last executing test programs: 5m0.314004723s ago: executing program 1 (id=679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5m0.261873665s ago: executing program 1 (id=680): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) 5m0.164858328s ago: executing program 1 (id=681): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) 5m0.06438516s ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 4m59.962369954s ago: executing program 1 (id=683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 4m59.86194762s ago: executing program 1 (id=684): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002980)="0800000000000000bc82e35e38b7192243d3a2107b623eefb39c8ddf40d5d9298bfa7f342c43df23a1da6a63f954e2a99e5cae73b7a6d0ff0ceb27a457cfa7e1f490c95a22b044de626ff9a2fa139bb86ffd8c212f8437660eeadc42a6f310969a23e28e87c5d812b1e4e9f3f4b2b4ff53bf4ba8a025b067e8f185e8a1176d41a62d5126d338f40a0a58f89f043e8a44940280576b7a029a90993dd4daf2a83578333df83dbf0ea12335df2588e43e75604b328ebea2e44cb77e76faba", 0xbd}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}, 0x4}], 0x1, 0x0, 0x0) 4m59.317422279s ago: executing program 32 (id=684): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002980)="0800000000000000bc82e35e38b7192243d3a2107b623eefb39c8ddf40d5d9298bfa7f342c43df23a1da6a63f954e2a99e5cae73b7a6d0ff0ceb27a457cfa7e1f490c95a22b044de626ff9a2fa139bb86ffd8c212f8437660eeadc42a6f310969a23e28e87c5d812b1e4e9f3f4b2b4ff53bf4ba8a025b067e8f185e8a1176d41a62d5126d338f40a0a58f89f043e8a44940280576b7a029a90993dd4daf2a83578333df83dbf0ea12335df2588e43e75604b328ebea2e44cb77e76faba", 0xbd}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}, 0x4}], 0x1, 0x0, 0x0) 3m31.080775789s ago: executing program 4 (id=1430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, &(0x7f0000008fc0)={0x2020}, 0x2020) 3m30.716123878s ago: executing program 4 (id=1434): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1}, 0x0) 3m30.565523045s ago: executing program 4 (id=1436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 3m30.432601939s ago: executing program 4 (id=1439): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m30.189027835s ago: executing program 4 (id=1442): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7400}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 3m29.850145796s ago: executing program 4 (id=1446): timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 3m29.362002691s ago: executing program 33 (id=1446): timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 17.943142367s ago: executing program 2 (id=3066): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x803, 0x101}) close_range(r0, 0xffffffffffffffff, 0x0) 17.799260498s ago: executing program 2 (id=3068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff07000000bfa100000000000007010000f8ffffffb714000009"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.646812989s ago: executing program 2 (id=3069): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 16.841094202s ago: executing program 2 (id=3075): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) 16.569334044s ago: executing program 2 (id=3078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7f, 0x4, 0xf, '\x00', 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000240)) 16.290117261s ago: executing program 2 (id=3079): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00\x00\t', 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x1, 0xf, "4f11f60956f0e3c1bcf67e342882c4008a90e07d0b91613c90afd34234333c442dd8ef90e8f720ca108feda9380737cdb241fb21ba19324f67dbc959b86945819b7a0c8f6e2483c3b7fda3fbc8b8c2a5c07bb0c8110adf1d0dcaae95abebf9a9c88ef289abdca7a7fa66c526224737d7ba23fee6b7e4"}]}}}}}}, 0x0) 15.710001825s ago: executing program 34 (id=3079): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00\x00\t', 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x1, 0xf, "4f11f60956f0e3c1bcf67e342882c4008a90e07d0b91613c90afd34234333c442dd8ef90e8f720ca108feda9380737cdb241fb21ba19324f67dbc959b86945819b7a0c8f6e2483c3b7fda3fbc8b8c2a5c07bb0c8110adf1d0dcaae95abebf9a9c88ef289abdca7a7fa66c526224737d7ba23fee6b7e4"}]}}}}}}, 0x0) 3.416741813s ago: executing program 6 (id=3159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000840)=""/83, 0x53}], 0x2}, 0x2000) 3.331574967s ago: executing program 6 (id=3160): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xa38) 3.241220175s ago: executing program 0 (id=3161): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) 2.792070479s ago: executing program 6 (id=3165): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x9f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.560711223s ago: executing program 6 (id=3169): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2.438149986s ago: executing program 3 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 2.356592475s ago: executing program 6 (id=3173): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x80400, 0xe4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x102) pread64(r1, &(0x7f00000006c0)=""/128, 0x80, 0x7) 2.267857787s ago: executing program 7 (id=3174): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xee, 0xd9, &(0x7f0000006680)) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240)) msgsnd(0x0, 0x0, 0x8, 0x800) 2.120632043s ago: executing program 3 (id=3176): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000600)="6c3b01c0352785418c0b21740f1c1f085a0ce2dc54621a42a6b6c27cc459acc168582a", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.601175205s ago: executing program 0 (id=3177): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xa38) 1.600467759s ago: executing program 3 (id=3179): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="eafd148b55ff931bacd4004427e888cbd3ab0d93bef24d8abf9404b696674bba84bf7b627d1862dbf29d1d2bdcd9815703fb1961c105", 0x36}, {&(0x7f00000002c0)="ee565cb0dae41053b4b4767f75dac3479da43e3bc0640147", 0x18}, {&(0x7f0000002080)="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", 0x2b5}, {&(0x7f00000003c0)}], 0x4}}], 0x1, 0x240088d0) 1.465150896s ago: executing program 3 (id=3180): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x4030, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.417919141s ago: executing program 6 (id=3181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, '\x00'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200148b4"], 0x0}) 1.285978827s ago: executing program 5 (id=3182): r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.234829749s ago: executing program 3 (id=3183): r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 1.129947486s ago: executing program 3 (id=3184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2}) 1.052876684s ago: executing program 5 (id=3185): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r0) 1.019654012s ago: executing program 0 (id=3186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 945.696643ms ago: executing program 7 (id=3187): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) 843.421487ms ago: executing program 5 (id=3188): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 823.051019ms ago: executing program 7 (id=3189): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1500, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 761.691341ms ago: executing program 0 (id=3190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 648.433397ms ago: executing program 5 (id=3191): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x9047, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 625.551905ms ago: executing program 7 (id=3192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000010200)=@newchain={0x1000, 0x64, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xfff1, 0xd}, {0xfffe, 0xb}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x10}}]}}, @f_rsvp6={{0xa}, {0xf94, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x2c9c, 0x7}, {0xd8, 0x1, 0x40}, 0x67, 0x7, 0x7}}, @TCA_RSVP_ACT={0xf70, 0x6, [@m_mpls={0xf6c, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0xf3d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1000}}, 0x20008000) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0x24}], 0x1, 0x40000000, 0x0) 484.970447ms ago: executing program 0 (id=3193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r2, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r2, 0xc}) 425.602915ms ago: executing program 7 (id=3194): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)='x', 0x1}], 0x1) 267.074081ms ago: executing program 5 (id=3195): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0xf7, 0x8, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x0, 0x2, 0x0, 0x7, 0x0, 0x25, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xd000, 0xeeef0000, 0x8, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0x4000, 0xa, 0x5, 0x0, 0x0, 0x3, 0x0, 0x2, 0x4}, {0x1000, 0x0, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x2b, 0x26}, {0x33328004}, {0xdddd1000, 0xfffc}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0xfffffffffffffffc, 0x2501, 0x0, [0x100000, 0x0, 0x2]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 150.438148ms ago: executing program 7 (id=3196): unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000000)="da", 0x1) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) 65.972515ms ago: executing program 0 (id=3197): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 5 (id=3198): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d"], 0x154}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) kernel console output (not intermixed with test programs): ct, device number 45 [ 351.145032][T11741] macvlan0: entered promiscuous mode [ 351.160391][T11741] macvlan0: entered allmulticast mode [ 351.175426][T11741] syz_tun: entered promiscuous mode [ 351.191189][T11741] syz_tun: entered allmulticast mode [ 351.206468][T11741] team0: Port device macvlan0 added [ 351.274632][T11745] loop3: detected capacity change from 0 to 1 [ 351.311363][T11745] Dev loop3: unable to read RDB block 1 [ 351.339306][T11745] loop3: unable to read partition table [ 351.375524][T11745] loop3: partition table beyond EOD, truncated [ 351.424994][T11745] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.126192][T11761] pimreg: entered allmulticast mode [ 354.831745][T11821] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 354.901620][T11821] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 355.743453][T11856] loop8: detected capacity change from 0 to 79 [ 355.824352][T11856] loop8: detected capacity change from 79 to 78 [ 355.900306][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 356.066449][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.085889][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.102881][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.129939][ T10] usb 7-1: config 0 descriptor?? [ 356.254144][ T5976] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 356.443844][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 356.449903][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 356.466810][ T10] usb 7-1: USB disconnect, device number 12 [ 356.513852][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 356.526440][ T5976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.544189][ T5976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.582317][ T5976] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.592008][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.613563][ T5976] usb 4-1: Product: syz [ 356.617787][ T5976] usb 4-1: Manufacturer: syz [ 356.622441][ T5976] usb 4-1: SerialNumber: syz [ 356.871371][ T5976] usb 4-1: 0:2 : does not exist [ 356.924039][ T44] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 356.924551][ T5976] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 357.005343][ T5976] usb 4-1: USB disconnect, device number 46 [ 357.093588][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 357.101046][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.107428][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.120126][ T44] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 357.195964][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.253206][ T44] usb 7-1: config 0 descriptor?? [ 357.271175][ T44] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 357.292737][ T44] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 357.403600][ T5869] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 357.573672][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 357.618569][ T5869] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 357.629899][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 357.660076][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.707205][ T5869] usb 3-1: config 0 descriptor?? [ 357.750333][ T5869] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 357.955186][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 358.261720][ T30] audit: type=1326 audit(1755110963.928:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 358.397960][ T30] audit: type=1326 audit(1755110963.998:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 358.420015][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.546299][ T30] audit: type=1326 audit(1755110963.998:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 358.639446][ T30] audit: type=1326 audit(1755110963.998:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 358.726943][ T30] audit: type=1326 audit(1755110963.998:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 358.800601][ T30] audit: type=1326 audit(1755110963.998:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 358.828930][ T30] audit: type=1326 audit(1755110963.998:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 358.862138][ T30] audit: type=1326 audit(1755110963.998:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 358.898732][ T30] audit: type=1326 audit(1755110963.998:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 358.961800][ T30] audit: type=1326 audit(1755110963.998:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 359.028299][ T5869] gspca_nw80x: reg_w err -71 [ 359.033042][ T5869] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 359.054429][ T5869] usb 3-1: USB disconnect, device number 35 [ 359.074405][T11909] loop6: detected capacity change from 0 to 7 [ 359.093295][ T10] usb 7-1: USB disconnect, device number 13 [ 359.127172][T10046] Dev loop6: unable to read RDB block 7 [ 359.145573][ T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 359.153680][T10046] loop6: AHDI p3 p4 [ 359.161145][T10046] loop6: partition table partially beyond EOD, truncated [ 359.186496][T10046] loop6: p3 start 1869967406 is beyond EOD, truncated [ 359.211022][T11909] Dev loop6: unable to read RDB block 7 [ 359.217133][T11909] loop6: AHDI p3 p4 [ 359.228244][T11909] loop6: partition table partially beyond EOD, truncated [ 359.244215][T11909] loop6: p3 start 1869967406 is beyond EOD, truncated [ 359.359673][T11918] loop2: detected capacity change from 0 to 7 [ 359.414726][T11918] Dev loop2: unable to read RDB block 7 [ 359.433926][T11918] loop2: unable to read partition table [ 359.445991][T11918] loop2: partition table beyond EOD, truncated [ 359.464171][T11918] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.640622][T11960] loop6: detected capacity change from 0 to 7 [ 360.651345][T11960] Dev loop6: unable to read RDB block 7 [ 360.658166][T11960] loop6: AHDI p3 [ 360.662001][T11960] loop6: partition table partially beyond EOD, truncated [ 360.743672][ T5976] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 360.921524][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.949223][ T5976] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.961528][T11968] input: syz1 as /devices/virtual/input/input50 [ 360.977032][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.003768][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 361.023754][ T5976] usb 1-1: config 0 descriptor?? [ 361.223020][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 361.231314][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 361.263584][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.310316][ T10] usb 6-1: config 0 descriptor?? [ 361.506737][ T5976] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 361.555947][ T5976] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0032/input/input51 [ 361.810512][ T5976] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 362.338206][ T5954] usb 1-1: USB disconnect, device number 39 [ 362.355585][ T10] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 362.391688][T11995] syzkaller1: entered promiscuous mode [ 362.482012][T11995] syzkaller1: entered allmulticast mode [ 362.585489][ T44] usb 6-1: USB disconnect, device number 25 [ 362.708453][T11995] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 364.424708][ T44] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 364.433886][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 364.593623][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 364.596248][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.617809][ T44] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 364.619752][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.642268][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.644253][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.653778][ T10] usb 3-1: Product: syz [ 364.696206][ T44] usb 1-1: config 0 descriptor?? [ 364.696922][ T10] usb 3-1: Manufacturer: syz [ 364.740720][ T10] usb 3-1: SerialNumber: syz [ 364.855607][T12047] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2231'. [ 364.918671][ T44] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 365.831305][ T10] cdc_ncm 3-1:1.0: failed to get mac address [ 365.895845][ T10] cdc_ncm 3-1:1.0: bind() failure [ 365.928708][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 365.938844][ T44] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 365.961274][ T44] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 365.987574][ T44] asix 1-1:0.0: probe with driver asix failed with error -71 [ 366.006910][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 366.022368][ T44] usb 1-1: USB disconnect, device number 40 [ 366.068495][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 366.093829][ T10] usb 3-1: USB disconnect, device number 36 [ 366.178890][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 366.178911][ T30] audit: type=1326 audit(1755110971.828:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 366.246462][ T30] audit: type=1326 audit(1755110971.828:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 366.268485][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.288871][ T30] audit: type=1326 audit(1755110971.828:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa8558 code=0x7ffc0000 [ 366.316867][ T30] audit: type=1326 audit(1755110971.828:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa8558 code=0x7ffc0000 [ 366.349670][ T30] audit: type=1326 audit(1755110971.828:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 366.385300][ T30] audit: type=1326 audit(1755110971.828:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa8558 code=0x7ffc0000 [ 366.428651][ T30] audit: type=1326 audit(1755110971.828:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 366.450706][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.499577][ T30] audit: type=1326 audit(1755110971.828:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa8558 code=0x7ffc0000 [ 366.532208][ T30] audit: type=1326 audit(1755110971.888:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 366.567560][ T30] audit: type=1326 audit(1755110971.888:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 367.097220][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 367.165539][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 367.599322][T12089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.625083][T12089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.727891][T12089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.952747][T12103] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 369.067217][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 369.113692][ T5985] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 369.241986][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.283722][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.312508][ T5985] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.316177][ T10] usb 3-1: config 0 descriptor?? [ 369.337769][ T10] cp210x 3-1:0.0: cp210x converter detected [ 369.350422][ T5985] usb 7-1: config 0 has no interface number 0 [ 369.370385][ T5985] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 369.399434][ T5985] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 369.430744][ T5985] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 369.457414][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.477195][ T5985] usb 7-1: config 0 descriptor?? [ 369.483082][T12134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 369.554599][ T5985] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 369.623775][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.748109][ T5954] usb 7-1: USB disconnect, device number 14 [ 369.754334][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 369.773943][ T5976] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 369.974230][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.000892][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.022150][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.037469][ T5976] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.048397][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.074702][ T5976] usb 6-1: config 0 descriptor?? [ 370.182185][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 370.297773][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 370.526864][ T5976] plantronics 0003:047F:FFFF.0033: reserved main item tag 0xd [ 370.552137][ T10] usb 3-1: USB disconnect, device number 37 [ 370.585939][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 370.601224][ T5976] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 370.630242][ T10] cp210x 3-1:0.0: device disconnected [ 371.703691][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.796643][T12191] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 371.825031][T12191] macsec1: entered allmulticast mode [ 371.842068][T12191] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 371.857626][T12196] Set syz0 is full, maxelem 0 reached [ 371.888967][T12191] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 371.923848][T12191] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 372.419080][T12212] batadv0: entered promiscuous mode [ 372.441294][T12212] bridge0: entered promiscuous mode [ 372.485321][T12212] hsr1: entered allmulticast mode [ 372.522926][T12212] batadv0: entered allmulticast mode [ 372.558906][T12212] bridge0: entered allmulticast mode [ 372.665345][ T24] usb 6-1: USB disconnect, device number 26 [ 372.884546][ T5954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 373.079480][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.108817][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 373.140871][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.193552][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.247100][ T5954] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.288835][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.318224][ T5954] usb 1-1: config 0 descriptor?? [ 373.347948][T12220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 373.784818][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.863844][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.902039][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.983181][ T5954] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd [ 374.075829][ T5954] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 374.357427][ T10] usb 1-1: USB disconnect, device number 41 [ 374.411459][T12248] fido_id[12248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 374.883611][ T5954] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 375.044641][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 375.059117][ T5954] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.070027][ T5954] usb 3-1: config 0 has no interface number 0 [ 375.092529][ T5954] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 375.122378][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.143812][ T5954] usb 3-1: Product: syz [ 375.153991][ T5954] usb 3-1: Manufacturer: syz [ 375.163194][ T5954] usb 3-1: SerialNumber: syz [ 375.184876][T12273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.185118][ T5954] usb 3-1: config 0 descriptor?? [ 375.221072][ T5954] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 375.379563][T12276] ALSA: mixer_oss: invalid OSS volume ':' [ 375.435696][T12276] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 375.452663][T12276] ALSA: mixer_oss: invalid OSS volume '2' [ 375.479341][T12276] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 375.523898][T12276] ALSA: mixer_oss: invalid OSS volume '3' [ 375.534121][T12276] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 376.443674][ T5985] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 376.460570][ T5954] gspca_spca1528: reg_w err -71 [ 376.484342][ T5954] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 376.499274][ T5954] usb 3-1: USB disconnect, device number 38 [ 376.647103][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 376.648824][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.713618][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.727693][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.773900][ T5985] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.823659][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.834037][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 376.857389][ T5985] usb 1-1: config 0 descriptor?? [ 376.871830][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 376.893000][ T10] usb 6-1: config 0 has no interface number 0 [ 376.925601][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 376.953152][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.977500][ T10] usb 6-1: Product: syz [ 376.981982][ T10] usb 6-1: Manufacturer: syz [ 376.998833][ T10] usb 6-1: SerialNumber: syz [ 377.043748][ T10] usb 6-1: config 0 descriptor?? [ 377.102904][ T10] smsc95xx v2.0.0 [ 377.224110][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.326329][ T5985] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 377.512165][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 377.577636][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 377.733597][ T5976] usb 1-1: USB disconnect, device number 42 [ 378.153913][ T893] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 378.226257][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 378.253849][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 378.300485][ T10] usb 6-1: USB disconnect, device number 27 [ 378.327822][ T893] usb 3-1: Using ep0 maxpacket: 16 [ 378.340410][ T893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.377479][ T893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.399942][ T893] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 378.428009][ T893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.465245][ T893] usb 3-1: config 0 descriptor?? [ 378.497405][T12341] kvm: kvm [12339]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x4000002a) = 0x0 [ 378.753926][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.762500][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.032807][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.096080][T12351] syzkaller1: entered promiscuous mode [ 379.107340][T12351] syzkaller1: entered allmulticast mode [ 379.172894][T12360] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2362'. [ 379.305121][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 379.373191][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'. [ 379.428982][T12360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.446405][T12360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.459770][T12360] bond0 (unregistering): Released all slaves [ 379.473952][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 379.486152][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 379.507870][ T893] letsketch 0003:6161:4D15.0036: Device info: à° [ 379.526777][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.576718][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 379.596688][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.614742][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.624169][ T10] usb 6-1: Product: syz [ 379.645553][ T10] usb 6-1: Manufacturer: syz [ 379.658905][ T10] usb 6-1: SerialNumber: syz [ 379.709359][T12366] hsr_slave_0: left promiscuous mode [ 379.716715][T12366] hsr_slave_1: left promiscuous mode [ 379.788470][ T893] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 379.811615][ T893] letsketch 0003:6161:4D15.0036: probe with driver letsketch failed with error -71 [ 379.855308][ T893] usb 3-1: USB disconnect, device number 39 [ 379.932712][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 379.951618][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.988571][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 380.043764][ T10] usb 6-1: USB disconnect, device number 28 [ 380.262560][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.760953][ T77] bridge_slave_1: left allmulticast mode [ 380.791380][ T77] bridge_slave_1: left promiscuous mode [ 380.798627][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806e5d8400: rx timeout, send abort [ 380.828767][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.867795][ T77] bridge_slave_0: left allmulticast mode [ 380.875787][ T77] bridge_slave_0: left promiscuous mode [ 380.890718][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.302652][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803275ac00: rx timeout, send abort [ 381.311440][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806e5d8400: abort rx timeout. Force session deactivation [ 381.515392][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 381.707357][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.738258][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.767161][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 381.797219][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.811072][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803275ac00: abort rx timeout. Force session deactivation [ 381.812822][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.831899][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.871188][ T10] usb 4-1: config 0 descriptor?? [ 382.138484][ T77] bond1 (unregistering): (slave geneve2): Releasing active interface [ 382.594034][ T5954] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 382.597339][ T10] plantronics 0003:047F:FFFF.0037: ignoring exceeding usage max [ 382.601682][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803275b000: rx timeout, send abort [ 382.682600][ T10] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 382.832161][ T5954] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 382.853673][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.862656][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.920749][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.936313][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.963662][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.974732][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.983159][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.999535][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.028967][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.032381][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.043697][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.056210][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.068269][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.084776][ T77] bond0 (unregistering): Released all slaves [ 383.087399][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.099989][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.117776][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803275b000: abort rx timeout. Force session deactivation [ 383.129057][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.153569][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.176178][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.189872][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.201693][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.210885][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.243650][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.263736][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.273114][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.299051][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 383.312190][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.330207][ T5954] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 383.347801][ T5954] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 383.381907][ T5954] usb 1-1: Product: syz [ 383.386725][ T5954] usb 1-1: Manufacturer: syz [ 383.405939][ T5954] usb 1-1: SerialNumber: syz [ 383.439773][ T5954] usb 1-1: config 0 descriptor?? [ 383.481672][ T5954] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 383.583658][ T77] bond1 (unregistering): Released all slaves [ 384.079145][ T5985] usb 1-1: USB disconnect, device number 43 [ 384.111479][ T5985] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 384.664078][ T77] hsr_slave_0: left promiscuous mode [ 384.693392][ T77] hsr_slave_1: left promiscuous mode [ 384.720060][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.788919][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.884366][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.942586][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.089711][ T77] veth1_macvtap: left promiscuous mode [ 385.130538][ T77] veth0_macvtap: left promiscuous mode [ 385.152033][ T77] veth1_vlan: left promiscuous mode [ 385.181308][ T77] veth0_vlan: left promiscuous mode [ 386.089730][T12481] input: syz1 as /devices/virtual/input/input53 [ 386.472586][ T77] team0 (unregistering): Port device team_slave_1 removed [ 386.522826][ T77] team0 (unregistering): Port device team_slave_0 removed [ 387.699608][ T5954] usb 4-1: USB disconnect, device number 47 [ 387.833632][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 387.945176][ T77] IPVS: stop unused estimator thread 0... [ 388.019176][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.065162][ T10] usb 1-1: config 0 has no interfaces? [ 388.070756][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 388.123672][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.187985][ T10] usb 1-1: config 0 descriptor?? [ 389.223192][ T5954] usb 1-1: USB disconnect, device number 44 [ 390.681085][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 390.721047][T12590] openvswitch: netlink: nsh attr 179 is out of range max 3 [ 390.793699][T12590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.163800][ T5911] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 392.343957][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 392.361018][T12639] vxcan0: tx drop: invalid da for name 0x0000000080000001 [ 392.376187][ T5911] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 392.397166][ T5911] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 392.448490][ T5911] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 392.506994][ T5911] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 392.543253][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 392.543273][ T30] audit: type=1804 audit(1755110998.208:796): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2456" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=46275 res=1 errno=0 [ 392.618315][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0 [ 392.678992][ T5911] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 392.716031][ T5911] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 392.762476][ T5911] usb 7-1: Product: syz [ 392.767450][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 392.797370][ T5911] usb 7-1: Manufacturer: syz [ 392.803969][ T5911] usb 7-1: SerialNumber: syz [ 392.844812][ T5911] usb 7-1: config 0 descriptor?? [ 392.857065][ T5911] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 392.885233][ T5911] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 393.135222][T12628] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 393.135984][ T5869] usb 7-1: USB disconnect, device number 15 [ 393.142629][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 393.199716][ T5869] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 393.302410][T12663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 393.943967][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 394.123869][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 394.145396][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 394.165254][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'. [ 394.175022][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.191901][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.263630][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.276406][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.361629][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 394.390446][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.643744][ T10] usb 4-1: usb_control_msg returned -32 [ 394.659572][ T10] usbtmc 4-1:16.0: can't read capabilities [ 395.043578][ T5954] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 395.253589][ T5954] usb 7-1: Using ep0 maxpacket: 32 [ 395.291126][ T5954] usb 7-1: unable to get BOS descriptor or descriptor too short [ 395.305271][ T5954] usb 7-1: config 0 has no interfaces? [ 395.328148][ T5954] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.373732][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.382564][T12736] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 395.400289][ T5954] usb 7-1: Product: syz [ 395.411377][ T5954] usb 7-1: Manufacturer: syz [ 395.428073][ T5954] usb 7-1: SerialNumber: syz [ 395.446253][ T5954] usb 7-1: config 0 descriptor?? [ 395.597343][ T5954] usb 4-1: USB disconnect, device number 48 [ 395.713311][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.744102][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.815033][ T5985] usb 7-1: USB disconnect, device number 16 [ 395.837584][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 395.856823][T12748] netlink: 'syz.0.2492': attribute type 30 has an invalid length. [ 396.096892][T12755] tls_set_device_offload_rx: netdev not found [ 396.113784][ T5954] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 396.294110][ T5976] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 396.309980][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.339740][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 396.388517][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 396.461520][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.467070][ T5976] usb 7-1: config index 0 descriptor too short (expected 159, got 149) [ 396.503617][ T5976] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.528909][ T5954] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.533775][ T5976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.556636][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.578537][ T5954] usb 3-1: config 0 descriptor?? [ 396.585978][ T5976] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40 [ 396.603561][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.604454][T12751] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.629446][ T5976] usb 7-1: Product: syz [ 396.646179][ T5976] usb 7-1: Manufacturer: syz [ 396.663618][ T5976] usb 7-1: SerialNumber: syz [ 396.783922][ T5985] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 396.947498][ T5985] usb 1-1: Using ep0 maxpacket: 8 [ 396.970564][ T5985] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 396.993111][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.026318][ T5985] usb 1-1: Product: syz [ 397.044905][ T5985] usb 1-1: Manufacturer: syz [ 397.049665][ T5985] usb 1-1: SerialNumber: syz [ 397.079240][ T5985] usb 1-1: config 0 descriptor?? [ 397.097524][ T5954] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 397.335212][ T5985] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 397.356439][ T5976] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 397.397865][ T5954] usb 3-1: USB disconnect, device number 40 [ 397.398250][ T5976] usb 7-1: Warning! Unlikely big volume range (=29101), cval->res is probably wrong. [ 397.419510][ T5976] usb 7-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = -29101/0/1 [ 397.444480][ T5976] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 397.469519][ T5976] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 397.487641][ T5976] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 397.527480][ T5976] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 397.547316][ T5976] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 397.566441][ T5976] usb 7-1: USB disconnect, device number 17 [ 397.608860][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.365336][ T5985] gspca_sunplus: reg_w_riv err -71 [ 398.370614][ T5985] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 398.398853][ T5976] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 398.410554][ T5985] usb 1-1: USB disconnect, device number 45 [ 398.597666][ T5976] usb 7-1: config 4 has an invalid interface number: 231 but max is 0 [ 398.618778][ T5976] usb 7-1: config 4 has no interface number 0 [ 398.640013][ T5976] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 398.665594][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.691930][ T5976] usb 7-1: Product: syz [ 398.700538][ T5976] usb 7-1: Manufacturer: syz [ 398.711776][ T5976] usb 7-1: SerialNumber: syz [ 398.752922][ T5976] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 399.145511][ T5976] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 399.156886][ T5976] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 399.383710][ T5976] usb 7-1: USB disconnect, device number 18 [ 399.804675][ T30] audit: type=1326 audit(1755111005.468:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 399.839447][ T30] audit: type=1326 audit(1755111005.498:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 399.923546][ T30] audit: type=1326 audit(1755111005.508:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 400.012842][ T30] audit: type=1326 audit(1755111005.508:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 400.116326][ T30] audit: type=1326 audit(1755111005.508:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 401.757761][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 401.808570][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 402.285237][ T5911] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 402.455679][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 402.495921][ T5911] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 402.516667][T12937] veth1_to_bridge: entered promiscuous mode [ 402.531147][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.541685][T12937] veth1_to_bridge: left promiscuous mode [ 402.596861][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.625830][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.637835][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.652460][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.662141][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.918873][ T5911] usb 4-1: GET_CAPABILITIES returned 0 [ 402.938769][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 402.953731][ T5976] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 403.136439][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 403.147920][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.169347][ T5976] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.188231][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.205364][ T5976] usb 3-1: config 0 descriptor?? [ 403.297704][ T5869] usb 4-1: USB disconnect, device number 49 [ 403.297837][T12920] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 403.444198][ T5976] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 403.797545][T12978] bridge0: port 4(erspan0) entered blocking state [ 403.817861][T12978] bridge0: port 4(erspan0) entered disabled state [ 403.832116][T12978] erspan0: entered allmulticast mode [ 403.843089][T12978] erspan0: entered promiscuous mode [ 403.856687][T12978] bridge0: port 4(erspan0) entered blocking state [ 403.863638][T12978] bridge0: port 4(erspan0) entered forwarding state [ 403.887293][T12981] erspan0: left allmulticast mode [ 403.892607][T12981] erspan0: left promiscuous mode [ 403.903129][T12981] bridge0: port 4(erspan0) entered disabled state [ 403.930565][ T5869] usb 3-1: USB disconnect, device number 41 [ 404.263058][T12990] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2565'. [ 405.453383][T13036] loop2: detected capacity change from 0 to 7 [ 405.506777][T13036] Dev loop2: unable to read RDB block 7 [ 405.512435][T13036] loop2: unable to read partition table [ 405.541343][T13036] loop2: partition table beyond EOD, truncated [ 405.565904][T13036] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.284066][ T5869] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 407.486539][ T5869] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.530280][ T5869] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.550641][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0 [ 407.602409][ T5869] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 407.621907][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.648808][ T5869] usb 7-1: config 0 descriptor?? [ 407.999525][T13130] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 408.056896][T13130] team0: Port device dummy0 added [ 408.073388][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 408.084806][T13135] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 408.116462][T13135] team0: Port device dummy0 removed [ 408.136154][T13135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 408.284196][ T5869] usb 7-1: string descriptor 0 read error: -22 [ 408.487182][ T5869] uclogic 0003:256C:006D.0039: interface is invalid, ignoring [ 408.507320][T13148] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 408.519837][ T5869] usb 7-1: USB disconnect, device number 19 [ 408.657191][T13148] bond2: entered promiscuous mode [ 408.680604][T13148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.732303][T13150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.757274][T13150] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 408.794587][T13150] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 408.847600][T13150] bond2: (slave ip6gre1): making interface the new active one [ 408.868343][T13150] ip6gre1: entered promiscuous mode [ 408.876832][T13157] input: syz1 as /devices/virtual/input/input55 [ 408.890741][T13150] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 409.181957][ T5869] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 409.221217][ T5869] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.685526][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.713991][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.732049][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.768150][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.784776][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.796315][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.820716][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.830600][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.839097][ T5954] hid-generic 0000:007F:0005.003B: unknown main item tag 0x0 [ 409.917535][ T5954] hid-generic 0000:007F:0005.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.958881][T13192] pim6reg1: entered promiscuous mode [ 409.983059][T13192] pim6reg1: entered allmulticast mode [ 410.184375][T13193] fido_id[13193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 410.937689][T13227] netlink: 'syz.2.2652': attribute type 12 has an invalid length. [ 411.003849][ T5869] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 411.043670][ T5985] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 411.183632][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 411.200206][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.236060][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.256181][ T5985] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 411.265932][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 411.283903][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.310304][ T5869] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 411.335943][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.338048][ T5985] usb 7-1: config 0 descriptor?? [ 411.376989][ T5869] usb 4-1: config 0 descriptor?? [ 411.380370][ T5985] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 411.584753][ T5985] gp8psk: usb in 128 operation failed. [ 411.807941][ T5985] gp8psk: usb in 146 operation failed. [ 411.810048][T13218] random: crng reseeded on system resumption [ 411.827320][ T5985] gp8psk: failed to get FW version [ 411.848981][ T5985] gp8psk: usb in 149 operation failed. [ 411.860448][ T5985] gp8psk: failed to get FPGA version [ 411.940873][ T5869] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 412.079738][ T5985] gp8psk: usb out operation failed. [ 412.098204][ T5985] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 412.098666][ T5869] shield 0003:0955:7214.003C: Registered Thunderstrike controller [ 412.143808][ T5985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 412.178467][ T5985] usb 7-1: USB disconnect, device number 20 [ 412.210170][ T5869] shield 0003:0955:7214.003C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 412.316995][ T893] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 412.350543][ T5869] usb 4-1: USB disconnect, device number 50 [ 412.373577][ T893] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.420454][ T893] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.474172][ T893] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 413.517756][T13290] block device autoloading is deprecated and will be removed. [ 413.549496][T13290] syz.0.2667: attempt to access beyond end of device [ 413.549496][T13290] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 413.867772][T13305] netlink: 'syz.0.2672': attribute type 11 has an invalid length. [ 414.545794][T13325] netlink: 'syz.0.2677': attribute type 11 has an invalid length. [ 415.250641][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 415.715396][ T5985] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 415.918669][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 415.940873][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 416.017226][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 416.057883][ T5985] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.100818][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.158753][ T5985] usb 6-1: config 0 descriptor?? [ 416.178691][T13352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 416.245425][ T5985] hub 6-1:0.0: USB hub found [ 416.271181][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 416.379732][T13378] vxlan1: entered promiscuous mode [ 416.447384][ T5985] hub 6-1:0.0: 1 port detected [ 416.563757][ T893] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 416.765855][ T893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.796054][ T893] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.824315][ T893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.852911][ T893] usb 7-1: config 0 descriptor?? [ 416.892263][ T5985] usb 6-1: USB disconnect, device number 29 [ 417.099963][ T893] usbhid 7-1:0.0: can't add hid device: -71 [ 417.125675][ T893] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 417.163370][ T893] usb 7-1: USB disconnect, device number 21 [ 417.663666][ T893] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 417.754037][ T5869] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 417.781027][T13420] input: syz1 as /devices/virtual/input/input57 [ 417.843595][ T893] usb 7-1: Using ep0 maxpacket: 32 [ 417.860662][ T893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.906700][ T893] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 417.920696][ T893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.928930][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 417.937453][ T30] audit: type=1804 audit(1755111023.598:802): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2705" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=49359 res=1 errno=0 [ 417.983172][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 418.001140][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.012378][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.024053][ T893] usb 7-1: config 0 descriptor?? [ 418.034360][ T893] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 418.044733][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.059437][ T5869] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 418.083987][ T893] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 418.114280][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.136218][ T5869] usb 3-1: config 0 descriptor?? [ 418.153925][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 418.162070][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 418.177554][ T10] usb 1-1: config 0 has no interface number 0 [ 418.191755][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 418.202947][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 418.213021][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.225858][ T10] usb 1-1: Product: syz [ 418.230172][ T10] usb 1-1: Manufacturer: syz [ 418.235929][ T10] usb 1-1: SerialNumber: syz [ 418.251447][ T10] usb 1-1: config 0 descriptor?? [ 418.268452][ T10] smsc75xx v1.0.0 [ 418.560552][T13405] random: crng reseeded on system resumption [ 418.585078][ T5985] usb 7-1: USB disconnect, device number 22 [ 418.637921][ T5985] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 418.696018][ T5869] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 418.786806][ T5869] shield 0003:0955:7214.003D: Registered Thunderstrike controller [ 418.808241][ T5869] shield 0003:0955:7214.003D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 418.937304][ T5976] usb 3-1: USB disconnect, device number 42 [ 418.943587][ T9] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 418.978970][ T9] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 419.028419][T13450] netlink: 'syz.3.2712': attribute type 11 has an invalid length. [ 419.047985][ T9] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 419.092840][ T9] shield 0003:0955:7214.003D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 419.148542][ T5985] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 419.296003][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2714'. [ 419.325402][ T5985] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.352866][ T5985] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.386691][ T5985] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.425578][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.490941][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 419.510444][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 419.523762][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 419.543426][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 419.567912][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 419.582849][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 419.595745][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 419.618183][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 419.638271][ T10] usb 1-1: USB disconnect, device number 46 [ 419.684126][ T5985] usb 6-1: usb_control_msg returned -32 [ 419.705874][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 419.718340][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 419.725828][ T5985] usbtmc 6-1:16.0: can't read capabilities [ 419.781706][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 419.812551][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 419.833067][ T9] usb 4-1: string descriptor 0 read error: -71 [ 419.842467][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.855860][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.864258][ T5976] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 419.885797][ T9] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 419.900963][ T9] usb 4-1: no configuration chosen from 1 choice [ 419.921863][ T9] usb 4-1: USB disconnect, device number 51 [ 420.049595][ T5976] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 420.063553][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.103675][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.132694][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.163759][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.197460][ T5976] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.223525][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.240407][ T5976] usb 7-1: config 0 descriptor?? [ 420.274855][T13464] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 420.474723][ T5985] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 420.540887][T13485] kvm: user requested TSC rate below hardware speed [ 420.551914][T13485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 420.653793][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 420.670832][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.697060][ T5985] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 420.711166][ T5976] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xd [ 420.737808][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.767366][ T5976] plantronics 0003:047F:FFFF.003E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 420.771340][ T5985] usb 1-1: config 0 descriptor?? [ 421.007370][ T5911] usb 7-1: USB disconnect, device number 23 [ 421.270597][ T5985] hid_parser_main: 34 callbacks suppressed [ 421.270622][ T5985] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 421.313780][ T5985] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 421.327460][ T5985] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 421.329910][T13503] netlink: 'syz.2.2723': attribute type 11 has an invalid length. [ 421.348579][ T5985] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 421.358561][ T5985] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0 [ 421.381628][ T5985] mcp2221 0003:04D8:00DD.003F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 421.710969][ T5976] usb 1-1: USB disconnect, device number 47 [ 421.957485][ T5985] usb 6-1: USB disconnect, device number 30 [ 423.414134][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 423.605640][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.633524][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 423.657287][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.672588][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 423.687813][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 423.702882][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.721205][ T10] usb 3-1: Product: syz [ 423.733827][ T10] usb 3-1: Manufacturer: syz [ 423.739594][ T10] usb 3-1: SerialNumber: syz [ 423.766048][T13566] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 423.832906][ T5911] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 424.013292][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 424.014749][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 424.040033][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 424.049405][ T5911] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 424.063750][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.082118][ T10] usb 3-1: USB disconnect, device number 43 [ 424.091042][ T5911] usb 4-1: config 0 descriptor?? [ 424.324054][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 424.335821][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 424.366610][ T5911] usb 4-1: USB disconnect, device number 52 [ 424.865881][ T5911] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 424.968147][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 425.043583][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 425.055936][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 425.099720][ T5911] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 425.120513][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.132347][ T5911] usb 4-1: config 0 descriptor?? [ 425.157065][ T5911] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 425.179195][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.180426][ T5911] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 425.209892][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.228372][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 425.245225][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.262606][ T10] usb 3-1: config 0 descriptor?? [ 425.597114][ T5869] usb 4-1: USB disconnect, device number 53 [ 425.615929][ T5869] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 425.705005][ T10] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 425.725700][ T10] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 425.733201][ T10] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 425.741544][ T10] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 425.797030][ T10] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 425.837406][ T10] cm6533_jd 0003:0D8C:0022.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 426.018881][ T5911] usb 3-1: USB disconnect, device number 44 [ 426.084282][ T5985] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 426.261303][ T5985] usb 6-1: config 0 has no interfaces? [ 426.291253][ T5985] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 426.314916][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.342297][ T5985] usb 6-1: Product: syz [ 426.359671][ T5985] usb 6-1: Manufacturer: syz [ 426.366953][ T5985] usb 6-1: SerialNumber: syz [ 426.389917][ T5985] r8152-cfgselector 6-1: Unknown version 0x0000 [ 426.418356][ T5985] r8152-cfgselector 6-1: config 0 descriptor?? [ 426.698085][ T5985] r8152-cfgselector 6-1: USB disconnect, device number 31 [ 427.274069][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 427.459485][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 427.477623][ T10] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 427.495189][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 427.514571][ T10] usb 3-1: New USB device found, idVendor=5cf2, idProduct=0c10, bcdDevice= 0.00 [ 427.534916][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.546525][ T10] usb 3-1: config 0 descriptor?? [ 427.885972][ T5985] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 428.075983][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.120535][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.162065][ T5985] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 428.164966][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 428.172364][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.204277][ T5985] usb 6-1: config 0 descriptor?? [ 428.255359][T13678] netlink: 'syz.0.2794': attribute type 12 has an invalid length. [ 428.283580][T13678] netlink: 'syz.0.2794': attribute type 29 has an invalid length. [ 428.291686][T13678] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2794'. [ 428.309900][T13679] netlink: 'syz.0.2794': attribute type 12 has an invalid length. [ 428.348412][T13679] netlink: 'syz.0.2794': attribute type 29 has an invalid length. [ 428.388616][T13679] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2794'. [ 428.413054][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.430269][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.467578][ T9] usb 4-1: Product: syz [ 428.474237][ T9] usb 4-1: Manufacturer: syz [ 428.489028][ T9] usb 4-1: SerialNumber: syz [ 428.547625][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 428.567248][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.599657][ T10] usb 3-1: USB disconnect, device number 45 [ 428.658332][ T5985] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 428.702537][ T5985] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 428.712317][ T5985] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 428.720853][ T5985] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 428.728863][ T5985] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 428.746934][ T5985] cm6533_jd 0003:0D8C:0022.0041: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 428.765989][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 428.914354][ T5976] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 428.947853][ T24] usb 6-1: USB disconnect, device number 32 [ 429.110500][ T5976] usb 7-1: config 0 has no interfaces? [ 429.117503][ T5976] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.136642][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.156927][ T5976] usb 7-1: config 0 descriptor?? [ 429.403217][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.424869][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.438588][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.456665][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.472931][ T893] usb 7-1: USB disconnect, device number 24 [ 429.554868][ T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 429.561381][ T9] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 429.573697][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 429.745687][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.766418][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.773765][ T9] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 429.793687][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.810118][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.833961][ T9] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 429.857475][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.868566][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.884370][ T9] usb 4-1: USB disconnect, device number 54 [ 429.905261][ T9] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 429.920842][ T24] usb 1-1: config 0 descriptor?? [ 429.955290][ T893] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 430.133799][ T893] usb 7-1: Using ep0 maxpacket: 16 [ 430.144787][ T893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.163597][ T893] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00 [ 430.203673][ T893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.226600][ T893] usb 7-1: config 0 descriptor?? [ 430.247963][ T893] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 430.356888][ T24] plantronics 0003:047F:FFFF.0042: ignoring exceeding usage max [ 430.468311][ T24] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 430.639814][ T893] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 430.653606][ T893] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 430.698812][ T893] usbhid 7-1:0.0: can't add hid device: -71 [ 430.718333][ T893] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 430.764311][ T893] usb 7-1: USB disconnect, device number 25 [ 431.047488][T13715] loop2: detected capacity change from 0 to 7 [ 431.077095][T13715] Dev loop2: unable to read RDB block 7 [ 431.093215][T13715] loop2: unable to read partition table [ 431.111199][T13715] loop2: partition table beyond EOD, truncated [ 431.143673][T13715] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.580810][T13724] input: syz1 as /devices/virtual/input/input60 [ 432.526612][ T24] usb 1-1: USB disconnect, device number 48 [ 433.214686][T13756] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 433.260344][T13756] bond2: entered promiscuous mode [ 433.266652][T13756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.289921][ T5985] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 433.492513][T13756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.499632][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 433.526720][ T5985] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.546884][T13756] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.569918][ T5985] usb 1-1: config 0 has no interface number 0 [ 433.583866][T13756] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 433.591839][ T5985] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 433.648471][T13756] bond2: (slave vxcan3): making interface the new active one [ 433.653646][ T5985] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 433.672129][T13756] vxcan3: entered promiscuous mode [ 433.690728][T13756] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 433.706987][ T5985] usb 1-1: config 0 interface 41 has no altsetting 0 [ 433.749466][ T5985] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 433.779656][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.804535][ T5985] usb 1-1: Product: syz [ 433.813998][ T5985] usb 1-1: Manufacturer: syz [ 433.818653][ T5985] usb 1-1: SerialNumber: syz [ 433.866699][ T5985] usb 1-1: config 0 descriptor?? [ 433.892023][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.907974][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.182808][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.189221][T13725] syz.2.2813 (13725): drop_caches: 2 [ 434.196347][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.519500][ T5954] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 434.580458][T13784] team0: entered promiscuous mode [ 434.587221][T13784] team_slave_0: entered promiscuous mode [ 434.593399][T13784] team_slave_1: entered promiscuous mode [ 434.610341][T13784] batadv_slave_0: entered promiscuous mode [ 434.617954][T13782] batadv_slave_0: left promiscuous mode [ 434.631115][T13782] team0: left promiscuous mode [ 434.636156][ T5985] Error reading MAC address [ 434.641780][T13782] team_slave_0: left promiscuous mode [ 434.652573][T13782] team_slave_1: left promiscuous mode [ 434.660320][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.669288][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.714015][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 434.725784][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.757838][ T5954] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.773752][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 434.803130][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.842400][ T5954] usb 4-1: config 0 descriptor?? [ 434.898511][ T5985] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 434.933855][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 434.943013][ T5985] usb 1-1: USB disconnect, device number 49 [ 434.945376][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 434.976755][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 435.028991][ T10] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 435.086666][ T10] usb 6-1: Product: syz [ 435.095109][ T5954] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 435.121401][ T10] usb 6-1: Manufacturer: syz [ 435.132630][ T10] usb 6-1: SerialNumber: syz [ 435.150589][ T30] audit: type=1326 audit(1755111040.818:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.278959][ T30] audit: type=1326 audit(1755111040.818:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.319467][ T30] audit: type=1326 audit(1755111040.828:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.353301][ T30] audit: type=1326 audit(1755111040.828:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.356141][ T10] usb 6-1: config 0 descriptor?? [ 435.391954][ T30] audit: type=1326 audit(1755111040.828:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.436453][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 435.452675][ T30] audit: type=1326 audit(1755111040.828:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.489390][ T30] audit: type=1326 audit(1755111040.828:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.517341][ T30] audit: type=1326 audit(1755111040.828:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.573085][ T30] audit: type=1326 audit(1755111040.828:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 435.608189][ T5985] usb 4-1: USB disconnect, device number 55 [ 435.627267][ T30] audit: type=1326 audit(1755111040.828:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 436.499878][ T10] gspca_zc3xx: reg_w_i err -71 [ 436.505814][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 436.533734][ T5985] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 436.677938][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.696045][ T5985] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.702041][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 436.719362][ T5985] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.725354][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 436.749566][ T5985] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.751882][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.779089][ T5985] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 436.782782][ T9] usb 7-1: config 0 descriptor?? [ 436.803857][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 436.815431][ T5985] usb 4-1: Product: syz [ 436.819669][ T5985] usb 4-1: Manufacturer: syz [ 436.824929][ T5985] usb 4-1: SerialNumber: syz [ 437.050602][ T5985] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 437.113886][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 437.121079][ T10] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 437.140963][ T10] usb 6-1: USB disconnect, device number 33 [ 437.219162][ T9] kovaplus 0003:1E7D:2D50.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 437.271888][ T5985] usb 4-1: USB disconnect, device number 56 [ 437.294425][ T5985] usblp0: removed [ 437.469061][T13824] loop6: detected capacity change from 0 to 7 [ 437.482632][ T5963] Dev loop6: unable to read RDB block 7 [ 437.493831][ T5963] loop6: unable to read partition table [ 437.499867][ T5963] loop6: partition table beyond EOD, truncated [ 437.521489][T13824] Dev loop6: unable to read RDB block 7 [ 437.533627][T13824] loop6: unable to read partition table [ 437.544311][T13824] loop6: partition table beyond EOD, truncated [ 437.560893][T13824] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.924734][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 437.958957][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 438.058171][ T9] kovaplus 0003:1E7D:2D50.0043: couldn't init struct kovaplus_device [ 438.084439][ T9] kovaplus 0003:1E7D:2D50.0043: couldn't install mouse [ 438.105416][ T9] kovaplus 0003:1E7D:2D50.0043: probe with driver kovaplus failed with error -71 [ 438.148317][ T9] usb 7-1: USB disconnect, device number 26 [ 438.353573][ T5954] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 438.395382][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 438.509608][ T5954] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 438.520623][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.529640][ T5954] usb 3-1: Product: syz [ 438.534502][ T5954] usb 3-1: Manufacturer: syz [ 438.539137][ T5954] usb 3-1: SerialNumber: syz [ 438.553626][ T5954] usb 3-1: config 0 descriptor?? [ 438.573539][ T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 438.582556][ T5954] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 438.593867][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 438.611526][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.630753][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 438.643223][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.663336][ T10] usb 1-1: config 0 descriptor?? [ 438.744104][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 438.766661][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.793732][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.831587][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.872263][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.892337][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.911615][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 438.952866][ T44] usb 4-1: config 0 descriptor?? [ 439.180204][T13868] netlink: 'syz.5.2873': attribute type 27 has an invalid length. [ 439.402989][ T5985] usb 1-1: USB disconnect, device number 50 [ 439.445334][ T44] HID 045e:07da: Invalid code 65791 type 1 [ 439.480182][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0044/input/input61 [ 439.562641][ T44] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 439.627920][T13879] loop2: detected capacity change from 0 to 7 [ 439.641572][T13879] Dev loop2: unable to read RDB block 7 [ 439.680167][T13879] loop2: AHDI p2 p3 [ 439.701849][T13879] loop2: partition table partially beyond EOD, truncated [ 439.731755][T13879] loop2: p3 start 335544320 is beyond EOD, truncated [ 439.745340][ T10] usb 4-1: USB disconnect, device number 57 [ 439.816945][ T5954] gspca_sunplus: reg_r err -71 [ 439.821860][ T5954] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 439.847181][ T5954] usb 3-1: USB disconnect, device number 46 [ 440.190589][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201189][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.300764][T13871] syz.6.2874 (13871): drop_caches: 2 [ 440.804391][ T893] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 441.403686][ T893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.433181][ T893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 441.449963][ T893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 441.460735][ T893] usb 3-1: Product: syz [ 441.470883][ T893] usb 3-1: Manufacturer: syz [ 441.479981][ T893] usb 3-1: SerialNumber: syz [ 441.572860][T13923] ======================================================= [ 441.572860][T13923] WARNING: The mand mount option has been deprecated and [ 441.572860][T13923] and is ignored by this kernel. Remove the mand [ 441.572860][T13923] option from the mount to silence this warning. [ 441.572860][T13923] ======================================================= [ 441.607799][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.673558][ T5985] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 441.734745][ T893] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 441.834047][ T5985] usb 7-1: Using ep0 maxpacket: 8 [ 441.856995][ T5985] usb 7-1: unable to get BOS descriptor or descriptor too short [ 441.892486][ T5985] usb 7-1: config 7 has an invalid interface number: 204 but max is 0 [ 441.942677][ T5985] usb 7-1: config 7 has no interface number 0 [ 441.963229][ T5985] usb 7-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 441.989087][ T5985] usb 7-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 442.005094][ T5985] usb 7-1: config 7 interface 204 has no altsetting 0 [ 442.020027][ T5985] usb 7-1: string descriptor 0 read error: -22 [ 442.031994][ T5985] usb 7-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 442.054196][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.096395][ T5985] hub 7-1:7.204: bad descriptor, ignoring hub [ 442.108274][ T5985] hub 7-1:7.204: probe with driver hub failed with error -5 [ 442.317684][ T5985] asix 7-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 442.658490][T13946] netlink: 'syz.3.2908': attribute type 27 has an invalid length. [ 442.727528][ T5985] asix 7-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 442.794468][ T5954] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 442.806318][ T5985] asix 7-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 442.823532][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 442.823576][ T30] audit: type=1326 audit(1755111048.478:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 442.919710][ T30] audit: type=1326 audit(1755111048.478:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.027258][ T5985] asix 7-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 443.045072][ T30] audit: type=1326 audit(1755111048.478:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.045138][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.087600][ T5985] asix 7-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 443.135552][ T30] audit: type=1326 audit(1755111048.478:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.174664][ T30] audit: type=1326 audit(1755111048.478:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.197224][ T5954] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 443.235187][ T5954] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.250997][ T30] audit: type=1326 audit(1755111048.488:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.273917][ T30] audit: type=1326 audit(1755111048.488:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.295946][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.302844][ T30] audit: type=1326 audit(1755111048.488:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 443.327784][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 443.342042][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 443.356922][ T5985] asix 7-1:7.204 eth9: register 'asix' at usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet, b6:21:a1:e2:08:b6 [ 443.373524][ T5954] usb 6-1: Product: syz [ 443.381714][ T5954] usb 6-1: Manufacturer: syz [ 443.396291][ T30] audit: type=1326 audit(1755111048.488:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8558 code=0x7ffc0000 [ 443.420825][ T5954] usb 6-1: SerialNumber: syz [ 443.505838][ T30] audit: type=1326 audit(1755111048.488:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13941 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 443.527893][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.666945][ T5985] usb 7-1: reset high-speed USB device number 27 using dummy_hcd [ 443.708454][ T5954] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 443.837736][ T5985] usb 7-1: unable to get BOS descriptor or descriptor too short [ 444.041662][ T5954] usb 6-1: USB disconnect, device number 34 [ 444.083798][ T5954] usblp1: removed [ 444.384062][ T5954] usb 7-1: USB disconnect, device number 27 [ 444.390972][ T5954] asix 7-1:7.204 eth9: unregister 'asix' usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet [ 445.034610][T13995] netlink: 'syz.3.2918': attribute type 12 has an invalid length. [ 445.066564][T13995] netlink: 'syz.3.2918': attribute type 29 has an invalid length. [ 445.093660][T13995] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2918'. [ 445.102760][T13995] netlink: 'syz.3.2918': attribute type 2 has an invalid length. [ 445.136157][T13995] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2918'. [ 446.036742][ T5954] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 446.212474][ T5954] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.231998][ T5954] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.261202][ T5954] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.284416][ T5954] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 446.310515][ T5954] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 446.359022][ T5954] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.377899][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.393572][ T893] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 446.402875][ T5954] usb 7-1: Product: syz [ 446.412604][ T5954] usb 7-1: Manufacturer: syz [ 446.452526][ T5954] cdc_wdm 7-1:1.0: skipping garbage [ 446.468388][ T5954] cdc_wdm 7-1:1.0: skipping garbage [ 446.498962][ T5954] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 446.515671][ T5954] cdc_wdm 7-1:1.0: Unknown control protocol [ 446.563949][ T893] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 446.578217][ T893] usb 6-1: config 0 has no interface number 0 [ 446.677393][ T5954] usb 7-1: USB disconnect, device number 28 [ 446.683898][ T893] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 446.709989][ T893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.732984][T14027] netlink: 'syz.0.2930': attribute type 27 has an invalid length. [ 446.750870][ T893] usb 6-1: Product: syz [ 446.781098][ T893] usb 6-1: Manufacturer: syz [ 446.793009][ T893] usb 6-1: SerialNumber: syz [ 446.811011][ T893] usb 6-1: config 0 descriptor?? [ 446.825100][ T893] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 446.836866][ T893] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 446.874277][T14030] syzkaller0: mtu greater than device maximum [ 447.332285][ T893] usb 6-1: USB disconnect, device number 35 [ 447.364218][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 447.529797][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.551683][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 447.583566][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.601726][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 447.631591][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 447.661085][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.673636][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.681770][ T10] usb 7-1: Product: syz [ 447.695596][ T10] usb 7-1: Manufacturer: syz [ 447.707557][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 447.712825][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 447.737502][ T10] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 447.744365][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 447.970141][ T10] usb 7-1: USB disconnect, device number 29 [ 448.387056][T14063] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 448.417860][T14063] kvm: Disabled LAPIC found during irq injection [ 448.543557][ T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 448.651472][ T5869] usb 3-1: USB disconnect, device number 47 [ 448.700839][ T5869] usblp0: removed [ 448.742317][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.783010][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.816995][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.837344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.098803][ T10] usb 6-1: usb_control_msg returned -32 [ 449.118666][ T10] usbtmc 6-1:16.0: can't read capabilities [ 449.152434][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 449.167518][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 449.183377][T14089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2956'. [ 449.193934][T14089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2956'. [ 449.517261][T14100] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 449.567237][ T10] usb 6-1: USB disconnect, device number 36 [ 451.130298][T14145] input: syz1 as /devices/virtual/input/input62 [ 451.720078][T14148] loop6: detected capacity change from 0 to 524287999 [ 454.853609][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031bc8000: rx timeout, send abort [ 455.362019][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031bc8000: abort rx timeout. Force session deactivation [ 456.666320][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.672551][T14185] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 457.115782][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 457.272742][T10046] syz_tun (unregistering): left allmulticast mode [ 457.285477][ T5954] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 457.305312][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 457.319264][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 457.326657][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 457.332037][T10046] team0: Port device macvlan0 removed [ 457.336880][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.365022][ T24] usb 6-1: config 0 descriptor?? [ 457.446901][ T5954] usb 4-1: config 0 has no interfaces? [ 457.452525][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.482463][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.503961][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 457.504635][ T5954] usb 4-1: config 0 descriptor?? [ 457.665657][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.677789][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.688251][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.697700][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.710239][T14248] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 457.725956][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.870046][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.894184][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.936686][ T893] usb 4-1: USB disconnect, device number 58 [ 457.939422][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 458.002465][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.050461][ T24] usb 6-1: USB disconnect, device number 37 [ 458.070395][ T5954] usb 3-1: USB disconnect, device number 48 [ 458.152428][T11058] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.291421][T11058] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.416333][T11058] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.431182][T14261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.441802][T14261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.456174][T14261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.480738][T14261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.497357][T14261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.769884][T11058] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.444248][ T5869] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 459.511913][T11058] bridge_slave_1: left allmulticast mode [ 459.531141][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.563224][T11058] bridge_slave_0: left allmulticast mode [ 459.586313][T11058] bridge_slave_0: left promiscuous mode [ 459.599978][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.603732][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 459.631529][ T5869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.658417][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.680771][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 459.712558][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 459.737158][ T5869] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.750595][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.815859][ T5869] hub 6-1:1.0: bad descriptor, ignoring hub [ 459.822712][ T5869] hub 6-1:1.0: probe with driver hub failed with error -5 [ 459.879259][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 459.891504][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 459.928880][ T5869] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 459.950957][ T5869] cdc_wdm 6-1:1.0: Unknown control protocol [ 460.433374][ T5954] usb 6-1: USB disconnect, device number 38 [ 460.584101][ T5864] Bluetooth: hci3: command tx timeout [ 460.813894][ T5954] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 461.585036][ T5954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.603635][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.612618][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 461.769565][ T5954] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 461.786046][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.388495][T14263] chnl_net:caif_netlink_parms(): no params data found [ 462.663717][ T5864] Bluetooth: hci3: command tx timeout [ 462.829873][ T5954] usb 6-1: can't set config #1, error -71 [ 462.881064][T11058] hsr_slave_0: left promiscuous mode [ 462.952083][T11058] hsr_slave_1: left promiscuous mode [ 462.965033][ T5954] usb 6-1: USB disconnect, device number 39 [ 462.985106][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.992556][T11058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.102799][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.150516][T11058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.293027][T11058] veth1_macvtap: left promiscuous mode [ 464.093975][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 464.093997][ T30] audit: type=1326 audit(1755111069.758:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.0.3054" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff8539 code=0x0 [ 464.379612][ T5869] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 464.405339][T11058] team0 (unregistering): Port device team_slave_1 removed [ 464.470465][T11058] team0 (unregistering): Port device team_slave_0 removed [ 464.543598][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 464.551050][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806e8aa000: rx timeout, send abort [ 464.552104][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.571106][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 464.580357][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.597627][ T5869] usb 4-1: config 0 descriptor?? [ 464.619551][ T5869] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 464.747506][ T5864] Bluetooth: hci3: command tx timeout [ 465.059430][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806e8aa000: abort rx timeout. Force session deactivation [ 465.716469][T14263] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.748637][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.763926][T14263] bridge_slave_0: entered allmulticast mode [ 465.803646][ T5954] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 465.806266][T14263] bridge_slave_0: entered promiscuous mode [ 465.833213][ T5869] gspca_vc032x: reg_w err -71 [ 465.838231][ T5869] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 465.879337][ T5869] usb 4-1: USB disconnect, device number 59 [ 465.886032][T14263] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.917984][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.954682][T14263] bridge_slave_1: entered allmulticast mode [ 465.987386][T14263] bridge_slave_1: entered promiscuous mode [ 465.989564][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.040626][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.056475][ T5954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.076292][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.114065][ T5954] usb 1-1: Product: syz [ 466.124510][ T5954] usb 1-1: Manufacturer: syz [ 466.143481][ T5954] usb 1-1: SerialNumber: syz [ 466.188747][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.253060][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.396742][ T5954] usb 1-1: 0:2 : does not exist [ 466.434500][ T5954] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 466.543534][ T5954] usb 1-1: USB disconnect, device number 51 [ 466.627836][T14263] team0: Port device team_slave_0 added [ 466.682446][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.682731][T14263] team0: Port device team_slave_1 added [ 466.826958][ T5864] Bluetooth: hci3: command tx timeout [ 466.944271][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.951365][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.987456][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.021328][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.046493][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.083521][ T5869] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 467.133497][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.265125][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 467.302624][ T5869] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 467.337965][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.362823][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.401097][T14263] hsr_slave_0: entered promiscuous mode [ 467.423993][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.449563][T14263] hsr_slave_1: entered promiscuous mode [ 467.463948][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.472962][T14263] debugfs: 'hsr0' already exists in 'hsr' [ 467.483541][ T5869] usb 4-1: Product: syz [ 467.487854][ T5869] usb 4-1: Manufacturer: syz [ 467.499645][T14263] Cannot create hsr debugfs directory [ 467.505792][ T5869] usb 4-1: SerialNumber: syz [ 467.753852][ T5976] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 467.917045][ T5976] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.935931][ T5976] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.952664][ T5869] usb 4-1: 0:2 : does not exist [ 467.974646][ T5976] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.994678][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.074066][T14428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.792306][ T5869] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 468.870938][ T5976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.879187][T14263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.892273][ T5869] usb 4-1: USB disconnect, device number 60 [ 468.938589][T14263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.052996][T14263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.135533][ T5976] usb 1-1: USB disconnect, device number 52 [ 469.160282][T14263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.348697][T14261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.361180][T14261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.372122][T14261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.386156][T14261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.402362][T14261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.935540][T14485] syz.5.3090 (14485): drop_caches: 4 [ 469.978676][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.327674][T14263] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.496188][T14263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.511950][T14263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.546842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.554103][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.567127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.574372][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.754575][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.831304][T14468] chnl_net:caif_netlink_parms(): no params data found [ 471.418618][T14468] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.435914][T14468] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.451148][T14468] bridge_slave_0: entered allmulticast mode [ 471.464131][ T5864] Bluetooth: hci0: command tx timeout [ 471.487319][T14468] bridge_slave_0: entered promiscuous mode [ 471.506941][T14468] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.521878][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.531473][T14468] bridge_slave_1: entered allmulticast mode [ 471.549153][T14468] bridge_slave_1: entered promiscuous mode [ 471.566556][T14263] veth0_vlan: entered promiscuous mode [ 471.759106][T14468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.776273][T14263] veth1_vlan: entered promiscuous mode [ 471.789907][T14468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.939542][T14468] team0: Port device team_slave_0 added [ 471.967344][T14468] team0: Port device team_slave_1 added [ 472.117552][T14468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.133783][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.194584][T14468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.268088][T14468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.289697][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.330102][T14468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.429766][T14263] veth0_macvtap: entered promiscuous mode [ 472.447110][ T30] audit: type=1326 audit(1755111078.108:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.3.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 472.469142][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.648584][T14468] hsr_slave_0: entered promiscuous mode [ 472.672628][T14468] hsr_slave_1: entered promiscuous mode [ 472.696837][T14468] debugfs: 'hsr0' already exists in 'hsr' [ 472.713602][T14468] Cannot create hsr debugfs directory [ 472.798185][T14263] veth1_macvtap: entered promiscuous mode [ 473.055638][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.233005][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.543598][ T5864] Bluetooth: hci0: command tx timeout [ 473.775079][T11058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.913732][ T5196] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 473.995777][T11058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.119728][ T5196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 474.190865][T11058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.210886][ T5196] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 474.256854][T11058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.303572][ T5196] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 474.312852][ T5196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.427344][ T5196] usb 4-1: config 0 descriptor?? [ 474.477435][T14584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 474.925171][T14592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3117'. [ 474.948618][T11056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.984610][ T5196] apple 0003:05AC:0264.0045: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.3-1/input0 [ 475.003762][T11056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.115065][T14468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.145930][ T5196] usb 4-1: USB disconnect, device number 61 [ 475.168973][T14468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.218053][T14468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 475.237583][T14596] fido_id[14596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 475.251185][T11058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.283203][T14468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 475.294960][T11058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.624533][ T5864] Bluetooth: hci0: command tx timeout [ 475.730787][T14468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.820852][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.889971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.897216][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.987158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.994410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.271148][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.335386][ T5976] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 476.381545][T14468] veth0_vlan: entered promiscuous mode [ 476.401811][T14468] veth1_vlan: entered promiscuous mode [ 476.413624][ T5196] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 476.462501][T14468] veth0_macvtap: entered promiscuous mode [ 476.481736][T14468] veth1_macvtap: entered promiscuous mode [ 476.493865][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 476.501323][ T5976] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 476.517530][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.539129][ T5976] usb 4-1: config 0 descriptor?? [ 476.545848][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.577627][T14468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.596532][ T5196] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 476.612730][ T5196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.628421][ T77] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.642779][ T5196] usb 7-1: config 0 descriptor?? [ 476.655518][ T77] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.671993][ T5196] usb 7-1: selecting invalid altsetting 1 [ 476.685873][ T77] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.717893][ T77] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.856874][ T5196] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 476.914964][ T5196] usb 7-1: USB disconnect, device number 30 [ 476.986613][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.002714][ T30] audit: type=1326 audit(1755111082.668:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14631 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7fc00000 [ 477.036117][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.170856][T11058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.198441][T11058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.713865][ T5864] Bluetooth: hci0: command tx timeout [ 477.874320][ T5976] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 477.903664][ T5976] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 477.950372][ T5976] asix 4-1:0.0: probe with driver asix failed with error -71 [ 477.972402][ T5976] usb 4-1: USB disconnect, device number 62 [ 478.737066][T14684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.744811][T14684] IPv6: NLM_F_CREATE should be set when creating new route [ 479.565929][T14699] loop9: detected capacity change from 0 to 7 [ 479.596234][T14699] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 479.601621][T14699] loop9: partition table partially beyond EOD, truncated [ 479.641203][T14699] loop9: p1 size 501170297 extends beyond EOD, truncated [ 479.711581][ T5869] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 479.722310][T14701] loop3: detected capacity change from 0 to 1 [ 479.760394][T14701] Dev loop3: unable to read RDB block 1 [ 479.781151][T14701] loop3: unable to read partition table [ 479.809670][T14701] loop3: partition table beyond EOD, truncated [ 479.822564][T14701] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.878240][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 479.912498][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3151'. [ 479.922647][ T5869] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 479.944766][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.999072][ T5869] usb 8-1: config 0 descriptor?? [ 480.035398][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3151'. [ 480.059923][ T5869] usb 8-1: selecting invalid altsetting 1 [ 480.198733][ T5869] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 480.235363][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.322345][ T5869] usb 8-1: USB disconnect, device number 2 [ 481.072221][T14735] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.079163][T14735] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 481.901999][T14763] loop9: detected capacity change from 0 to 7 [ 481.952811][T14763] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 481.958965][T14766] loop6: detected capacity change from 0 to 1 [ 481.974544][T14766] Dev loop6: unable to read RDB block 1 [ 481.980314][T14763] loop9: partition table partially beyond EOD, truncated [ 481.987084][T14766] loop6: unable to read partition table [ 481.995753][T14763] loop9: p1 size 501170297 extends beyond EOD, truncated [ 482.009336][T14766] loop6: partition table beyond EOD, truncated [ 482.031309][T14766] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.175660][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 482.963635][ T983] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 483.136305][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.153493][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.197773][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.223528][ T983] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.223882][ T5985] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 483.247449][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.303769][ T983] usb 7-1: config 0 descriptor?? [ 483.440537][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.472660][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 483.518377][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.550906][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.583581][ T5985] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.633877][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.662441][ T5985] usb 4-1: config 0 descriptor?? [ 483.672264][T14783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.752915][ T983] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 484.072393][T14813] [ 484.074779][T14813] ===================================================== [ 484.081730][T14813] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 484.089231][T14813] 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 Not tainted [ 484.096367][T14813] ----------------------------------------------------- [ 484.103344][T14813] syz.0.3197/14813 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 484.111093][T14813] ffff888057cca360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 484.119852][T14813] [ 484.119852][T14813] and this task is already holding: [ 484.127239][T14813] ffff8880242ee028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 484.137026][T14813] which would create a new lock dependency: [ 484.142916][T14813] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 484.151034][T14813] [ 484.151034][T14813] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 484.160490][T14813] (&client->buffer_lock){..-.}-{3:3} [ 484.160521][T14813] [ 484.160521][T14813] ... which became SOFTIRQ-irq-safe at: [ 484.173593][T14813] lock_acquire+0x120/0x360 [ 484.178218][T14813] _raw_spin_lock+0x2e/0x40 [ 484.182819][T14813] evdev_pass_values+0xb9/0xbd0 [ 484.187776][T14813] evdev_events+0x1e6/0x340 [ 484.192386][T14813] input_pass_values+0x285/0x890 [ 484.197422][T14813] input_event_dispose+0x3e5/0x6b0 [ 484.202635][T14813] input_event+0x89/0xe0 [ 484.206977][T14813] hidinput_hid_event+0x132c/0x1c90 [ 484.212275][T14813] hid_process_event+0x4be/0x620 [ 484.217304][T14813] hid_report_raw_event+0xe91/0x16d0 [ 484.222691][T14813] hid_input_report+0x43e/0x520 [ 484.227647][T14813] hid_irq_in+0x47e/0x6d0 [ 484.232076][T14813] __usb_hcd_giveback_urb+0x41a/0x690 [ 484.237543][T14813] dummy_timer+0x862/0x4550 [ 484.242144][T14813] __hrtimer_run_queues+0x52c/0xc60 [ 484.247433][T14813] hrtimer_run_softirq+0x187/0x2b0 [ 484.252642][T14813] handle_softirqs+0x283/0x870 [ 484.257501][T14813] __irq_exit_rcu+0xca/0x1f0 [ 484.262183][T14813] irq_exit_rcu+0x9/0x30 [ 484.266519][T14813] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 484.272253][T14813] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.278335][T14813] kasan_check_range+0x79/0x2c0 [ 484.283308][T14813] free_swap_cache+0x63/0x300 [ 484.288082][T14813] free_pages_and_swap_cache+0x17a/0x520 [ 484.293900][T14813] tlb_flush_mmu+0x3a0/0x680 [ 484.298613][T14813] tlb_finish_mmu+0xc3/0x1d0 [ 484.303318][T14813] exit_mmap+0x44c/0xb50 [ 484.307659][T14813] __mmput+0x118/0x420 [ 484.311827][T14813] exit_mm+0x1da/0x2c0 [ 484.315996][T14813] do_exit+0x648/0x2300 [ 484.320247][T14813] __pfx_do_group_exit+0x0/0x10 [ 484.325195][T14813] ia32_sys_call+0x21d7/0x2200 [ 484.330051][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 484.335260][T14813] do_fast_syscall_32+0x34/0x80 [ 484.340210][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.346630][T14813] [ 484.346630][T14813] to a SOFTIRQ-irq-unsafe lock: [ 484.353653][T14813] (tasklist_lock){.+.+}-{3:3} [ 484.353690][T14813] [ 484.353690][T14813] ... which became SOFTIRQ-irq-unsafe at: [ 484.366332][T14813] ... [ 484.366339][T14813] lock_acquire+0x120/0x360 [ 484.373620][T14813] _raw_read_lock+0x36/0x50 [ 484.378375][T14813] __do_wait+0xde/0x740 [ 484.382658][T14813] do_wait+0x1f8/0x520 [ 484.386834][T14813] kernel_wait+0xab/0x170 [ 484.391278][T14813] call_usermodehelper_exec_work+0xbe/0x230 [ 484.397284][T14813] process_scheduled_works+0xade/0x17b0 [ 484.402934][T14813] worker_thread+0x8a0/0xda0 [ 484.407632][T14813] kthread+0x70e/0x8a0 [ 484.411804][T14813] ret_from_fork+0x3f9/0x770 [ 484.416499][T14813] ret_from_fork_asm+0x1a/0x30 [ 484.421369][T14813] [ 484.421369][T14813] other info that might help us debug this: [ 484.421369][T14813] [ 484.431622][T14813] Chain exists of: [ 484.431622][T14813] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 484.431622][T14813] [ 484.444783][T14813] Possible interrupt unsafe locking scenario: [ 484.444783][T14813] [ 484.453120][T14813] CPU0 CPU1 [ 484.458492][T14813] ---- ---- [ 484.463856][T14813] lock(tasklist_lock); [ 484.468114][T14813] local_irq_disable(); [ 484.474867][T14813] lock(&client->buffer_lock); [ 484.482252][T14813] lock(&new->fa_lock); [ 484.489025][T14813] [ 484.492483][T14813] lock(&client->buffer_lock); [ 484.497515][T14813] [ 484.497515][T14813] *** DEADLOCK *** [ 484.497515][T14813] [ 484.505661][T14813] 7 locks held by syz.0.3197/14813: [ 484.510955][T14813] #0: ffff888147783118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 484.520122][T14813] #1: ffff888020b18230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 484.530255][T14813] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 484.539956][T14813] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 484.549586][T14813] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 484.558771][T14813] #5: ffff8880242ee028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 484.568986][T14813] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 484.578066][T14813] [ 484.578066][T14813] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 484.588478][T14813] -> (&client->buffer_lock){..-.}-{3:3} { [ 484.594236][T14813] IN-SOFTIRQ-W at: [ 484.598255][T14813] lock_acquire+0x120/0x360 [ 484.604432][T14813] _raw_spin_lock+0x2e/0x40 [ 484.610632][T14813] evdev_pass_values+0xb9/0xbd0 [ 484.617152][T14813] evdev_events+0x1e6/0x340 [ 484.623335][T14813] input_pass_values+0x285/0x890 [ 484.629940][T14813] input_event_dispose+0x3e5/0x6b0 [ 484.636707][T14813] input_event+0x89/0xe0 [ 484.642608][T14813] hidinput_hid_event+0x132c/0x1c90 [ 484.649472][T14813] hid_process_event+0x4be/0x620 [ 484.656063][T14813] hid_report_raw_event+0xe91/0x16d0 [ 484.663034][T14813] hid_input_report+0x43e/0x520 [ 484.669637][T14813] hid_irq_in+0x47e/0x6d0 [ 484.675628][T14813] __usb_hcd_giveback_urb+0x41a/0x690 [ 484.682669][T14813] dummy_timer+0x862/0x4550 [ 484.688833][T14813] __hrtimer_run_queues+0x52c/0xc60 [ 484.695687][T14813] hrtimer_run_softirq+0x187/0x2b0 [ 484.702456][T14813] handle_softirqs+0x283/0x870 [ 484.708881][T14813] __irq_exit_rcu+0xca/0x1f0 [ 484.715126][T14813] irq_exit_rcu+0x9/0x30 [ 484.721021][T14813] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 484.728321][T14813] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.735972][T14813] kasan_check_range+0x79/0x2c0 [ 484.742509][T14813] free_swap_cache+0x63/0x300 [ 484.748861][T14813] free_pages_and_swap_cache+0x17a/0x520 [ 484.756158][T14813] tlb_flush_mmu+0x3a0/0x680 [ 484.762411][T14813] tlb_finish_mmu+0xc3/0x1d0 [ 484.768689][T14813] exit_mmap+0x44c/0xb50 [ 484.774600][T14813] __mmput+0x118/0x420 [ 484.780336][T14813] exit_mm+0x1da/0x2c0 [ 484.786096][T14813] do_exit+0x648/0x2300 [ 484.791915][T14813] __pfx_do_group_exit+0x0/0x10 [ 484.798434][T14813] ia32_sys_call+0x21d7/0x2200 [ 484.804889][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 484.811685][T14813] do_fast_syscall_32+0x34/0x80 [ 484.818204][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.826282][T14813] INITIAL USE at: [ 484.830221][T14813] lock_acquire+0x120/0x360 [ 484.836304][T14813] _raw_spin_lock+0x2e/0x40 [ 484.842386][T14813] evdev_pass_values+0xb9/0xbd0 [ 484.848814][T14813] evdev_events+0x1e6/0x340 [ 484.854891][T14813] input_pass_values+0x285/0x890 [ 484.861408][T14813] input_event_dispose+0x330/0x6b0 [ 484.868087][T14813] input_inject_event+0x1dd/0x340 [ 484.874771][T14813] evdev_write+0x2fc/0x480 [ 484.880766][T14813] vfs_write+0x27b/0xb30 [ 484.886583][T14813] ksys_write+0x145/0x250 [ 484.892491][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 484.899286][T14813] do_fast_syscall_32+0x34/0x80 [ 484.905720][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.913643][T14813] } [ 484.916147][T14813] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 484.924312][T14813] [ 484.924312][T14813] the dependencies between the lock to be acquired [ 484.924324][T14813] and SOFTIRQ-irq-unsafe lock: [ 484.937842][T14813] -> (tasklist_lock){.+.+}-{3:3} { [ 484.943162][T14813] HARDIRQ-ON-R at: [ 484.947323][T14813] lock_acquire+0x120/0x360 [ 484.953840][T14813] _raw_read_lock+0x36/0x50 [ 484.960350][T14813] __do_wait+0xde/0x740 [ 484.966515][T14813] do_wait+0x1f8/0x520 [ 484.972595][T14813] kernel_wait+0xab/0x170 [ 484.978934][T14813] call_usermodehelper_exec_work+0xbe/0x230 [ 484.986859][T14813] process_scheduled_works+0xade/0x17b0 [ 484.994415][T14813] worker_thread+0x8a0/0xda0 [ 485.001008][T14813] kthread+0x70e/0x8a0 [ 485.007091][T14813] ret_from_fork+0x3f9/0x770 [ 485.013698][T14813] ret_from_fork_asm+0x1a/0x30 [ 485.020474][T14813] SOFTIRQ-ON-R at: [ 485.024644][T14813] lock_acquire+0x120/0x360 [ 485.031196][T14813] _raw_read_lock+0x36/0x50 [ 485.037713][T14813] __do_wait+0xde/0x740 [ 485.043889][T14813] do_wait+0x1f8/0x520 [ 485.049967][T14813] kernel_wait+0xab/0x170 [ 485.056303][T14813] call_usermodehelper_exec_work+0xbe/0x230 [ 485.064214][T14813] process_scheduled_works+0xade/0x17b0 [ 485.071768][T14813] worker_thread+0x8a0/0xda0 [ 485.078363][T14813] kthread+0x70e/0x8a0 [ 485.084449][T14813] ret_from_fork+0x3f9/0x770 [ 485.091042][T14813] ret_from_fork_asm+0x1a/0x30 [ 485.097820][T14813] INITIAL USE at: [ 485.101895][T14813] lock_acquire+0x120/0x360 [ 485.108327][T14813] _raw_write_lock_irq+0xa2/0xf0 [ 485.115190][T14813] copy_process+0x224f/0x3c00 [ 485.121792][T14813] kernel_clone+0x21e/0x840 [ 485.128222][T14813] user_mode_thread+0xdd/0x140 [ 485.134909][T14813] rest_init+0x23/0x300 [ 485.141000][T14813] start_kernel+0x3a9/0x410 [ 485.147422][T14813] x86_64_start_reservations+0x24/0x30 [ 485.154810][T14813] x86_64_start_kernel+0x143/0x1c0 [ 485.161842][T14813] common_startup_64+0x13e/0x147 [ 485.168712][T14813] INITIAL READ USE at: [ 485.173224][T14813] lock_acquire+0x120/0x360 [ 485.180085][T14813] _raw_read_lock+0x36/0x50 [ 485.186943][T14813] __do_wait+0xde/0x740 [ 485.193466][T14813] do_wait+0x1f8/0x520 [ 485.199911][T14813] kernel_wait+0xab/0x170 [ 485.206640][T14813] call_usermodehelper_exec_work+0xbe/0x230 [ 485.214900][T14813] process_scheduled_works+0xade/0x17b0 [ 485.222804][T14813] worker_thread+0x8a0/0xda0 [ 485.229756][T14813] kthread+0x70e/0x8a0 [ 485.236195][T14813] ret_from_fork+0x3f9/0x770 [ 485.243240][T14813] ret_from_fork_asm+0x1a/0x30 [ 485.250374][T14813] } [ 485.253047][T14813] ... key at: [] tasklist_lock+0x18/0x40 [ 485.260955][T14813] ... acquired at: [ 485.264944][T14813] lock_acquire+0x120/0x360 [ 485.269643][T14813] _raw_read_lock+0x36/0x50 [ 485.274334][T14813] send_sigurg+0x12b/0x420 [ 485.278935][T14813] sk_send_sigurg+0x6c/0x2e0 [ 485.283709][T14813] queue_oob+0x420/0x4f0 [ 485.288138][T14813] unix_stream_sendmsg+0xc3f/0xdf0 [ 485.293458][T14813] __sock_sendmsg+0x21c/0x270 [ 485.298328][T14813] ____sys_sendmsg+0x52d/0x830 [ 485.303295][T14813] ___sys_sendmsg+0x21f/0x2a0 [ 485.308156][T14813] __sys_sendmmsg+0x28e/0x430 [ 485.313033][T14813] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 485.318778][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.324080][T14813] do_fast_syscall_32+0x34/0x80 [ 485.329125][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.335638][T14813] [ 485.337967][T14813] -> (&f_owner->lock){....}-{3:3} { [ 485.343309][T14813] INITIAL USE at: [ 485.347296][T14813] lock_acquire+0x120/0x360 [ 485.353555][T14813] _raw_write_lock_irq+0xa2/0xf0 [ 485.360245][T14813] __f_setown+0x67/0x370 [ 485.366230][T14813] fcntl_dirnotify+0x3fa/0x6a0 [ 485.372745][T14813] do_fcntl+0x6d0/0x1910 [ 485.378735][T14813] do_compat_fcntl64+0x477/0x720 [ 485.385429][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.392293][T14813] do_fast_syscall_32+0x34/0x80 [ 485.398898][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.406972][T14813] INITIAL READ USE at: [ 485.411391][T14813] lock_acquire+0x120/0x360 [ 485.418078][T14813] _raw_read_lock_irqsave+0xaf/0x100 [ 485.425635][T14813] send_sigio+0x38/0x370 [ 485.432056][T14813] dnotify_handle_event+0x169/0x440 [ 485.439433][T14813] fsnotify+0x1814/0x1a80 [ 485.445958][T14813] vfs_mkdir+0x477/0x510 [ 485.452386][T14813] do_mkdirat+0x247/0x590 [ 485.458895][T14813] __ia32_sys_mkdirat+0x87/0xa0 [ 485.465951][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.473252][T14813] do_fast_syscall_32+0x34/0x80 [ 485.480284][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.488789][T14813] } [ 485.491376][T14813] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 485.500330][T14813] ... acquired at: [ 485.504221][T14813] lock_acquire+0x120/0x360 [ 485.508911][T14813] _raw_read_lock_irqsave+0xaf/0x100 [ 485.514390][T14813] send_sigio+0x38/0x370 [ 485.518814][T14813] kill_fasync+0x24d/0x4d0 [ 485.523439][T14813] lease_break_callback+0x26/0x30 [ 485.528667][T14813] __break_lease+0x6a2/0x1620 [ 485.533524][T14813] do_dentry_open+0x8b7/0x13f0 [ 485.538469][T14813] vfs_open+0x3b/0x340 [ 485.542714][T14813] path_openat+0x2ee5/0x3830 [ 485.547483][T14813] do_filp_open+0x1fa/0x410 [ 485.552173][T14813] do_sys_openat2+0x121/0x1c0 [ 485.557031][T14813] __ia32_compat_sys_openat+0x131/0x160 [ 485.562764][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.568060][T14813] do_fast_syscall_32+0x34/0x80 [ 485.573109][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.579639][T14813] [ 485.581975][T14813] -> (&new->fa_lock){....}-{3:3} { [ 485.587121][T14813] INITIAL USE at: [ 485.591028][T14813] lock_acquire+0x120/0x360 [ 485.597120][T14813] _raw_write_lock_irq+0xa2/0xf0 [ 485.603639][T14813] fasync_remove_entry+0xf1/0x1c0 [ 485.610259][T14813] sock_fasync+0x85/0xf0 [ 485.616087][T14813] __fput+0x8a2/0xa70 [ 485.621641][T14813] task_work_run+0x1d4/0x260 [ 485.627813][T14813] exit_to_user_mode_loop+0xec/0x110 [ 485.634689][T14813] __do_fast_syscall_32+0x1f4/0x2b0 [ 485.641477][T14813] do_fast_syscall_32+0x34/0x80 [ 485.647916][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.655822][T14813] INITIAL READ USE at: [ 485.660162][T14813] lock_acquire+0x120/0x360 [ 485.666683][T14813] _raw_read_lock_irqsave+0xaf/0x100 [ 485.673977][T14813] kill_fasync+0x199/0x4d0 [ 485.680396][T14813] sock_wake_async+0x137/0x160 [ 485.687170][T14813] sock_def_error_report+0x332/0x390 [ 485.694464][T14813] sk_error_report+0x45/0x290 [ 485.701162][T14813] unix_dgram_connect+0x96b/0xc20 [ 485.708221][T14813] __sys_connect+0x316/0x440 [ 485.714847][T14813] __ia32_sys_connect+0x7a/0x90 [ 485.721737][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.728873][T14813] do_fast_syscall_32+0x34/0x80 [ 485.735776][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.744120][T14813] } [ 485.746628][T14813] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 485.755328][T14813] ... acquired at: [ 485.759132][T14813] lock_acquire+0x120/0x360 [ 485.763829][T14813] _raw_read_lock_irqsave+0xaf/0x100 [ 485.769312][T14813] kill_fasync+0x199/0x4d0 [ 485.773909][T14813] evdev_pass_values+0x627/0xbd0 [ 485.779036][T14813] evdev_events+0x1e6/0x340 [ 485.783727][T14813] input_pass_values+0x285/0x890 [ 485.788852][T14813] input_event_dispose+0x330/0x6b0 [ 485.794148][T14813] input_inject_event+0x1dd/0x340 [ 485.799358][T14813] evdev_write+0x2fc/0x480 [ 485.803970][T14813] vfs_write+0x27b/0xb30 [ 485.808397][T14813] ksys_write+0x145/0x250 [ 485.812912][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.818214][T14813] do_fast_syscall_32+0x34/0x80 [ 485.823268][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.829810][T14813] [ 485.832134][T14813] [ 485.832134][T14813] stack backtrace: [ 485.838048][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.0.3197 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 485.838073][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.838092][T14813] Call Trace: [ 485.838099][T14813] [ 485.838107][T14813] dump_stack_lvl+0x189/0x250 [ 485.838133][T14813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.838154][T14813] ? __pfx__printk+0x10/0x10 [ 485.838196][T14813] validate_chain+0x1f05/0x2140 [ 485.838225][T14813] __lock_acquire+0xab9/0xd20 [ 485.838254][T14813] ? kill_fasync+0x199/0x4d0 [ 485.838274][T14813] lock_acquire+0x120/0x360 [ 485.838305][T14813] ? kill_fasync+0x199/0x4d0 [ 485.838333][T14813] _raw_read_lock_irqsave+0xaf/0x100 [ 485.838357][T14813] ? kill_fasync+0x199/0x4d0 [ 485.838376][T14813] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 485.838398][T14813] ? do_raw_spin_lock+0x121/0x290 [ 485.838423][T14813] kill_fasync+0x199/0x4d0 [ 485.838445][T14813] ? kill_fasync+0x53/0x4d0 [ 485.838467][T14813] evdev_pass_values+0x627/0xbd0 [ 485.838496][T14813] ? evdev_pass_values+0x5e1/0xbd0 [ 485.838525][T14813] evdev_events+0x1e6/0x340 [ 485.838549][T14813] ? evdev_events+0x79/0x340 [ 485.838577][T14813] ? input_pass_values+0x8d/0x890 [ 485.838604][T14813] input_pass_values+0x285/0x890 [ 485.838631][T14813] ? input_handle_event+0x70c/0xf30 [ 485.838652][T14813] input_event_dispose+0x330/0x6b0 [ 485.838674][T14813] input_inject_event+0x1dd/0x340 [ 485.838695][T14813] ? input_inject_event+0xb6/0x340 [ 485.838719][T14813] evdev_write+0x2fc/0x480 [ 485.838750][T14813] ? __pfx_evdev_write+0x10/0x10 [ 485.838776][T14813] ? bpf_lsm_file_permission+0x9/0x20 [ 485.838798][T14813] ? security_file_permission+0x75/0x290 [ 485.838823][T14813] ? rw_verify_area+0x255/0x4d0 [ 485.838845][T14813] ? __lock_acquire+0xab9/0xd20 [ 485.838874][T14813] ? __pfx_evdev_write+0x10/0x10 [ 485.838900][T14813] vfs_write+0x27b/0xb30 [ 485.838926][T14813] ? __pfx_vfs_write+0x10/0x10 [ 485.838950][T14813] ? __fget_files+0x2a/0x420 [ 485.838966][T14813] ? __fget_files+0x2a/0x420 [ 485.838981][T14813] ? __fget_files+0x3a0/0x420 [ 485.838999][T14813] ? __fget_files+0x2a/0x420 [ 485.839017][T14813] ksys_write+0x145/0x250 [ 485.839041][T14813] ? __pfx_ksys_write+0x10/0x10 [ 485.839066][T14813] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.839091][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 485.839119][T14813] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.839154][T14813] do_fast_syscall_32+0x34/0x80 [ 485.839180][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.839207][T14813] RIP: 0023:0xf7ff8539 [ 485.839226][T14813] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 485.839242][T14813] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 485.839263][T14813] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 485.839277][T14813] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 485.839288][T14813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.839306][T14813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 485.839317][T14813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.839334][T14813] [ 486.273741][ T5985] usbhid 4-1:0.0: can't add hid device: -71 [ 486.279791][ T5985] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 486.302290][ T983] usb 7-1: USB disconnect, device number 31 [ 486.353501][ T5954] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 486.427000][ T5985] usb 4-1: USB disconnect, device number 63 [ 486.690040][T11056] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.775395][T11056] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.859265][T11056] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.972637][T11056] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.090197][T11056] macvlan2: left promiscuous mode [ 487.095928][T11056] bond0: left promiscuous mode [ 487.102194][T11056] bridge0: port 3(macvlan2) entered disabled state [ 487.116653][T11056] bridge_slave_1: left allmulticast mode [ 487.122353][T11056] bridge_slave_1: left promiscuous mode [ 487.128434][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.137411][T11056] bridge_slave_0: left allmulticast mode [ 487.143102][T11056] bridge_slave_0: left promiscuous mode [ 487.151270][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.169161][T11056] bond_slave_0: left promiscuous mode [ 487.174707][T11056] bond_slave_1: left promiscuous mode [ 487.205565][T11056] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 487.331626][T11056] bond0 (unregistering): left allmulticast mode [ 487.338078][T11056] bond_slave_0: left allmulticast mode [ 487.344427][T11056] bond_slave_1: left allmulticast mode [ 487.355729][T11056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.367035][T11056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.376870][T11056] bond0 (unregistering): Released all slaves [ 487.390378][T11056] bond1 (unregistering): Released all slaves [ 487.657024][T11056] hsr_slave_0: left promiscuous mode [ 487.662952][T11056] hsr_slave_1: left promiscuous mode [ 487.675095][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.682521][T11056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.696858][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.705646][T11056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.719312][T11056] veth1_macvtap: left promiscuous mode [ 487.724952][T11056] veth0_macvtap: left promiscuous mode [ 487.730571][T11056] veth1_vlan: left promiscuous mode [ 487.738263][T11056] veth0_vlan: left promiscuous mode [ 487.916950][T11056] team0 (unregistering): Port device team_slave_1 removed [ 487.942416][T11056] team0 (unregistering): Port device team_slave_0 removed [ 488.321950][T11056] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.370214][T11056] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.419322][T11056] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.469768][T11056] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.576730][T11056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.625961][T11056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.685971][T11056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.741294][T11056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.845435][T11056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.855819][T11056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.931627][T11056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.942282][T11056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.991033][T11056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.003349][T11056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.085166][T11056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.095879][T11056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.211955][T11056] bridge_slave_1: left allmulticast mode [ 489.218943][T11056] bridge_slave_1: left promiscuous mode [ 489.228422][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.239589][T11056] bridge_slave_0: left allmulticast mode [ 489.245767][T11056] bridge_slave_0: left promiscuous mode [ 489.251470][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.260726][T11056] bridge_slave_1: left allmulticast mode [ 489.268143][T11056] bridge_slave_1: left promiscuous mode [ 489.274244][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.282574][T11056] bridge_slave_0: left allmulticast mode [ 489.288614][T11056] bridge_slave_0: left promiscuous mode [ 489.294408][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.308172][T11056] bridge_slave_1: left allmulticast mode [ 489.314600][T11056] bridge_slave_1: left promiscuous mode [ 489.320270][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.328686][T11056] bridge_slave_0: left allmulticast mode [ 489.334421][T11056] bridge_slave_0: left promiscuous mode [ 489.340096][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.482213][T11056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.492614][T11056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.503310][T11056] bond0 (unregistering): Released all slaves [ 489.600227][T11056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.610335][T11056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.620673][T11056] bond0 (unregistering): Released all slaves [ 489.632849][T11056] ip6gretap0 (unregistering): left allmulticast mode [ 489.668498][T11056] bond2 (unregistering): (slave geneve2): Releasing active interface [ 489.720765][T11056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.731346][T11056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.742560][T11056] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 489.752224][T11056] bond0 (unregistering): Released all slaves [ 489.762362][T11056] bond1 (unregistering): Released all slaves [ 489.775944][T11056] bond2 (unregistering): Released all slaves [ 490.337507][T11056] hsr_slave_0: left promiscuous mode [ 490.349413][T11056] hsr_slave_1: left promiscuous mode [ 490.355428][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.362839][T11056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.376789][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.385374][T11056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.398865][T11056] hsr_slave_0: left promiscuous mode [ 490.405625][T11056] hsr_slave_1: left promiscuous mode [ 490.411463][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.419484][T11056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.427534][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.435275][T11056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.446488][T11056] hsr_slave_0: left promiscuous mode [ 490.452406][T11056] hsr_slave_1: left promiscuous mode [ 490.459826][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.471011][T11056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.479686][T11056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.488888][T11056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.508884][T11056] veth1_macvtap: left promiscuous mode [ 490.516100][T11056] veth0_macvtap: left promiscuous mode [ 490.521729][T11056] veth1_vlan: left promiscuous mode [ 490.527091][T11056] veth0_vlan: left promiscuous mode [ 490.533353][T11056] veth1_macvtap: left promiscuous mode [ 490.538982][T11056] veth0_macvtap: left promiscuous mode [ 490.544644][T11056] veth1_vlan: left promiscuous mode [ 490.549951][T11056] veth0_vlan: left promiscuous mode [ 490.801425][T11056] team0 (unregistering): Port device team_slave_1 removed [ 490.829079][T11056] team0 (unregistering): Port device team_slave_0 removed [ 491.008544][T11056] team0 (unregistering): Port device team_slave_1 removed [ 491.037970][T11056] team0 (unregistering): Port device team_slave_0 removed [ 491.184883][T11056] team0 (unregistering): Port device team_slave_1 removed [ 491.210912][T11056] team0 (unregistering): Port device team_slave_0 removed