last executing test programs: 1m12.711893061s ago: executing program 3 (id=1043): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 1m12.660006266s ago: executing program 3 (id=1044): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m12.480701813s ago: executing program 3 (id=1047): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x3}) 48.943460109s ago: executing program 3 (id=1047): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x3}) 26.528838652s ago: executing program 3 (id=1047): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x3}) 7.050666958s ago: executing program 2 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.770323427s ago: executing program 1 (id=1393): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.475469879s ago: executing program 2 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(0x3) 5.192675562s ago: executing program 2 (id=1400): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @dev={0xac, 0x14, 0x14, 0xa}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.976845803s ago: executing program 2 (id=1403): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x69, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) io_setup(0x7e, 0x0) 4.976688585s ago: executing program 0 (id=1404): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x7, 0x2, {0x1, 0x2, 0x23, 0x7, 0x9}, 0x8003}) tkill(r0, 0x7) 4.790770815s ago: executing program 4 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r4 = socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000040)={'virt_wifi0\x00', @local}) 4.588386231s ago: executing program 0 (id=1406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4.45105535s ago: executing program 0 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 3.30241951s ago: executing program 4 (id=1408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.128957495s ago: executing program 0 (id=1409): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000030014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) 3.025081135s ago: executing program 1 (id=1410): setresuid(0x0, 0xee00, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b5"], 0x48}}, 0x0) 2.958746389s ago: executing program 0 (id=1411): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000002100)=""/4071, 0xfe7}], 0x3}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.82099395s ago: executing program 1 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(0x3) 2.820359429s ago: executing program 4 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) sendto$inet(r1, &(0x7f0000000a00)="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", 0x747, 0x8010, &(0x7f0000000580)={0x2, 0x9, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.090195346s ago: executing program 1 (id=1414): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000002c0)={0x6000, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.060805588s ago: executing program 3 (id=1047): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x3}) 2.040887162s ago: executing program 2 (id=1415): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="98002f800c0002000203aaaaaaaaaaaa0c00038008000100020000000c0002000000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 1.955181107s ago: executing program 0 (id=1416): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 777.21153ms ago: executing program 1 (id=1417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 776.658468ms ago: executing program 2 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r4 = socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000040)={'virt_wifi0\x00', @local}) 775.498593ms ago: executing program 4 (id=1419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x143142, 0x80) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000180)) 120.477477ms ago: executing program 1 (id=1420): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 74.146196ms ago: executing program 4 (id=1421): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000030014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) 0s ago: executing program 4 (id=1422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xa, 0xa83f, 0xd, 0xc, 0x101, 0x6, 0x9, 0x6, 0x100, 0x3ff, 0xa, 0x1, 0x2, 0xe, 0xfffffff9, 0x3, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x101, 0xfffffff7, 0x3, 0x7cb, 0x8020000, 0x7ff, 0x2, 0x7, 0x6, 0x3, 0xff, 0x7fff, 0x5, 0x0, 0xd, 0x6, 0x9, 0x6, 0x7, 0xbb1, 0xb, 0xffffffff, 0x6, 0xded4, 0x5, 0xff, 0xc2f9, 0x6, 0x6, 0x2, 0x8000, 0x40, 0x1, 0x1, 0xffffffff, 0xfffffffa, 0x2, 0x0, 0x3, 0x5, 0x7, 0x5, 0x8, 0x7, 0x80010000, 0xc, 0x220, 0x7fffffff, 0x5, 0x8, 0x2, 0x3ff, 0xd, 0x6, 0x5, 0x8001, 0x3, 0x400, 0x6, 0x4, 0x59e, 0x3, 0x4, 0x7, 0x9, 0x88002, 0x80000000, 0x101, 0x3, 0xe, 0x7bc, 0x8, 0x3, 0x2, 0x3, 0x6, 0x10000, 0x7, 0x5, 0x8001, 0x5, 0x3, 0x7fffffff, 0x4, 0xa6f8, 0x9, 0x7fff, 0x0, 0xfffffffa, 0xccf, 0x6, 0x779, 0xad, 0x2, 0xb0e, 0x255e, 0x9, 0x4, 0x9, 0x5, 0x400, 0x7f, 0x8, 0x7, 0x2, 0x22ba, 0x9, 0x80000001, 0xff, 0x8, 0x1, 0x5, 0x6, 0x1, 0x415, 0x4, 0x401, 0x1c000000, 0x1, 0xba6f, 0xf, 0x5, 0xb1f5, 0xcc8f, 0x4, 0x8, 0x100, 0x7, 0x3, 0xfff, 0x7, 0x1, 0x8, 0xffffffff, 0x5, 0x7, 0xa, 0x8, 0x0, 0x8, 0x6, 0xfffffff7, 0x2, 0x3, 0x1, 0x0, 0x5, 0x7ff, 0x800, 0xfffffff7, 0x4, 0x1, 0xffff7fff, 0x3, 0x2, 0x3, 0xffffff39, 0x8, 0x0, 0x0, 0x1, 0x7, 0xed97, 0x1, 0x101, 0x9, 0x1, 0x4, 0x2, 0x5, 0xfff, 0x6, 0x9, 0x3, 0x6e0, 0x0, 0x10000, 0x470f, 0x2, 0x9, 0x979, 0x0, 0xffffff39, 0x2, 0x4, 0x7, 0x5, 0x80000000, 0x9, 0x8, 0x0, 0x80000001, 0x4, 0x80, 0x1, 0x5, 0x2, 0x1c, 0x7fe, 0x5, 0x81, 0x8, 0x0, 0x4, 0xc, 0x7, 0x7fffffff, 0x1, 0x2, 0x1000, 0x7, 0x8, 0x43, 0x8b5569d, 0x1d, 0x0, 0x9, 0xd, 0x4, 0x3, 0x5, 0x80000001, 0x7, 0x1, 0x8, 0x80000001, 0x9, 0xcf0, 0x9, 0x8, 0x2, 0x7, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000006, 0x6, 0x0, 0x8, {0x7, 0x0, 0x2, 0xe, 0x9, 0x80}, {0x9, 0x2, 0x8, 0x43, 0x3}, 0x9, 0xbc, 0xffffffff}}]}]}}]}, 0x478}}, 0x0) kernel console output (not intermixed with test programs): 1] usb 5-1: config 0 descriptor?? [ 287.099958][ T30] audit: type=1804 audit(1746581038.359:8): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.553" name="/newroot/95/file0" dev="tmpfs" ino=517 res=1 errno=0 [ 287.138047][ T7872] ref_ctr_offset mismatch. inode: 0x205 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 287.162880][ T5871] symbolserial 5-1:0.175: symbol converter detected [ 287.175800][ T7873] netlink: 'syz.1.553': attribute type 287 has an invalid length. [ 287.192991][ T5871] usb 5-1: symbol converter now attached to ttyUSB0 [ 287.206184][ T7872] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 287.247849][ T7872] ref_ctr decrement failed for inode: 0x205 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807e8c6400 [ 287.266613][ T7872] uprobe: syz.1.553:7872 failed to unregister, leaking uprobe [ 287.407741][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.427165][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.435080][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 287.441461][ T5869] usb 5-1: USB disconnect, device number 24 [ 287.498638][ T5869] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 288.908648][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.928371][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.939212][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 288.959395][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.971548][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 288.983638][ T5869] symbolserial 5-1:0.175: device disconnected [ 288.988336][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.355084][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.404152][ T10] usb 3-1: Product: syz [ 289.424420][ T10] usb 3-1: Manufacturer: syz [ 289.439367][ T10] usb 3-1: SerialNumber: syz [ 289.464201][ T10] usb 3-1: config 0 descriptor?? [ 289.477374][ T10] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 289.496573][ T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 289.510223][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 289.729120][ T5881] usb 3-1: USB disconnect, device number 22 [ 289.751068][ T5871] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 289.766084][ T5881] garmin_gps 3-1:0.0: device disconnected [ 289.938895][ T5871] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 289.959894][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.982513][ T5871] usb 2-1: Product: syz [ 289.986704][ T5871] usb 2-1: Manufacturer: syz [ 290.003451][ T5871] usb 2-1: SerialNumber: syz [ 290.016982][ T5871] usb 2-1: config 0 descriptor?? [ 290.026310][ T5871] gspca_main: kinect-2.14.0 probing 045e:02bf [ 290.296508][ T7889] sch_fq: defrate 2048 ignored. [ 290.302661][ T7889] veth0: entered promiscuous mode [ 290.330949][ T7889] veth0: left promiscuous mode [ 290.346287][ T5871] usb 2-1: USB disconnect, device number 27 [ 291.564134][ T7930] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 291.570715][ T7930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.578546][ T7930] vhci_hcd vhci_hcd.0: Device attached [ 291.883492][ T5881] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 292.297897][ T7931] vhci_hcd: connection reset by peer [ 292.337825][ T1160] vhci_hcd: stop threads [ 292.425079][ T1160] vhci_hcd: release socket [ 292.586027][ T1160] vhci_hcd: disconnect device [ 293.211829][ T7942] program syz.0.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.640674][ T5871] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.770276][ T5869] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 293.825408][ T5871] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 293.840272][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.868655][ T5871] usb 5-1: Product: syz [ 293.878843][ T5871] usb 5-1: Manufacturer: syz [ 293.890691][ T5871] usb 5-1: SerialNumber: syz [ 293.903134][ T5871] usb 5-1: config 0 descriptor?? [ 293.940017][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 293.961329][ T5869] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 293.970115][ T5869] usb 1-1: config 0 has no interface number 0 [ 293.976952][ T5869] usb 1-1: config 0 interface 184 has no altsetting 0 [ 293.988301][ T5869] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 294.021034][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.049718][ T5869] usb 1-1: Product: syz [ 294.058429][ T5869] usb 1-1: Manufacturer: syz [ 294.069962][ T5869] usb 1-1: SerialNumber: syz [ 294.116395][ T5871] usb 5-1: ignoring: probably an ADSL modem [ 294.125204][ T5869] usb 1-1: config 0 descriptor?? [ 294.139941][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 294.146428][ T5869] smsc75xx v1.0.0 [ 294.966909][ T5871] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 295.001701][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 295.016810][ T5871] usb 5-1: USB disconnect, device number 25 [ 295.024210][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.035062][ T10] usb 2-1: Product: syz [ 295.039285][ T10] usb 2-1: Manufacturer: syz [ 295.046317][ T10] usb 2-1: SerialNumber: syz [ 295.252741][ T10] usb 2-1: config 0 descriptor?? [ 295.280181][ T5900] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 295.901718][ T10] gspca_main: kinect-2.14.0 probing 045e:02bf [ 295.953124][ T7961] sch_fq: defrate 2048 ignored. [ 295.961133][ T7961] veth0: entered promiscuous mode [ 296.040000][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 296.052295][ T7961] veth0: left promiscuous mode [ 296.058507][ T5900] usb 4-1: config 4 has an invalid interface number: 152 but max is 0 [ 296.082758][ T5900] usb 4-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 296.085611][ T5871] usb 2-1: USB disconnect, device number 28 [ 296.095656][ T5900] usb 4-1: config 4 has no interface number 0 [ 296.108584][ T5900] usb 4-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=eb.79 [ 296.122940][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.134881][ T5892] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.300101][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 296.309044][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 296.314296][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.359599][ T5892] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 296.422322][ T5892] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.446830][ T5892] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.458723][ T5892] usb 3-1: config 1 interface 1 has no altsetting 0 [ 296.474425][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.484543][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.493421][ T5892] usb 3-1: Product: syz [ 296.498446][ T5892] usb 3-1: Manufacturer: syz [ 296.504010][ T5892] usb 3-1: SerialNumber: syz [ 297.600143][ T5881] vhci_hcd: vhci_device speed not set [ 298.609445][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.953710][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 299.002216][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 299.013673][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 299.041814][ T5892] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 299.108329][ T5892] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 299.157570][ T5869] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 299.195315][ T5892] usb 3-1: USB disconnect, device number 23 [ 299.260674][ T5869] usb 1-1: USB disconnect, device number 21 [ 299.323164][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.477870][ T5900] usb 4-1: string descriptor 0 read error: -32 [ 301.658100][ T5900] plusb 4-1:4.152: probe with driver plusb failed with error -22 [ 302.253540][ T919] usb 4-1: USB disconnect, device number 29 [ 302.690917][ T5900] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 302.909947][ T919] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 302.990147][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 303.110317][ T919] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 303.194244][ T919] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.255935][ T5892] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 303.264585][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.283158][ T919] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 303.286041][ T5900] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 303.315423][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.328585][ T5900] usb 1-1: config 0 descriptor?? [ 303.337067][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.367152][ T919] usb 4-1: Product: syz [ 303.379906][ T919] usb 4-1: Manufacturer: syz [ 303.389712][ T919] usb 4-1: SerialNumber: syz [ 303.417539][ T919] usb 4-1: config 0 descriptor?? [ 303.475785][ T5892] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 303.640671][ T8036] netlink: 'syz.4.602': attribute type 12 has an invalid length. [ 303.648565][ T8036] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 303.656579][ T8036] netlink: 148 bytes leftover after parsing attributes in process `syz.4.602'. [ 303.981112][ T5892] usb 2-1: config 0 has no interface number 0 [ 303.994478][ T5892] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 304.032220][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.050279][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 304.059119][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 304.070001][ T8024] netlink: 'syz.3.598': attribute type 7 has an invalid length. [ 304.099360][ T5869] usb 4-1: USB disconnect, device number 30 [ 304.102177][ T5892] usb 2-1: Product: syz [ 304.152630][ T5892] usb 2-1: Manufacturer: syz [ 304.168442][ T5892] usb 2-1: SerialNumber: syz [ 304.230160][ T5892] usb 2-1: config 0 descriptor?? [ 304.263122][ T5900] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 304.459415][ T5892] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 304.497689][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 304.508985][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 304.522481][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 304.533409][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 304.545834][ T5892] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 304.660639][ T5900] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 304.704078][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 304.714037][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.722739][ T9] usb 3-1: Product: syz [ 304.726954][ T9] usb 3-1: Manufacturer: syz [ 304.732278][ T9] usb 3-1: SerialNumber: syz [ 304.741809][ T5869] usb 1-1: USB disconnect, device number 22 [ 304.748950][ T9] usb 3-1: config 0 descriptor?? [ 304.763947][ T9] gspca_main: kinect-2.14.0 probing 045e:02bf [ 304.829961][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 304.847216][ T5900] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 304.858407][ T5900] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 304.868923][ T5900] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 304.889070][ T9] usb 2-1: USB disconnect, device number 29 [ 304.901617][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 304.915116][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.926400][ T9] keyspan 2-1:0.133: device disconnected [ 304.936862][ T5900] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 304.985177][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.995031][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.004039][ T5900] usb 5-1: SerialNumber: syz [ 305.012814][ T8040] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 305.020450][ T8040] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 305.035677][ T8038] sch_fq: defrate 2048 ignored. [ 305.044706][ T8038] veth0: entered promiscuous mode [ 305.073303][ T8038] veth0: left promiscuous mode [ 305.082550][ T24] usb 3-1: USB disconnect, device number 24 [ 305.241391][ T9] usb 5-1: USB disconnect, device number 26 [ 305.318419][ T30] audit: type=1804 audit(1746581056.579:9): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.606" name="/newroot/121/file0" dev="tmpfs" ino=663 res=1 errno=0 [ 305.347841][ T8047] ref_ctr_offset mismatch. inode: 0x297 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 305.362603][ T8047] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 305.371161][ T8047] ref_ctr decrement failed for inode: 0x297 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802b662800 [ 305.382420][ T8047] uprobe: syz.0.606:8047 failed to unregister, leaking uprobe [ 305.399544][ T8048] netlink: 'syz.0.606': attribute type 287 has an invalid length. [ 306.079967][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 307.511939][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 307.517926][ T5900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 307.979913][ T9] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 308.017302][ T9] usb 4-1: config 0 has no interface number 0 [ 308.075816][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 308.104596][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.120339][ T5900] usb 2-1: device descriptor read/64, error -71 [ 308.137068][ T9] usb 4-1: Product: syz [ 308.142148][ T9] usb 4-1: Manufacturer: syz [ 308.146769][ T9] usb 4-1: SerialNumber: syz [ 308.160305][ T5881] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 308.176377][ T9] usb 4-1: config 0 descriptor?? [ 308.332439][ T5881] usb 5-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 308.345607][ T5881] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.357724][ T5881] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 308.367390][ T5900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 308.385922][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.402443][ T9] cx82310_eth 4-1:0.36: probe with driver cx82310_eth failed with error -71 [ 308.416584][ T5881] usb 5-1: Product: syz [ 308.423902][ T5881] usb 5-1: Manufacturer: syz [ 308.429443][ T5881] usb 5-1: SerialNumber: syz [ 308.436125][ T9] cxacru 4-1:0.36: usbatm_usb_probe: bind failed: -19! [ 308.446962][ T5881] usb 5-1: config 0 descriptor?? [ 308.463184][ T9] usb 4-1: USB disconnect, device number 31 [ 308.522160][ T5900] usb 2-1: device descriptor read/64, error -71 [ 308.550436][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 308.640156][ T5900] usb usb2-port1: attempt power cycle [ 308.707593][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 308.716711][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 308.725616][ T8073] netlink: 'syz.4.615': attribute type 7 has an invalid length. [ 308.733825][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 308.753043][ T9] usb 5-1: USB disconnect, device number 27 [ 308.764606][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 308.776992][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.786280][ T24] usb 3-1: Product: syz [ 308.791139][ T24] usb 3-1: Manufacturer: syz [ 308.795748][ T24] usb 3-1: SerialNumber: syz [ 308.802227][ T919] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 308.816735][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 308.823422][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 308.976723][ T919] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 308.986088][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.010980][ T919] usb 1-1: Product: syz [ 309.015236][ T919] usb 1-1: Manufacturer: syz [ 309.022896][ T919] usb 1-1: SerialNumber: syz [ 309.030109][ T5900] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 309.032274][ T919] usb 1-1: config 0 descriptor?? [ 309.061591][ T24] r8152-cfgselector 3-1: Needed 2 retries to read version [ 309.068789][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 309.189442][ T919] gspca_main: kinect-2.14.0 probing 045e:02bf [ 309.770057][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 309.805961][ T5900] usb 2-1: device not accepting address 32, error -71 [ 309.824220][ T9] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 310.303230][ T8099] sch_fq: defrate 2048 ignored. [ 310.781930][ T8087] veth0: entered promiscuous mode [ 310.789584][ T8087] veth0: left promiscuous mode [ 310.802448][ T919] usb 1-1: USB disconnect, device number 23 [ 311.100231][ T8109] netlink: 'syz.4.625': attribute type 12 has an invalid length. [ 311.108170][ T8109] netlink: 'syz.4.625': attribute type 29 has an invalid length. [ 311.116450][ T8109] netlink: 148 bytes leftover after parsing attributes in process `syz.4.625'. [ 313.720875][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 314.119889][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 314.135419][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.185502][ T24] usb 5-1: Product: syz [ 314.190165][ T24] usb 5-1: Manufacturer: syz [ 314.220063][ T24] usb 5-1: SerialNumber: syz [ 314.352935][ T5900] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 314.366592][ T24] usb 5-1: config 0 descriptor?? [ 314.460001][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 314.639666][ T5900] usb 2-1: device descriptor read/64, error -71 [ 314.651529][ T24] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 314.952398][ T24] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 315.214872][ T24] usb 5-1: USB disconnect, device number 28 [ 315.378745][ T5900] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 315.386525][ T10] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 315.410292][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.432755][ T10] usb 1-1: config 0 has no interface number 0 [ 315.438994][ T10] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 315.457575][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.471208][ T10] usb 1-1: config 0 descriptor?? [ 315.492480][ T10] qmi_wwan 1-1:0.154: bogus CDC Union: master=0, slave=0 [ 315.505225][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 315.520274][ T10] qmi_wwan 1-1:0.154: probe with driver qmi_wwan failed with error -22 [ 315.560021][ T5900] usb 2-1: device descriptor read/64, error -71 [ 315.669486][ T8153] binder: 8152:8153 ioctl 4018620d 0 returned -22 [ 315.677174][ T8153] binder: 8152:8153 ioctl c0306201 200000001d40 returned -11 [ 315.690428][ T5900] usb usb2-port1: attempt power cycle [ 315.711232][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.639'. [ 315.720779][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.639'. [ 316.059513][ T10] usb 1-1: USB disconnect, device number 24 [ 316.130218][ T5900] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 316.175165][ T5900] usb 2-1: device descriptor read/8, error -71 [ 316.303606][ T8169] netlink: 'syz.2.644': attribute type 287 has an invalid length. [ 316.312192][ T30] audit: type=1804 audit(1746581067.509:10): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.644" name="/newroot/137/file0" dev="tmpfs" ino=733 res=1 errno=0 [ 316.916208][ T8166] ref_ctr_offset mismatch. inode: 0x2dd offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 316.977529][ T8166] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 317.030150][ T5900] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 317.058513][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.345160][ T8166] ref_ctr decrement failed for inode: 0x2dd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888031bcee00 [ 317.419666][ T5900] usb 2-1: device not accepting address 37, error -71 [ 317.434291][ T8166] uprobe: syz.2.644:8166 failed to unregister, leaking uprobe [ 317.484741][ T5900] usb usb2-port1: unable to enumerate USB device [ 317.563303][ T8166] uprobe: syz.2.644:8166 failed to unregister, leaking uprobe [ 318.280596][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 318.836220][ T24] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 318.864101][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.881552][ T24] usb 2-1: Product: syz [ 318.890256][ T24] usb 2-1: Manufacturer: syz [ 318.900623][ T24] usb 2-1: SerialNumber: syz [ 318.925822][ T24] usb 2-1: config 0 descriptor?? [ 319.818936][ T24] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 319.858413][ T24] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 319.877635][ T24] usb 2-1: USB disconnect, device number 38 [ 320.069264][ T8208] fuse: Bad value for 'fd' [ 321.241878][ T8218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 321.248448][ T8218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.256303][ T8218] vhci_hcd vhci_hcd.0: Device attached [ 321.425608][ T8217] binder: 8211:8217 ioctl c0189376 200000000280 returned -22 [ 321.597204][ T8219] vhci_hcd: connection closed [ 321.658027][ T36] vhci_hcd: stop threads [ 321.667395][ T5869] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 321.795532][ T36] vhci_hcd: release socket [ 321.870601][ T36] vhci_hcd: disconnect device [ 322.033733][ T8226] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 322.074836][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 322.081980][ T8228] syz.1.661: attempt to access beyond end of device [ 322.081980][ T8228] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 322.096867][ T8228] befs: (nbd1): unable to read superblock [ 322.392854][ T8238] binder: 8237:8238 ioctl 4018620d 0 returned -22 [ 322.409542][ T8238] binder: 8237:8238 ioctl c0306201 200000001d40 returned -11 [ 322.432312][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'. [ 322.442492][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'. [ 322.541031][ T5870] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 322.571008][ T8243] FAULT_INJECTION: forcing a failure. [ 322.571008][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 322.600681][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.1.667 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 322.600709][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 322.600724][ T8243] Call Trace: [ 322.600732][ T8243] [ 322.600744][ T8243] dump_stack_lvl+0x189/0x250 [ 322.600778][ T8243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.600805][ T8243] ? __pfx__printk+0x10/0x10 [ 322.600837][ T8243] ? __pfx___might_resched+0x10/0x10 [ 322.600866][ T8243] ? fs_reclaim_acquire+0x7d/0x100 [ 322.600891][ T8243] should_fail_ex+0x414/0x560 [ 322.600925][ T8243] ? __pfx_sock_alloc_inode+0x10/0x10 [ 322.600952][ T8243] should_failslab+0xa8/0x100 [ 322.600984][ T8243] ? __pfx_sock_alloc_inode+0x10/0x10 [ 322.601010][ T8243] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 322.601037][ T8243] ? sock_alloc_inode+0x28/0xc0 [ 322.601068][ T8243] ? __pfx_sock_alloc_inode+0x10/0x10 [ 322.601095][ T8243] sock_alloc_inode+0x28/0xc0 [ 322.601122][ T8243] alloc_inode+0x67/0x1b0 [ 322.601150][ T8243] __sock_create+0x12d/0x9f0 [ 322.601179][ T8243] __sys_socket+0xd7/0x1b0 [ 322.601209][ T8243] __x64_sys_socket+0x7a/0x90 [ 322.601229][ T8243] do_syscall_64+0xf6/0x210 [ 322.601253][ T8243] ? clear_bhb_loop+0x45/0xa0 [ 322.601277][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.601296][ T8243] RIP: 0033:0x7f5f8218e969 [ 322.601313][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.601330][ T8243] RSP: 002b:00007f5f7fff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 322.601350][ T8243] RAX: ffffffffffffffda RBX: 00007f5f823b5fa0 RCX: 00007f5f8218e969 [ 322.601364][ T8243] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 322.601375][ T8243] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 322.601386][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.601398][ T8243] R13: 0000000000000001 R14: 00007f5f823b5fa0 R15: 00007ffc2f4b6518 [ 322.601429][ T8243] [ 322.601439][ T8243] socket: no more sockets [ 322.888869][ T8249] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 322.899942][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 322.908264][ T5870] usb 5-1: config index 0 descriptor too short (expected 38948, got 36) [ 322.916896][ T5870] usb 5-1: config 50 has too many interfaces: 81, using maximum allowed: 32 [ 322.925773][ T5870] usb 5-1: config 50 has an invalid interface number: 251 but max is 80 [ 322.934274][ T5870] usb 5-1: config 50 has 1 interface, different from the descriptor's value: 81 [ 322.951442][ T5870] usb 5-1: config 50 has no interface number 0 [ 322.962863][ T5870] usb 5-1: config 50 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 322.979905][ T5870] usb 5-1: config 50 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 323.012365][ T5870] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 323.027910][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.046209][ T5870] usb 5-1: Product: syz [ 323.059515][ T5870] usb 5-1: Manufacturer: syz [ 323.094557][ T5870] usb 5-1: SerialNumber: syz [ 324.353895][ T8233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.425717][ T8233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 325.224500][ T5870] asix 5-1:50.251: probe with driver asix failed with error -71 [ 325.238842][ T5870] usb 5-1: USB disconnect, device number 29 [ 325.596010][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.632786][ T8275] batadv_slave_1: entered promiscuous mode [ 325.730324][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 325.912803][ T8282] Bluetooth: MGMT ver 1.23 [ 327.490024][ T5869] vhci_hcd: vhci_device speed not set [ 327.571668][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 328.002067][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.027632][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.130235][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.178346][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.356832][ T8308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 328.363489][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.371333][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 329.010195][ T5881] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 329.538197][ T8309] vhci_hcd: connection closed [ 329.632422][ T81] vhci_hcd: stop threads [ 329.801744][ T81] vhci_hcd: release socket [ 329.809045][ T81] vhci_hcd: disconnect device [ 330.181215][ T10] usb 1-1: usb_control_msg returned -71 [ 330.290002][ T10] usbtmc 1-1:16.0: can't read capabilities [ 330.320316][ T10] usb 1-1: USB disconnect, device number 25 [ 332.084292][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.302354][ T5900] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 332.486378][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 332.938736][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 333.304533][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.329778][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.351172][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.400068][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 333.426343][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.440001][ T5900] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 333.490299][ T10] usb 4-1: Product: syz [ 333.510167][ T10] usb 4-1: Manufacturer: syz [ 333.514977][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.534446][ T10] usb 4-1: SerialNumber: syz [ 333.570545][ T5900] usb 5-1: config 0 descriptor?? [ 333.590980][ T10] usb 4-1: config 0 descriptor?? [ 333.621554][ T10] gspca_main: kinect-2.14.0 probing 045e:02bf [ 333.961499][ T8350] sch_fq: defrate 2048 ignored. [ 334.103654][ T8352] veth0: entered promiscuous mode [ 334.473063][ T8332] veth0: left promiscuous mode [ 334.506157][ T919] usb 4-1: USB disconnect, device number 32 [ 334.510060][ T5900] input: HID 0458:501a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:501A.0006/input/input17 [ 334.727918][ T5900] input: HID 0458:501a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:501A.0006/input/input18 [ 334.859979][ T30] audit: type=1804 audit(1746581085.120:11): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.697" name="/newroot/149/file0" dev="tmpfs" ino=795 res=1 errno=0 [ 334.881084][ T5881] vhci_hcd: vhci_device speed not set [ 334.890021][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 334.907402][ T8358] ref_ctr_offset mismatch. inode: 0x31b offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 334.938879][ T5900] kye 0003:0458:501A.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 334.954093][ T8358] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 335.003027][ T5900] usb 5-1: USB disconnect, device number 30 [ 335.009190][ T8358] ref_ctr decrement failed for inode: 0x31b offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888032c30a00 [ 335.062909][ T9] usb 2-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 335.070058][ T8358] uprobe: syz.2.697:8358 failed to unregister, leaking uprobe [ 335.115845][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.174864][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 335.194517][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.207814][ T9] usb 2-1: Product: syz [ 335.212135][ T9] usb 2-1: Manufacturer: syz [ 335.266663][ T9] usb 2-1: SerialNumber: syz [ 335.297404][ T9] usb 2-1: config 0 descriptor?? [ 336.802506][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 336.811383][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 336.820194][ T8356] netlink: 'syz.1.696': attribute type 7 has an invalid length. [ 336.849374][ T919] usb 2-1: USB disconnect, device number 39 [ 336.995130][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.058704][ T30] audit: type=1804 audit(1746581087.320:12): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.705" name="/newroot/150/file0" dev="tmpfs" ino=801 res=1 errno=0 [ 337.083616][ T8385] ref_ctr_offset mismatch. inode: 0x321 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 337.156280][ T8377] delete_channel: no stack [ 337.215188][ T8385] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 337.226419][ T8385] ref_ctr decrement failed for inode: 0x321 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802ce56400 [ 337.284726][ T8385] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 337.320319][ T8385] ref_ctr decrement failed for inode: 0x321 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880313e4600 [ 337.368973][ T8385] uprobe: syz.2.705:8385 failed to unregister, leaking uprobe [ 337.420286][ T30] audit: type=1804 audit(1746581087.680:13): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.708" name="/newroot/135/file0" dev="tmpfs" ino=716 res=1 errno=0 [ 337.457630][ T8394] ref_ctr_offset mismatch. inode: 0x2cc offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 337.701522][ T8394] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 337.938305][ T5900] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 337.957277][ T8394] ref_ctr decrement failed for inode: 0x2cc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802ce50a00 [ 337.981351][ T8394] uprobe: syz.4.708:8394 failed to unregister, leaking uprobe [ 338.007698][ T8399] netlink: 'syz.4.708': attribute type 287 has an invalid length. [ 338.132509][ T5900] usb 1-1: config 0 has no interfaces? [ 338.141472][ T5900] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 338.162017][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.173914][ T5900] usb 1-1: Product: syz [ 338.178118][ T5900] usb 1-1: Manufacturer: syz [ 338.189945][ T5900] usb 1-1: SerialNumber: syz [ 338.207990][ T5900] usb 1-1: config 0 descriptor?? [ 338.419297][ T5870] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 338.429059][ T5869] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 339.369676][ T5869] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 339.398471][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 339.419368][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.420724][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.438210][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.438296][ T5870] usb 2-1: Product: syz [ 339.458546][ T5869] usb 3-1: config 0 has no interface number 0 [ 339.464847][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.548596][ T5870] usb 2-1: Manufacturer: syz [ 339.580727][ T5870] usb 2-1: SerialNumber: syz [ 339.589467][ T5869] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 339.628365][ T5869] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 339.658719][ T5870] usb 2-1: config 0 descriptor?? [ 339.708179][ T5870] gspca_main: kinect-2.14.0 probing 045e:02bf [ 339.714956][ T5869] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 339.726888][ T5869] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 339.743124][ T30] audit: type=1804 audit(1746581090.010:14): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.716" name="/newroot/137/file0" dev="tmpfs" ino=728 res=1 errno=0 [ 339.771238][ T5869] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 339.789940][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.800164][ T5869] usb 3-1: Product: syz [ 339.815024][ T8419] ref_ctr_offset mismatch. inode: 0x2d8 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 339.818596][ T5869] usb 3-1: Manufacturer: syz [ 339.852943][ T8419] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 339.855209][ T5869] usb 3-1: SerialNumber: syz [ 339.871222][ T8419] ref_ctr decrement failed for inode: 0x2d8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802ce56e00 [ 339.888388][ T8419] uprobe: syz.4.716:8419 failed to unregister, leaking uprobe [ 339.905003][ T5869] usb 3-1: config 0 descriptor?? [ 339.910379][ T8421] netlink: 'syz.4.716': attribute type 287 has an invalid length. [ 339.929374][ T5869] symbolserial 3-1:0.175: symbol converter detected [ 339.946585][ T5869] usb 3-1: symbol converter now attached to ttyUSB0 [ 339.965184][ T8402] sch_fq: defrate 2048 ignored. [ 339.972320][ T8402] veth0: entered promiscuous mode [ 339.981608][ T8402] veth0: left promiscuous mode [ 340.000065][ T5869] usb 2-1: USB disconnect, device number 40 [ 340.152946][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.173193][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.202883][ T5900] usb 3-1: USB disconnect, device number 26 [ 340.228010][ T5900] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 340.249225][ T5900] symbolserial 3-1:0.175: device disconnected [ 340.302562][ T8434] netlink: 'syz.4.720': attribute type 12 has an invalid length. [ 340.315044][ T8434] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 340.322971][ T8434] netlink: 148 bytes leftover after parsing attributes in process `syz.4.720'. [ 340.424106][ T30] audit: type=1804 audit(1746581090.690:15): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.722" name="/newroot/139/file0" dev="tmpfs" ino=739 res=1 errno=0 [ 340.445612][ T8438] ref_ctr_offset mismatch. inode: 0x2e3 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 340.457926][ T8438] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 340.466413][ T8438] ref_ctr decrement failed for inode: 0x2e3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888031bcd000 [ 340.477602][ T8438] uprobe: syz.4.722:8438 failed to unregister, leaking uprobe [ 340.620276][ T5870] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 340.863620][ T5870] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 340.938171][ T5870] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.030441][ T5870] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 341.130292][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.149149][ T5900] usb 1-1: USB disconnect, device number 26 [ 341.182353][ T5870] usb 4-1: Product: syz [ 341.198581][ T5870] usb 4-1: Manufacturer: syz [ 341.209483][ T5870] usb 4-1: SerialNumber: syz [ 341.216225][ T8447] tmpfs: Unknown parameter 'grpquota,2x„'h!õüëÔi¼k¡×±®ÞÂhØzYR¬' [ 341.226650][ T5870] usb 4-1: config 0 descriptor?? [ 341.440503][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 341.449403][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 341.458723][ T8436] netlink: 'syz.3.721': attribute type 7 has an invalid length. [ 342.191560][ T5871] usb 4-1: USB disconnect, device number 33 [ 342.470029][ T5900] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 342.688772][ T5881] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 342.726700][ T5900] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 342.746234][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.768719][ T5900] usb 1-1: Product: syz [ 342.784408][ T5900] usb 1-1: Manufacturer: syz [ 342.789678][ T5900] usb 1-1: SerialNumber: syz [ 342.824920][ T5900] usb 1-1: config 0 descriptor?? [ 342.870433][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 342.952444][ T5900] gspca_main: kinect-2.14.0 probing 045e:02bf [ 343.007667][ T5881] usb 3-1: config 4 has an invalid interface number: 152 but max is 0 [ 343.034500][ T5881] usb 3-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 343.045132][ T5881] usb 3-1: config 4 has no interface number 0 [ 343.051589][ T5881] usb 3-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=eb.79 [ 343.061438][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.335791][ T8483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.732'. [ 343.496188][ T8483] netlink: 43 bytes leftover after parsing attributes in process `syz.4.732'. [ 343.557308][ T8460] veth0: entered promiscuous mode [ 343.563219][ T8483] netlink: 'syz.4.732': attribute type 6 has an invalid length. [ 343.599683][ T5881] usb 3-1: string descriptor 0 read error: -71 [ 343.821203][ T8483] netlink: 'syz.4.732': attribute type 5 has an invalid length. [ 343.906593][ T5881] plusb 3-1:4.152: probe with driver plusb failed with error -22 [ 343.910011][ T8452] veth0: left promiscuous mode [ 343.914967][ T8483] netlink: 43 bytes leftover after parsing attributes in process `syz.4.732'. [ 343.943870][ T5881] usb 3-1: USB disconnect, device number 27 [ 343.968950][ T5870] usb 1-1: USB disconnect, device number 27 [ 344.565397][ T8497] tmpfs: Unknown parameter 'grpquota,2x„'h!õüëÔi¼k¡×±®ÞÂhØzYR¬' [ 346.870041][ T5871] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 347.097004][ T5871] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 347.265332][ T5871] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 348.462769][ T5871] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 348.567239][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.800520][ T5871] usb 1-1: Product: syz [ 348.804746][ T5871] usb 1-1: Manufacturer: syz [ 348.809361][ T5871] usb 1-1: SerialNumber: syz [ 348.906911][ T5871] usb 1-1: config 0 descriptor?? [ 349.903214][ T10] usb 1-1: USB disconnect, device number 28 [ 351.066167][ T8533] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 351.397268][ T8548] macvlan2: entered promiscuous mode [ 351.402740][ T8548] bridge0: entered promiscuous mode [ 352.848590][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 353.042680][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 353.068066][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 353.122829][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.149907][ T10] usb 2-1: Product: syz [ 353.169857][ T10] usb 2-1: Manufacturer: syz [ 353.180310][ T10] usb 2-1: SerialNumber: syz [ 353.215191][ T10] usb 2-1: config 0 descriptor?? [ 353.245622][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 353.269455][ T10] usb 2-1: setting power ON [ 353.285832][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 353.351166][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.390535][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 353.419532][ T10] usb 2-1: media controller created [ 353.881076][ T8552] dvb-usb: bulk message failed: -22 (3/0) [ 353.990228][ T8552] usb 2-1: gpio_write failed. [ 353.994985][ T8552] dvb-usb: bulk message failed: -22 (42/0) [ 354.014024][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.091803][ T10] usb 2-1: selecting invalid altsetting 6 [ 354.097931][ T8575] netlink: 'syz.0.760': attribute type 12 has an invalid length. [ 354.098289][ T10] usb 2-1: digital interface selection failed (-22) [ 354.132856][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 354.142127][ T8575] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 354.152136][ T10] usb 2-1: setting power OFF [ 354.156886][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 354.163219][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 354.172807][ T8575] netlink: 148 bytes leftover after parsing attributes in process `syz.0.760'. [ 354.202121][ T10] (NULL device *): no alternate interface [ 354.347667][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 354.522932][ T5871] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 354.806418][ T5871] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 354.912885][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.050825][ T5871] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 355.127141][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.234667][ T5871] usb 4-1: Product: syz [ 355.270374][ T5871] usb 4-1: Manufacturer: syz [ 355.305740][ T5871] usb 4-1: SerialNumber: syz [ 355.420357][ T10] usb 2-1: USB disconnect, device number 41 [ 355.461925][ T5871] usb 4-1: config 0 descriptor?? [ 355.751096][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 355.759966][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 355.768813][ T8578] netlink: 'syz.3.761': attribute type 7 has an invalid length. [ 355.784453][ T10] usb 4-1: USB disconnect, device number 34 [ 357.933550][ T8614] binder: 8613:8614 ioctl 4018620d 0 returned -22 [ 357.945259][ T8614] binder: 8613:8614 ioctl c0306201 0 returned -14 [ 357.990781][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'. [ 358.032155][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'. [ 358.168079][ T8617] 9pnet_fd: Insufficient options for proto=fd [ 358.385910][ T919] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 359.978619][ T919] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 360.001973][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.027022][ T919] usb 2-1: Product: syz [ 360.036999][ T919] usb 2-1: Manufacturer: syz [ 360.071607][ T919] usb 2-1: SerialNumber: syz [ 360.118638][ T919] usb 2-1: config 0 descriptor?? [ 360.825852][ T919] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 360.847080][ T919] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 360.874641][ T919] usb 2-1: USB disconnect, device number 42 [ 361.074956][ T5881] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 361.279961][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 362.749557][ T5881] usb 5-1: config 4 has an invalid interface number: 152 but max is 0 [ 362.830205][ T5881] usb 5-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 363.152757][ T5881] usb 5-1: config 4 has no interface number 0 [ 363.194908][ T5881] usb 5-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=eb.79 [ 363.242128][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.285465][ T5881] usb 5-1: can't set config #4, error -71 [ 363.325554][ T5881] usb 5-1: USB disconnect, device number 31 [ 363.379908][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 363.510535][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 363.542041][ T9] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 363.559645][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.621323][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 363.672389][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.686991][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 363.706405][ T9] usb 4-1: Product: syz [ 363.711343][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.722269][ T9] usb 4-1: Manufacturer: syz [ 363.742871][ T10] usb 2-1: Product: syz [ 363.750144][ T9] usb 4-1: SerialNumber: syz [ 363.755239][ T10] usb 2-1: Manufacturer: syz [ 363.771345][ T9] usb 4-1: config 0 descriptor?? [ 363.776574][ T10] usb 2-1: SerialNumber: syz [ 363.803808][ T10] usb 2-1: config 0 descriptor?? [ 363.984813][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 363.995086][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 363.999966][ T919] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 364.004068][ T8640] netlink: 'syz.3.778': attribute type 7 has an invalid length. [ 364.030409][ T5869] usb 4-1: USB disconnect, device number 35 [ 364.039248][ T10] usb 2-1: ignoring: probably an ADSL modem [ 364.195282][ T919] usb 5-1: config 9 has an invalid interface number: 32 but max is 0 [ 364.206312][ T919] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 364.226844][ T919] usb 5-1: config 9 has no interface number 0 [ 364.237418][ T919] usb 5-1: config 9 interface 32 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.245897][ T10] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 364.279162][ T919] usb 5-1: config 9 interface 32 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.295249][ T919] usb 5-1: config 9 interface 32 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 364.308039][ T10] usb 2-1: USB disconnect, device number 43 [ 364.328898][ T919] usb 5-1: config 9 interface 32 has no altsetting 0 [ 364.342426][ T919] usb 5-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 364.352787][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.361377][ T919] usb 5-1: Product: syz [ 364.365760][ T919] usb 5-1: Manufacturer: syz [ 364.370879][ T919] usb 5-1: SerialNumber: syz [ 364.963740][ T919] usb 5-1: USB disconnect, device number 32 [ 365.385312][ T8680] syz.3.791: attempt to access beyond end of device [ 365.385312][ T8680] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 365.571488][ T8680] befs: (nbd3): unable to read superblock [ 366.242696][ T8694] netlink: 108 bytes leftover after parsing attributes in process `syz.1.795'. [ 367.856563][ T8694] netlink: 108 bytes leftover after parsing attributes in process `syz.1.795'. [ 368.116618][ T8695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 368.123218][ T8695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.300090][ T5869] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 368.517452][ T8695] vhci_hcd vhci_hcd.0: Device attached [ 368.543972][ T8699] vhci_hcd: connection closed [ 368.676299][ T5913] vhci_hcd: stop threads [ 368.730081][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 368.760400][ T5913] vhci_hcd: release socket [ 368.764887][ T5913] vhci_hcd: disconnect device [ 368.783708][ T30] audit: type=1804 audit(1746581118.054:16): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.799" name="/newroot/162/file0" dev="tmpfs" ino=879 res=1 errno=0 [ 368.796158][ T8707] netlink: 'syz.0.799': attribute type 287 has an invalid length. [ 368.818658][ T5869] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 368.829991][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.851080][ T5869] usb 2-1: Product: syz [ 368.855288][ T5869] usb 2-1: Manufacturer: syz [ 368.868295][ T5869] usb 2-1: SerialNumber: syz [ 368.880913][ T5869] usb 2-1: config 0 descriptor?? [ 368.909534][ T5869] gspca_main: sq930x-2.14.0 probing 2770:930c [ 369.150635][ T8712] xt_nat: multiple ranges no longer supported [ 369.592463][ T5869] gspca_sq930x: reg_r 001f failed -110 [ 369.631250][ T5869] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 369.683048][ T9] usb 2-1: USB disconnect, device number 44 [ 370.112917][ T919] kernel write not supported for file task/529/net/ip6_tables_matches (pid: 919 comm: kworker/1:2) [ 370.220248][ T5869] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 371.691355][ T5869] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 371.738845][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.794496][ T5869] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 371.814075][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.843242][ T5869] usb 4-1: Product: syz [ 371.889407][ T8734] syz.2.808: attempt to access beyond end of device [ 371.889407][ T8734] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 371.919451][ T8734] befs: (nbd2): unable to read superblock [ 372.010583][ T5869] usb 4-1: Manufacturer: syz [ 372.010607][ T5869] usb 4-1: SerialNumber: syz [ 372.014572][ T5869] usb 4-1: config 0 descriptor?? [ 372.819912][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 372.828848][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 372.837858][ T8715] netlink: 'syz.3.801': attribute type 7 has an invalid length. [ 372.856836][ T5869] usb 4-1: USB disconnect, device number 36 [ 373.052669][ T8752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 373.059246][ T8752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.067047][ T8752] vhci_hcd vhci_hcd.0: Device attached [ 373.199874][ T919] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 374.427423][ T8753] vhci_hcd: connection closed [ 374.436858][ T919] usb 1-1: config 0 has no interfaces? [ 374.484868][ T5913] vhci_hcd: stop threads [ 374.500197][ T5913] vhci_hcd: release socket [ 374.530797][ T5913] vhci_hcd: disconnect device [ 374.539890][ T10] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 374.550458][ T919] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 374.574677][ T10] usb 35-1: enqueue for inactive port 0 [ 374.617183][ T919] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 374.689925][ T10] vhci_hcd: vhci_device speed not set [ 374.690806][ T919] usb 1-1: Product: syz [ 374.709215][ T919] usb 1-1: Manufacturer: syz [ 374.729529][ T919] usb 1-1: SerialNumber: syz [ 374.818433][ T919] usb 1-1: config 0 descriptor?? [ 374.931293][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 375.143139][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.145484][ T919] usb 1-1: USB disconnect, device number 29 [ 375.443226][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.463048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 375.479370][ T9] usb 4-1: Product: syz [ 375.489455][ T9] usb 4-1: Manufacturer: syz [ 375.503065][ T9] usb 4-1: SerialNumber: syz [ 375.521767][ T9] usb 4-1: config 0 descriptor?? [ 375.578415][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 375.649337][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.787270][ T10] usb 4-1: USB disconnect, device number 37 [ 378.494435][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.451704][ T8798] netlink: 592 bytes leftover after parsing attributes in process `syz.0.823'. [ 403.599882][ T5900] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 404.602376][ T5900] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 404.623474][ T8848] netlink: 'syz.1.838': attribute type 12 has an invalid length. [ 404.631580][ T8848] netlink: 'syz.1.838': attribute type 29 has an invalid length. [ 404.639672][ T8848] netlink: 148 bytes leftover after parsing attributes in process `syz.1.838'. [ 404.939415][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.029880][ T5900] usb 4-1: Product: syz [ 405.040196][ T5900] usb 4-1: Manufacturer: syz [ 405.045247][ T5900] usb 4-1: SerialNumber: syz [ 405.053704][ T5900] usb 4-1: config 0 descriptor?? [ 405.105819][ T30] audit: type=1804 audit(1746581153.370:17): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.839" name="/newroot/166/file0" dev="tmpfs" ino=880 res=1 errno=0 [ 405.142792][ T8850] ref_ctr_offset mismatch. inode: 0x370 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 405.192195][ T8851] netlink: 'syz.4.839': attribute type 287 has an invalid length. [ 405.310788][ T5900] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 405.522425][ T5900] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 405.554243][ T5900] usb 4-1: USB disconnect, device number 38 [ 406.175922][ T8866] syz.1.843: attempt to access beyond end of device [ 406.175922][ T8866] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 406.201829][ T8866] befs: (nbd1): unable to read superblock [ 406.804763][ T8876] binder: 8875:8876 ioctl 4018620d 0 returned -22 [ 407.489152][ T8876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'. [ 407.500393][ T8876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'. [ 407.799929][ T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 407.972390][ T9] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 407.980763][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.996641][ T9] usb 5-1: config 0 has no interface number 0 [ 408.003590][ T9] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 408.021338][ T9] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 408.034099][ T9] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 408.051437][ T9] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 408.081468][ T9] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 408.098232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.106417][ T5900] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 408.116523][ T9] usb 5-1: Product: syz [ 408.140581][ T9] usb 5-1: Manufacturer: syz [ 408.145217][ T9] usb 5-1: SerialNumber: syz [ 408.163352][ T9] usb 5-1: config 0 descriptor?? [ 408.170739][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 408.187110][ T9] symbolserial 5-1:0.175: symbol converter detected [ 408.201734][ T9] usb 5-1: symbol converter now attached to ttyUSB0 [ 408.301782][ T5900] usb 1-1: config 9 has an invalid interface number: 32 but max is 0 [ 408.319842][ T5900] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 408.330546][ T5900] usb 1-1: config 9 has no interface number 0 [ 408.336701][ T5900] usb 1-1: config 9 interface 32 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.349520][ T5900] usb 1-1: config 9 interface 32 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.362248][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.373051][ T10] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.386322][ T5900] usb 1-1: config 9 interface 32 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 408.400317][ T8901] 9pnet_fd: Insufficient options for proto=fd [ 408.407149][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.419902][ T5900] usb 1-1: config 9 interface 32 has no altsetting 0 [ 408.431598][ T5900] usb 1-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 408.441025][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 408.450123][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.458144][ T5900] usb 1-1: Product: syz [ 408.465610][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 408.472689][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.475298][ T10] usb 4-1: Product: syz [ 408.487857][ T5900] usb 1-1: Manufacturer: syz [ 408.491095][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.494518][ T5900] usb 1-1: SerialNumber: syz [ 408.505260][ T10] usb 4-1: Manufacturer: syz [ 408.510774][ T10] usb 4-1: SerialNumber: syz [ 408.523638][ T10] usb 4-1: config 0 descriptor?? [ 408.556598][ T9] usb 5-1: USB disconnect, device number 33 [ 408.592474][ T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 408.607938][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 408.626105][ T9] symbolserial 5-1:0.175: device disconnected [ 408.684380][ T8820] udevd[8820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.758956][ T5869] usb 4-1: USB disconnect, device number 39 [ 408.768799][ T5900] usb 1-1: USB disconnect, device number 30 [ 409.069971][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 409.098062][ T8907] syz.1.856: attempt to access beyond end of device [ 409.098062][ T8907] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 409.111264][ T8907] befs: (nbd1): unable to read superblock [ 409.422465][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 409.432368][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.440539][ T9] usb 3-1: Product: syz [ 409.444743][ T9] usb 3-1: Manufacturer: syz [ 409.449365][ T9] usb 3-1: SerialNumber: syz [ 409.457645][ T9] usb 3-1: config 0 descriptor?? [ 410.057175][ T9] usb 3-1: ignoring: probably an ADSL modem [ 410.420014][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 410.500125][ T9] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 411.166871][ T9] usb 3-1: USB disconnect, device number 28 [ 411.200573][ T8925] netlink: 'syz.1.861': attribute type 12 has an invalid length. [ 411.208348][ T8925] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 411.216181][ T8925] netlink: 148 bytes leftover after parsing attributes in process `syz.1.861'. [ 411.577799][ T30] audit: type=1804 audit(1746581157.838:18): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.865" name="/newroot/176/file0" dev="tmpfs" ino=953 res=1 errno=0 [ 411.585453][ T8934] netlink: 'syz.0.865': attribute type 287 has an invalid length. [ 411.973670][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.981141][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.289054][ T8955] syz.1.871: attempt to access beyond end of device [ 414.289054][ T8955] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 414.315111][ T8955] befs: (nbd1): unable to read superblock [ 414.369235][ T8957] syz.2.873: attempt to access beyond end of device [ 414.369235][ T8957] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 414.393324][ T8957] befs: (nbd2): unable to read superblock [ 414.574100][ T8963] netlink: 'syz.3.875': attribute type 12 has an invalid length. [ 414.581985][ T8963] netlink: 'syz.3.875': attribute type 29 has an invalid length. [ 414.589795][ T8963] netlink: 148 bytes leftover after parsing attributes in process `syz.3.875'. [ 414.669832][ T5869] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 414.841602][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.989847][ T5871] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 416.260002][ T919] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 416.314181][ T5869] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.493152][ T5871] usb 3-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 416.509462][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 416.541885][ T919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.587500][ T5871] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 416.601716][ T5869] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.613571][ T919] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.632638][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 416.654797][ T5871] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 416.673962][ T919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 416.682707][ T5869] usb 1-1: Product: syz [ 416.687020][ T5869] usb 1-1: Manufacturer: syz [ 416.694690][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.702895][ T5869] usb 1-1: SerialNumber: syz [ 416.732531][ T5871] usb 3-1: Product: syz [ 416.741808][ T919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.760525][ T5869] usb 1-1: config 0 descriptor?? [ 416.792594][ T5871] usb 3-1: Manufacturer: syz [ 416.797424][ T5871] usb 3-1: SerialNumber: syz [ 416.826042][ T919] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 416.865682][ T5871] usb 3-1: config 0 descriptor?? [ 416.878834][ T919] usb 2-1: Product: syz [ 416.889715][ T919] usb 2-1: Manufacturer: syz [ 416.895522][ T919] usb 2-1: SerialNumber: syz [ 416.924359][ T919] usb 2-1: config 0 descriptor?? [ 416.929965][ T5869] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 417.244447][ T5869] usb 1-1: USB disconnect, device number 31 [ 417.966142][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 417.975164][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 417.984151][ T8964] netlink: 'syz.2.874': attribute type 7 has an invalid length. [ 418.000252][ T10] usb 3-1: USB disconnect, device number 29 [ 418.021070][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.159587][ T8983] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 418.256328][ T919] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 418.277598][ T919] usb 2-1: USB disconnect, device number 45 [ 418.356587][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.173412][ T8998] ref_ctr_offset mismatch. inode: 0x3b2 offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 419.196356][ T9000] syz.1.885: attempt to access beyond end of device [ 419.196356][ T9000] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 419.209386][ T8998] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 419.299791][ T30] audit: type=1804 audit(1746581163.433:19): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.886" name="/newroot/177/file0" dev="tmpfs" ino=946 res=1 errno=0 [ 419.320829][ T9000] befs: (nbd1): unable to read superblock [ 419.349171][ T8998] ref_ctr decrement failed for inode: 0x3b2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888032c30a00 [ 419.363232][ T8998] uprobe: syz.2.886:8998 failed to unregister, leaking uprobe [ 419.371482][ T9002] netlink: 'syz.2.886': attribute type 287 has an invalid length. [ 419.419978][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 419.699343][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 419.699426][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.699509][ T10] usb 1-1: Product: syz [ 419.699569][ T10] usb 1-1: Manufacturer: syz [ 419.699642][ T10] usb 1-1: SerialNumber: syz [ 420.007890][ T10] usb 1-1: config 0 descriptor?? [ 420.043515][ T10] gspca_main: kinect-2.14.0 probing 045e:02bf [ 420.776233][ T8994] sch_fq: defrate 2048 ignored. [ 421.637041][ T5915] usb 1-1: USB disconnect, device number 32 [ 421.863092][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.890'. [ 422.728105][ T9031] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 423.169835][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 423.674756][ T10] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.726102][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 423.894049][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.918833][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.959915][ T10] usb 5-1: Product: syz [ 423.964145][ T10] usb 5-1: Manufacturer: syz [ 423.968757][ T10] usb 5-1: SerialNumber: syz [ 424.014782][ T10] usb 5-1: config 0 descriptor?? [ 424.850647][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 424.871323][ T10] usb 5-1: USB disconnect, device number 34 [ 425.415115][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.945878][ T9074] syz.1.902: attempt to access beyond end of device [ 426.945878][ T9074] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 427.046319][ T9074] befs: (nbd1): unable to read superblock [ 428.329820][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 428.499053][ T10] usb 2-1: config 9 has an invalid interface number: 32 but max is 0 [ 428.514678][ T10] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 428.528531][ T10] usb 2-1: config 9 has no interface number 0 [ 428.537905][ T10] usb 2-1: config 9 interface 32 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.555536][ T10] usb 2-1: config 9 interface 32 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.566808][ T10] usb 2-1: config 9 interface 32 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 428.602478][ T10] usb 2-1: config 9 interface 32 has no altsetting 0 [ 428.615214][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 428.627506][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.641423][ T10] usb 2-1: Product: syz [ 428.645697][ T10] usb 2-1: Manufacturer: syz [ 428.651806][ T10] usb 2-1: SerialNumber: syz [ 428.689991][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 428.857015][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.884981][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 428.910077][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.929364][ T10] usb 2-1: USB disconnect, device number 46 [ 428.969082][ T9] usb 5-1: config 0 descriptor?? [ 429.253307][ T9] (null): keene_cmd_main failed (-71) [ 429.310695][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 429.321056][ T9] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 429.353101][ T9] usb 5-1: USB disconnect, device number 35 [ 429.887521][ T9129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.926'. [ 429.936242][ T9131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.925'. [ 429.964647][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.925'. [ 429.989755][ T9129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.926'. [ 430.160372][ T9143] netlink: 14 bytes leftover after parsing attributes in process `syz.1.932'. [ 430.207851][ T9147] netlink: 'syz.2.934': attribute type 11 has an invalid length. [ 430.218735][ T9147] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.934'. [ 430.239749][ T9147] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 430.362325][ T9143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.395485][ T9143] bond_slave_0: left promiscuous mode [ 430.405594][ T9143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.417112][ T9143] bond_slave_1: left promiscuous mode [ 430.425071][ T9143] bond0 (unregistering): Released all slaves [ 430.448014][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.698891][ T9166] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 432.580908][ T9185] netlink: 'syz.4.949': attribute type 29 has an invalid length. [ 432.710551][ T9202] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 432.880545][ T9207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.911663][ T9207] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 433.435673][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 433.452024][ T9240] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 433.473516][ T9237] lo speed is unknown, defaulting to 1000 [ 433.473537][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 433.488820][ T9238] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 433.489015][ T9237] lo speed is unknown, defaulting to 1000 [ 433.505307][ T9237] lo speed is unknown, defaulting to 1000 [ 433.520303][ T9238] bond0: (slave wlan1): Opening slave failed [ 433.626621][ T9237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 433.684636][ T9237] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.805506][ T9237] lo speed is unknown, defaulting to 1000 [ 433.835624][ T9237] lo speed is unknown, defaulting to 1000 [ 433.866332][ T9237] lo speed is unknown, defaulting to 1000 [ 433.902452][ T9237] lo speed is unknown, defaulting to 1000 [ 433.922174][ T9237] lo speed is unknown, defaulting to 1000 [ 434.107571][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 434.309643][ T5900] IPVS: starting estimator thread 0... [ 434.324119][ T9271] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 434.499994][ T9273] IPVS: using max 29 ests per chain, 69600 per kthread [ 434.511917][ T9277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.560270][ T9277] bond0: (slave bond1): Enslaving as an active interface with an up link [ 434.847177][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'. [ 434.984414][ T9310] veth3: entered promiscuous mode [ 435.121241][ T9305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.203000][ T9311] vlan2: entered allmulticast mode [ 435.232482][ T9311] bond2: entered allmulticast mode [ 435.984243][ T9343] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1009'. [ 437.374127][ T9348] input: syz0 as /devices/virtual/input/input20 [ 437.912336][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 439.740656][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 439.932680][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.358533][ T5913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.511481][ T5913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.008249][ T5913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.199260][ T5913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.257149][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.266727][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.274503][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.284253][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.292692][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.447085][ T9472] lo speed is unknown, defaulting to 1000 [ 445.392100][ T5826] Bluetooth: hci2: command tx timeout [ 445.516394][ T5913] bridge_slave_1: left allmulticast mode [ 445.530244][ T5913] bridge_slave_1: left promiscuous mode [ 445.539050][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.560018][ T5913] bridge_slave_0: left allmulticast mode [ 445.567062][ T5913] bridge_slave_0: left promiscuous mode [ 445.573353][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.964594][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.973658][ T5913] bond_slave_0: left promiscuous mode [ 445.982832][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.992149][ T5913] bond_slave_1: left promiscuous mode [ 445.998738][ T5913] bond0 (unregistering): Released all slaves [ 446.827813][ T9472] chnl_net:caif_netlink_parms(): no params data found [ 446.904765][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 446.971910][ T5913] hsr_slave_0: left promiscuous mode [ 446.996336][ T5913] hsr_slave_1: left promiscuous mode [ 447.010839][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.031441][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.053538][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.070718][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.134756][ T5913] veth1_macvtap: left promiscuous mode [ 447.140755][ T5913] veth0_macvtap: left promiscuous mode [ 447.146418][ T5913] veth1_vlan: left promiscuous mode [ 447.152598][ T5913] veth0_vlan: left promiscuous mode [ 447.449957][ T5826] Bluetooth: hci2: command tx timeout [ 447.801668][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 447.838487][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 448.204837][ T9555] vlan2: entered promiscuous mode [ 448.210084][ T9555] bond0: entered promiscuous mode [ 448.215208][ T9555] bond_slave_0: entered promiscuous mode [ 448.221585][ T9555] bond_slave_1: entered promiscuous mode [ 448.229038][ T9555] bond1: entered promiscuous mode [ 448.377259][ T9578] lo speed is unknown, defaulting to 1000 [ 448.774466][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.787708][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.818085][ T9472] bridge_slave_0: entered allmulticast mode [ 448.843421][ T9472] bridge_slave_0: entered promiscuous mode [ 448.862283][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.870527][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.899985][ T9472] bridge_slave_1: entered allmulticast mode [ 448.921622][ T9472] bridge_slave_1: entered promiscuous mode [ 449.560669][ T5826] Bluetooth: hci2: command tx timeout [ 450.018059][ T9472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.059128][ T9472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.165819][ T9614] lo speed is unknown, defaulting to 1000 [ 450.413536][ T5913] IPVS: stop unused estimator thread 0... [ 451.195019][ T9472] team0: Port device team_slave_0 added [ 451.213903][ T9472] team0: Port device team_slave_1 added [ 451.280170][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.287402][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.342306][ T9472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.506876][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.520455][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.796840][ T55] Bluetooth: hci2: command tx timeout [ 451.818339][ T9472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.507499][ T9472] hsr_slave_0: entered promiscuous mode [ 453.524977][ T9472] hsr_slave_1: entered promiscuous mode [ 453.539013][ T9472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.556621][ T9472] Cannot create hsr debugfs directory [ 454.612885][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1124'. [ 454.936819][ T9684] caif0: entered promiscuous mode [ 454.948404][ T9684] caif0: entered allmulticast mode [ 455.633777][ T9472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.670119][ T5867] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 455.680286][ T9472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.754153][ T9472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.797237][ T9472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 456.033683][ T5867] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 456.057435][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.793528][ T9727] input: syz0 as /devices/virtual/input/input21 [ 456.935959][ T5867] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.078863][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.296122][ T5867] usb 1-1: Product: syz [ 457.382714][ T5867] usb 1-1: Manufacturer: syz [ 457.479606][ T5867] usb 1-1: SerialNumber: syz [ 457.607324][ T5867] usb 1-1: config 0 descriptor?? [ 457.643782][ T5867] usb 1-1: selecting invalid altsetting 0 [ 457.828154][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.867333][ T5867] usb 1-1: USB disconnect, device number 33 [ 457.918155][ T8820] udevd[8820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.955921][ T9472] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.199968][ T9472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.210387][ T9472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.239144][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.246479][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.778197][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.785430][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.811153][ T53] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 459.943523][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.124461][ T9472] veth0_vlan: entered promiscuous mode [ 460.198593][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 460.222137][ T9472] veth1_vlan: entered promiscuous mode [ 460.323296][ T9472] veth0_macvtap: entered promiscuous mode [ 460.406821][ T9472] veth1_macvtap: entered promiscuous mode [ 461.522997][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1160'. [ 461.628290][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.665815][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.679961][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.695185][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.705532][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.749800][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.763800][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.786426][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.819565][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.828005][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 461.992918][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.016596][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.051795][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.089854][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.123241][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.152848][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.185351][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.305542][ T9472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.325248][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 462.349759][ T9472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.384482][ T9472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.405396][ T9472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.499204][ T9855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.565221][ T9858] veth5: entered promiscuous mode [ 462.583463][ T9858] bond2: (slave veth5): Enslaving as an active interface with an up link [ 462.669814][ T5915] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 463.027001][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.074316][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.314526][ T4919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.387197][ T5915] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 463.398642][ T4919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.417922][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.447620][ T5915] usb 2-1: config 0 descriptor?? [ 463.493488][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 463.519602][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 463.535791][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.553033][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.561902][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 463.614794][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 463.659774][ T5915] usb 2-1: media controller created [ 463.668443][ T5867] hid-generic 0005:0B57:0009.0007: collection stack underflow [ 463.677158][ T5867] hid-generic 0005:0B57:0009.0007: item 0 0 0 12 parsing failed [ 463.683814][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.693991][ T5867] hid-generic 0005:0B57:0009.0007: probe with driver hid-generic failed with error -22 [ 463.810901][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 463.839349][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 463.900551][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 463.938426][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 463.965593][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 464.001083][ T5915] usb 2-1: USB disconnect, device number 47 [ 464.159683][ T5915] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 464.245147][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 464.293989][ T9914] binder: BINDER_SET_CONTEXT_MGR already set [ 464.332302][ T9914] binder: 9913:9914 ioctl 4018620d 200000000040 returned -16 [ 464.356571][ T9916] binder: 9913:9916 ioctl c0306201 2000000003c0 returned -14 [ 464.394959][ T9914] binder: 9913:9914 ioctl c0306201 200000000540 returned -11 [ 464.439533][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.588174][ T9912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.625849][ T9917] vlan2: entered allmulticast mode [ 464.635148][ T9917] bond4: entered allmulticast mode [ 464.741734][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.076510][ T30] audit: type=1804 audit(1746581463.345:20): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1193" name="/newroot/220/file0" dev="tmpfs" ino=1165 res=1 errno=0 [ 465.197030][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.215507][ T9940] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 465.238297][ T9940] ref_ctr increment failed for inode: 0x48d offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff888027933200 [ 465.409652][ T9940] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 465.430097][ T9940] ref_ctr decrement failed for inode: 0x48d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888027933200 [ 465.467838][ T9940] uprobe: syz.1.1193:9940 failed to unregister, leaking uprobe [ 465.473312][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.690551][ T919] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 465.862868][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.909959][ T919] usb 3-1: Using ep0 maxpacket: 8 [ 465.944693][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.956425][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.976572][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.988512][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.088460][ T919] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 466.192157][ T919] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 466.253525][ T919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 466.325038][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.354891][ T9967] lo speed is unknown, defaulting to 1000 [ 466.580043][ T1160] bridge_slave_1: left allmulticast mode [ 466.585778][ T1160] bridge_slave_1: left promiscuous mode [ 466.623481][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.625548][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 466.664947][ T1160] bridge_slave_0: left allmulticast mode [ 466.677834][ T1160] bridge_slave_0: left promiscuous mode [ 466.700171][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.823539][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.835717][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.846987][ T1160] bond0 (unregistering): Released all slaves [ 467.885678][ T9972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.903907][ T9978] vlan2: entered allmulticast mode [ 467.909265][ T9978] bond3: entered allmulticast mode [ 468.091258][ T5826] Bluetooth: hci2: command tx timeout [ 468.544696][ T1160] hsr_slave_0: left promiscuous mode [ 468.552670][ T1160] hsr_slave_1: left promiscuous mode [ 468.563047][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.573698][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.584501][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.605533][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.689362][ T1160] veth1_macvtap: left promiscuous mode [ 468.695110][ T1160] veth0_macvtap: left promiscuous mode [ 468.700917][ T1160] veth1_vlan: left promiscuous mode [ 468.706283][ T1160] veth0_vlan: left promiscuous mode [ 468.752617][ T5869] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 468.909789][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 468.937392][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 468.970819][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 469.015050][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.035226][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.071015][ T5900] usb 3-1: USB disconnect, device number 30 [ 469.078064][ T5869] usb 1-1: Product: syz [ 469.096757][ T5869] usb 1-1: Manufacturer: syz [ 469.110912][ T5869] usb 1-1: SerialNumber: syz [ 469.142065][ T5869] usb 1-1: config 0 descriptor?? [ 469.177042][ T5869] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.219585][ T5869] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 469.796224][ T5869] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 469.805123][ T5869] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 469.835860][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 470.174084][ T5826] Bluetooth: hci2: command tx timeout [ 470.216572][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 470.296723][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 470.836721][ T5869] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 470.867130][T10039] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 470.884851][ T9967] chnl_net:caif_netlink_parms(): no params data found [ 471.059773][ T5869] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 471.074548][ T5869] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 471.247064][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 471.255010][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 471.262238][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 471.271400][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 471.281198][ T5869] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 471.294081][ T5869] usb 1-1: USB disconnect, device number 34 [ 471.332311][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.340452][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.352493][ T9967] bridge_slave_0: entered allmulticast mode [ 471.369247][ T9967] bridge_slave_0: entered promiscuous mode [ 471.397185][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.418476][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.436529][ T9967] bridge_slave_1: entered allmulticast mode [ 471.448404][ T9967] bridge_slave_1: entered promiscuous mode [ 471.570609][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 471.598067][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 471.607394][ T9967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.614968][ T9967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.658933][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 471.761367][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 471.761487][ T9967] team0: Port device team_slave_0 added [ 471.785165][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 471.788999][ T9967] team0: Port device team_slave_1 added [ 471.817991][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 472.031970][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 472.053846][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.074859][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.196391][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 472.210017][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 472.235537][ T9967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.246248][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 472.249779][ T5826] Bluetooth: hci2: command tx timeout [ 473.058213][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.069843][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.137221][ T9967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.189490][T10090] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 473.359494][T10096] veth7: entered promiscuous mode [ 473.400355][T10107] netlink: 'syz.4.1238': attribute type 13 has an invalid length. [ 474.056278][T10107] macvtap0: entered promiscuous mode [ 474.192604][T10107] macvtap0: refused to change device tx_queue_len [ 474.446317][ T9967] hsr_slave_0: entered promiscuous mode [ 474.471980][ T9967] hsr_slave_1: entered promiscuous mode [ 474.484299][ T9967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.529867][ T9967] Cannot create hsr debugfs directory [ 475.139847][ T5826] Bluetooth: hci2: command tx timeout [ 476.170466][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 476.297998][T10148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.445382][T10155] veth7: entered promiscuous mode [ 476.500976][T10148] vlan2: entered allmulticast mode [ 476.506159][T10148] bond2: entered allmulticast mode [ 479.032776][ T5869] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 479.212113][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 479.223566][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 479.248306][ T5869] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 479.268029][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 479.331943][ T5869] usb 5-1: Product: syz [ 479.369409][ T5869] usb 5-1: Manufacturer: syz [ 479.408584][ T5869] usb 5-1: SerialNumber: syz [ 479.435389][ T9967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.441825][ T5869] usb 5-1: config 0 descriptor?? [ 479.682588][ T9967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.047755][T10204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.076697][ T5869] hub 5-1:0.0: bad descriptor, ignoring hub [ 480.097612][ T5869] hub 5-1:0.0: probe with driver hub failed with error -5 [ 480.158682][ T9967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.188416][ T9967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.299892][ T919] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 480.464122][ T919] usb 3-1: Using ep0 maxpacket: 32 [ 480.542503][ T919] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 480.566548][ T919] usb 3-1: config 0 has no interface number 0 [ 481.052252][ T9967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.164295][ T919] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.187601][ T919] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 481.198367][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.348148][ T9967] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.361898][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.369082][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.407909][ T919] usb 3-1: Product: syz [ 481.414015][ T919] usb 3-1: Manufacturer: syz [ 481.418650][ T919] usb 3-1: SerialNumber: syz [ 481.436228][ T919] usb 3-1: config 0 descriptor?? [ 481.448328][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.455603][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.455691][ T919] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 481.828406][ T919] em28xx 3-1:0.132: Video interface 132 found: [ 481.989037][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 482.055892][ T9967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.097275][ T9967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.211701][ T919] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 482.408158][T10264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1287'. [ 482.605647][ T9967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.801318][ T9967] veth0_vlan: entered promiscuous mode [ 482.835412][ T9967] veth1_vlan: entered promiscuous mode [ 482.870670][ T919] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 482.912767][ T919] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 482.940301][ T919] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 483.589925][ T919] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 483.613818][ T919] em28xx 3-1:0.132: analog set to bulk mode. [ 483.640101][ T5871] em28xx 3-1:0.132: Registering V4L2 extension [ 483.658344][ T9967] veth0_macvtap: entered promiscuous mode [ 483.676450][ T9967] veth1_macvtap: entered promiscuous mode [ 483.709955][ T919] usb 3-1: USB disconnect, device number 31 [ 483.717286][ T919] em28xx 3-1:0.132: Disconnecting em28xx [ 483.736374][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.787580][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.829851][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.859975][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.889719][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.932069][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.965287][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.002041][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.050758][ T5871] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 484.053721][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.121368][ T5871] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 484.191391][ T5871] em28xx 3-1:0.132: No AC97 audio processor [ 484.315771][ T5871] usb 3-1: Decoder not found [ 484.351947][ T5871] em28xx 3-1:0.132: failed to create media graph [ 484.414236][ T5871] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 484.415530][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.487711][ T5867] usb 5-1: USB disconnect, device number 36 [ 484.670869][ T5871] em28xx 3-1:0.132: Remote control support is not available for this card. [ 484.697069][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.726268][ T919] em28xx 3-1:0.132: Closing input extension [ 484.735389][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.776860][ T919] em28xx 3-1:0.132: Freeing device [ 484.829786][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.839670][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.909880][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.928507][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.975032][T10317] team0: No ports can be present during mode change [ 485.028840][ T9967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.079024][ T9967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.119999][ T9967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.128757][ T9967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.601309][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.629113][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.721687][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.738685][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.807501][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 486.975620][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 487.016870][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 487.042080][ T5931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.072939][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.132334][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.180030][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.228979][ T10] usb 3-1: Product: syz [ 487.235337][ T5931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.250129][ T10] usb 3-1: Manufacturer: syz [ 487.272123][ T10] usb 3-1: SerialNumber: syz [ 487.298270][ T10] usb 3-1: config 0 descriptor?? [ 487.323180][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 487.354373][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 487.372254][ T5931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.502092][ T5931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.961991][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 487.987064][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 487.999101][ T5931] bridge_slave_1: left allmulticast mode [ 488.015491][ T5931] bridge_slave_1: left promiscuous mode [ 488.032801][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.070605][ T5931] bridge_slave_0: left allmulticast mode [ 488.086560][ T5931] bridge_slave_0: left promiscuous mode [ 488.106647][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.219872][ T5867] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 488.310997][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.333635][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.342142][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 488.350878][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 488.358703][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.570658][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 488.586771][ T5867] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 488.604866][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.615393][ T5867] usb 1-1: Product: syz [ 488.619649][ T5867] usb 1-1: Manufacturer: syz [ 488.630517][ T5867] usb 1-1: SerialNumber: syz [ 488.645641][ T5867] usb 1-1: config 0 descriptor?? [ 488.803840][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.824412][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.835949][ T5931] bond0 (unregistering): Released all slaves [ 488.864906][ T5867] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.968414][T10410] lo speed is unknown, defaulting to 1000 [ 489.089826][ T10] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 489.298588][ T10] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 489.318793][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 489.333268][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 489.361312][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 489.378451][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 489.397181][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 489.422818][ T10] usb 3-1: USB disconnect, device number 32 [ 489.446405][ T30] audit: type=1326 audit(1746581487.705:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.548192][ T30] audit: type=1326 audit(1746581487.715:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.641640][ T30] audit: type=1326 audit(1746581487.715:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.664434][ T30] audit: type=1326 audit(1746581487.715:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.688280][ T30] audit: type=1326 audit(1746581487.715:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.711306][ T30] audit: type=1326 audit(1746581487.715:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.734200][ T30] audit: type=1326 audit(1746581487.715:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.756093][ T5931] hsr_slave_0: left promiscuous mode [ 489.766648][ T30] audit: type=1326 audit(1746581487.715:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.792898][ T30] audit: type=1326 audit(1746581487.715:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.815672][ T5931] hsr_slave_1: left promiscuous mode [ 489.823600][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.831975][ T30] audit: type=1326 audit(1746581487.715:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10425 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8218e969 code=0x7ffc0000 [ 489.857333][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.888623][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.905851][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.074157][ T5931] veth1_macvtap: left promiscuous mode [ 490.098106][ T5867] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 490.104545][T10456] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1328'. [ 490.116519][ T5867] usb 1-1: USB disconnect, device number 35 [ 490.129925][ T5931] veth0_macvtap: left promiscuous mode [ 490.135651][ T5931] veth1_vlan: left promiscuous mode [ 490.366970][ T5931] veth0_vlan: left promiscuous mode [ 490.412585][ T5826] Bluetooth: hci2: command tx timeout [ 492.490590][ T5826] Bluetooth: hci2: command tx timeout [ 492.583126][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1332'. [ 493.022048][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 493.068108][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 493.765353][T10410] chnl_net:caif_netlink_parms(): no params data found [ 494.610650][ T5826] Bluetooth: hci2: command tx timeout [ 494.749306][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 495.027126][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'. [ 495.344619][T10507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.396054][T10521] vlan2: entered allmulticast mode [ 495.405990][T10521] bond4: entered allmulticast mode [ 495.500511][T10529] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1343'. [ 495.829740][T10545] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1346'. [ 495.932807][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.971625][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.007006][T10410] bridge_slave_0: entered allmulticast mode [ 496.089888][T10410] bridge_slave_0: entered promiscuous mode [ 496.098228][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.108908][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.433358][T10410] bridge_slave_1: entered allmulticast mode [ 496.614048][T10410] bridge_slave_1: entered promiscuous mode [ 496.823376][ T5826] Bluetooth: hci2: command tx timeout [ 497.137290][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.174858][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.275145][T10410] team0: Port device team_slave_0 added [ 497.308401][T10410] team0: Port device team_slave_1 added [ 497.401763][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.419121][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.475069][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.491297][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.498390][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.578215][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.436204][T10580] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1355'. [ 498.665789][T10410] hsr_slave_0: entered promiscuous mode [ 498.680897][T10410] hsr_slave_1: entered promiscuous mode [ 498.716465][T10410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.814959][T10410] Cannot create hsr debugfs directory [ 499.316167][T10605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1362'. [ 499.427634][T10599] veth9: entered promiscuous mode [ 500.132603][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 500.462321][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 500.593771][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.622220][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.645538][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 500.674443][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 500.686273][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 500.706816][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.768852][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 500.795568][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 500.813263][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 500.828600][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 500.850136][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 500.885800][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 501.004880][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.025830][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.173134][ T10] usb 2-1: USB disconnect, device number 48 [ 501.908636][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 502.830801][T10656] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1374'. [ 502.875338][T10410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.920429][T10410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.965905][T10410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 503.063082][T10410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 503.298663][T10666] syz_tun: entered allmulticast mode [ 503.530595][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 504.166062][T10668] syz_tun (unregistering): left allmulticast mode [ 505.910595][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.049164][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.060779][T10709] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1387'. [ 506.121201][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.128370][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.152024][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.159217][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.196322][T10714] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 507.954953][T10410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.122626][T10410] veth0_vlan: entered promiscuous mode [ 508.178903][T10410] veth1_vlan: entered promiscuous mode [ 508.267321][T10410] veth0_macvtap: entered promiscuous mode [ 508.297503][T10410] veth1_macvtap: entered promiscuous mode [ 508.317134][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.327925][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.344248][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.373649][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.393402][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.418236][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.419788][ T5915] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 508.431908][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.487975][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.520385][T10410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.566609][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.595789][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.621626][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.678046][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.708980][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.735434][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.779358][T10410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.843626][T10410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.009906][T10410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.018734][T10410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.043736][T10410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.090381][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 509.827478][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 509.907180][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.941901][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 509.985619][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.004579][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.023509][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.051497][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.058060][ T5915] usb 3-1: Product: syz [ 510.089316][ T5915] usb 3-1: Manufacturer: syz [ 510.114517][ T5915] usb 3-1: SerialNumber: syz [ 510.134614][ T5915] usb 3-1: config 0 descriptor?? [ 510.163533][ T5915] gspca_main: spca500-2.14.0 probing 046d:0900 [ 510.387963][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.400232][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.419006][ T5915] gspca_spca500: reg write: error -71 [ 510.582920][ T5915] gspca_spca500: reg write: error -71 [ 510.669737][ T5915] gspca_spca500: reg write: error -71 [ 510.698001][ T5915] gspca_spca500: reg write: error -71 [ 510.935096][ T5915] gspca_spca500: reg write: error -71 [ 510.948626][ T5915] gspca_spca500: reg write: error -71 [ 510.964935][ T5915] gspca_spca500: reg write: error -71 [ 510.981554][ T5915] gspca_spca500: reg write: error -71 [ 510.989881][ T5915] gspca_spca500: reg write: error -71 [ 511.007578][ T5915] gspca_spca500: reg write: error -71 [ 511.025259][ T5915] gspca_spca500: reg write: error -71 [ 511.069248][ T5915] gspca_spca500: reg write: error -71 [ 511.091359][ T5915] gspca_spca500: reg write: error -71 [ 511.107434][ T5915] gspca_spca500: reg write: error -71 [ 511.146752][ T5915] usb 3-1: USB disconnect, device number 33 [ 511.218553][ T5913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.641657][ T5913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.957501][ T5913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.179321][ T5913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.431723][ T5913] bridge_slave_1: left allmulticast mode [ 512.437515][ T5913] bridge_slave_1: left promiscuous mode [ 512.647375][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.708433][ T5913] bridge_slave_0: left allmulticast mode [ 512.714198][ T5913] bridge_slave_0: left promiscuous mode [ 512.917908][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.397687][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.407980][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.435703][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.527089][T10875] [ 513.530228][T10875] ============================= [ 513.535093][T10875] WARNING: suspicious RCU usage [ 513.540011][T10875] 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 Not tainted [ 513.547149][T10875] ----------------------------- [ 513.552054][T10875] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 513.560610][T10875] [ 513.560610][T10875] other info that might help us debug this: [ 513.560610][T10875] [ 513.570887][T10875] [ 513.570887][T10875] rcu_scheduler_active = 2, debug_locks = 1 [ 513.578999][T10875] 1 lock held by syz.1.1420/10875: [ 513.584176][T10875] #0: ffffffff8df3ba40 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 513.594459][T10875] [ 513.594459][T10875] stack backtrace: [ 513.600410][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.1.1420 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 513.600437][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 513.600451][T10875] Call Trace: [ 513.600461][T10875] [ 513.600470][T10875] dump_stack_lvl+0x189/0x250 [ 513.600506][T10875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.600534][T10875] ? __pfx__printk+0x10/0x10 [ 513.600580][T10875] lockdep_rcu_suspicious+0x140/0x1d0 [ 513.600614][T10875] get_callchain_entry+0x2b6/0x3c0 [ 513.600647][T10875] get_perf_callchain+0xa1/0x6b0 [ 513.600673][T10875] ? preempt_schedule_common+0x83/0xd0 [ 513.600700][T10875] ? __pfx_get_perf_callchain+0x10/0x10 [ 513.600742][T10875] __bpf_get_stack+0x3fc/0xa60 [ 513.600778][T10875] ? __pfx___bpf_get_stack+0x10/0x10 [ 513.600800][T10875] ? preempt_schedule+0xae/0xc0 [ 513.600819][T10875] ? __pfx_preempt_schedule+0x10/0x10 [ 513.600849][T10875] bpf_get_stack+0x33/0x50 [ 513.600871][T10875] ? bpf_prog_d43750871481577d+0x46/0x4a [ 513.600891][T10875] bpf_get_stack_raw_tp+0x195/0x220 [ 513.600917][T10875] bpf_prog_d43750871481577d+0x46/0x4a [ 513.600937][T10875] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 513.600964][T10875] bpf_prog_test_run_syscall+0x312/0x4b0 [ 513.600990][T10875] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 513.601012][T10875] ? __fget_files+0x2a/0x420 [ 513.601049][T10875] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 513.601072][T10875] bpf_prog_test_run+0x2a9/0x340 [ 513.601101][T10875] __sys_bpf+0x4a4/0x860 [ 513.601127][T10875] ? __pfx___sys_bpf+0x10/0x10 [ 513.601147][T10875] ? preempt_schedule_irq+0xde/0x150 [ 513.601184][T10875] ? rcu_is_watching+0x15/0xb0 [ 513.601224][T10875] __x64_sys_bpf+0x7c/0x90 [ 513.601245][T10875] do_syscall_64+0xf6/0x210 [ 513.601271][T10875] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 513.601290][T10875] ? clear_bhb_loop+0x45/0xa0 [ 513.601315][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.601335][T10875] RIP: 0033:0x7f5f8218e969 [ 513.601359][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.601377][T10875] RSP: 002b:00007f5f7ffb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.601398][T10875] RAX: ffffffffffffffda RBX: 00007f5f823b6160 RCX: 00007f5f8218e969 [ 513.601413][T10875] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 513.601426][T10875] RBP: 00007f5f82210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 513.601439][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.601452][T10875] R13: 0000000000000000 R14: 00007f5f823b6160 R15: 00007ffc2f4b6518 [ 513.601483][T10875] [ 513.923761][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.979132][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.692929][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.703438][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.714577][ T5913] bond0 (unregistering): Released all slaves [ 514.744912][T10879] bridge_slave_0: left allmulticast mode [ 514.751376][T10879] bridge_slave_0: left promiscuous mode [ 514.758092][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.775718][T10879] bridge_slave_1: left allmulticast mode [ 514.785680][T10879] bridge_slave_1: left promiscuous mode [ 514.794718][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.810589][T10879] bond0: (slave bond_slave_0): Releasing backup interface [ 514.818252][T10879] bond_slave_0: left promiscuous mode [ 514.834959][T10879] bond0: (slave bond_slave_1): Releasing backup interface [ 514.857412][T10879] bond_slave_1: left promiscuous mode [ 514.899692][T10879] team0: Port device team_slave_0 removed [ 514.912269][T10879] team0: Port device team_slave_1 removed [ 514.918806][T10879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.947862][T10879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.979632][T10879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.022269][T10879] bond0: (slave bond1): Releasing backup interface [ 515.034559][T10879] bond1: left promiscuous mode [ 515.051133][T10879] bond2: (slave veth5): Releasing backup interface [ 515.072949][T10880] team0: Mode changed to "loadbalance" [ 515.737146][ T5913] hsr_slave_0: left promiscuous mode [ 515.755210][ T5913] hsr_slave_1: left promiscuous mode [ 515.776010][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.796903][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.822169][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.836390][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.905588][ T5913] veth1_macvtap: left promiscuous mode [ 515.915767][ T5913] veth0_macvtap: left promiscuous mode [ 515.923286][ T5913] veth1_vlan: left promiscuous mode [ 515.928660][ T5913] veth0_vlan: left promiscuous mode [ 516.435291][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 516.480158][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 517.448747][ T5913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.512894][ T5913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.588427][ T5913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.672831][ T5913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.883637][ T5913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.963548][ T5913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.054492][ T5913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.140250][ T5913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.365575][ T5913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.449368][ T5913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.526801][ T5913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.599318][ T5913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.743741][ T5913] bridge_slave_1: left allmulticast mode [ 518.749998][ T5913] bridge_slave_1: left promiscuous mode [ 518.755746][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.768518][ T5913] bridge_slave_0: left allmulticast mode [ 518.774716][ T5913] bridge_slave_0: left promiscuous mode [ 518.780711][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.802723][ T5913] bridge_slave_1: left allmulticast mode [ 518.808451][ T5913] bridge_slave_1: left promiscuous mode [ 518.817953][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.832822][ T5913] bridge_slave_0: left allmulticast mode [ 518.838564][ T5913] bridge_slave_0: left promiscuous mode [ 518.847524][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.839509][ T5913] bridge0 (unregistering): left promiscuous mode [ 519.968803][ T5913] bond0 (unregistering): left promiscuous mode [ 519.975035][ T5913] bond_slave_0: left promiscuous mode [ 519.980936][ T5913] bond_slave_1: left promiscuous mode [ 519.995116][ T5913] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 520.008710][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.019346][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.029706][ T5913] bond0 (unregistering): Released all slaves [ 520.044949][ T5913] bond1 (unregistering): Released all slaves [ 520.138927][ T5913] bond2 (unregistering): Released all slaves [ 520.154245][ T5913] bond3 (unregistering): Released all slaves [ 520.248200][ T5913] bond4 (unregistering): Released all slaves [ 520.272024][ T5913] bond0 (unregistering): Released all slaves [ 520.373672][ T5913] bond1 (unregistering): Released all slaves [ 520.466870][ T5913] bond2 (unregistering): Released all slaves [ 520.558940][ T5913] bond3 (unregistering): Released all slaves [ 520.652896][ T5913] bond4 (unregistering): Released all slaves [ 520.753911][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.763131][ T5913] bond_slave_0: left promiscuous mode [ 520.770569][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.779538][ T5913] bond_slave_1: left promiscuous mode [ 520.786453][ T5913] bond0 (unregistering): Released all slaves [ 520.879596][ T5913] bond1 (unregistering): Released all slaves [ 520.974703][ T5913] bond2 (unregistering): Released all slaves [ 521.128911][ T5913] IPVS: stopping master sync thread 8983 ... [ 521.715495][ T5913] hsr_slave_0: left promiscuous mode [ 521.725806][ T5913] hsr_slave_1: left promiscuous mode [ 521.733325][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.741593][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.749539][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.757490][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.777685][ T5913] hsr_slave_0: left promiscuous mode [ 521.787265][ T5913] hsr_slave_1: left promiscuous mode [ 521.801612][ T5913] hsr_slave_0: left promiscuous mode [ 521.808749][ T5913] hsr_slave_1: left promiscuous mode [ 521.817630][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.825111][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.836036][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.844433][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.920609][ T5913] veth1_macvtap: left promiscuous mode [ 521.926442][ T5913] veth0_macvtap: left promiscuous mode [ 521.934926][ T5913] veth1_vlan: left promiscuous mode [ 521.940363][ T5913] veth0_vlan: left promiscuous mode [ 521.947139][ T5913] veth1_macvtap: left promiscuous mode [ 521.952876][ T5913] veth0_macvtap: left promiscuous mode [ 521.958541][ T5913] veth1_vlan: left promiscuous mode [ 521.966701][ T5913] veth0_vlan: left promiscuous mode [ 521.973464][ T5913] veth1_macvtap: left promiscuous mode [ 521.979025][ T5913] veth0_macvtap: left promiscuous mode [ 521.987641][ T5913] veth1_vlan: left promiscuous mode [ 521.995496][ T5913] veth0_vlan: left promiscuous mode [ 522.527099][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 522.567407][ T5913] team0 (unregistering): Port device team_slave_0 removed