.006554][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.016366][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.026103][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.033872][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.042200][ T1343] dummy0: left promiscuous mode [ 510.050383][ T1343] hsr_slave_0: left promiscuous mode [ 510.058276][ T1343] hsr_slave_1: left promiscuous mode [ 510.064556][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.073306][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.085708][ T1343] hsr_slave_0: left promiscuous mode [ 510.097176][ T1343] hsr_slave_1: left promiscuous mode [ 510.103256][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.110881][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.120977][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.129167][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.150111][ T1343] veth1_macvtap: left promiscuous mode [ 510.157388][ T1343] veth0_macvtap: left promiscuous mode [ 510.164635][ T1343] veth1_vlan: left promiscuous mode [ 510.171152][ T1343] veth0_vlan: left promiscuous mode [ 510.178586][ T1343] veth1_macvtap: left promiscuous mode [ 510.185106][ T1343] veth0_macvtap: left promiscuous mode [ 510.190873][ T1343] veth1_vlan: left promiscuous mode [ 510.196665][ T1343] veth0_vlan: left promiscuous mode [ 510.203505][ T1343] veth1_macvtap: left promiscuous mode [ 510.209158][ T1343] veth0_macvtap: left promiscuous mode [ 510.215556][ T1343] veth1_vlan: left promiscuous mode [ 510.220922][ T1343] veth0_vlan: left promiscuous mode [ 510.780554][ T1343] team0 (unregistering): Port device team_slave_1 removed