last executing test programs: 1m37.062417751s ago: executing program 0 (id=354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x4) 1m36.939841392s ago: executing program 0 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m36.938412638s ago: executing program 0 (id=358): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c541180"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m36.864659178s ago: executing program 0 (id=359): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) 1m36.864462001s ago: executing program 0 (id=360): setuid(0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x0, r0}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 1m36.594479381s ago: executing program 0 (id=361): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.556899335s ago: executing program 32 (id=361): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.068298639s ago: executing program 3 (id=1084): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xa, 0x0) 1m2.170125981s ago: executing program 3 (id=1103): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1m2.168291557s ago: executing program 3 (id=1105): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 1m1.851509318s ago: executing program 3 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x50, 0x0) 1m1.782442236s ago: executing program 3 (id=1109): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4815}, 0x40800) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140)) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 1m1.614115143s ago: executing program 3 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70027100c1582100000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1m1.512801107s ago: executing program 33 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70027100c1582100000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.966994125s ago: executing program 4 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711", 0x7}, {&(0x7f0000000300)="4d0ff6044df96744927dc21a1af29aecbac549f3a15d5d9c7334c31e245502ea", 0x20}], 0x4) 1.966891389s ago: executing program 1 (id=2212): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 1.844879689s ago: executing program 1 (id=2214): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.8353393s ago: executing program 4 (id=2216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.767388875s ago: executing program 1 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 1.767043803s ago: executing program 4 (id=2218): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) read(r0, &(0x7f00000002c0)=""/157, 0x9d) setpriority(0x2, 0xff, 0x0) 1.689831057s ago: executing program 1 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x0) 1.689240948s ago: executing program 1 (id=2221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1.632468526s ago: executing program 1 (id=2223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) 1.393725252s ago: executing program 2 (id=2226): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x4040600) r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 1.31108146s ago: executing program 2 (id=2227): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1e, 0x15, 0xa1, 0x20, 0x1ae7, 0x525, 0xcae6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd4, 0x2, 0x0, 0xdf, 0xb8, 0xdb}}]}}]}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 851.997734ms ago: executing program 4 (id=2228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="5bc9d51b0010853f8e645dc714b8815bff642957d7d2f849d7f5b80b5c8f94e03a62189065e8f4430d1ebd24aacd9c09056784", 0x33}, {&(0x7f00000000c0)="99472fa420b36a4532aaafa4624703fb5e133e8e2b7441b3dddf30f1b4f1c3ca130caa7d3323175bb042383845", 0x2d}, {&(0x7f0000000240)="6f156d21c41171826ea583f01f52cf", 0xf}], 0x3, 0x0, 0x0, 0x4040044}], 0x1, 0x0) 848.956162ms ago: executing program 4 (id=2231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40000000}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 770.532402ms ago: executing program 4 (id=2232): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 631.930728ms ago: executing program 5 (id=2234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 630.226637ms ago: executing program 5 (id=2235): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 562.667565ms ago: executing program 5 (id=2236): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6c, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 151.395415ms ago: executing program 2 (id=2237): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 151.167699ms ago: executing program 5 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x31}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 138.764245ms ago: executing program 5 (id=2239): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840) 138.598519ms ago: executing program 2 (id=2245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6c, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 44.482882ms ago: executing program 2 (id=2240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES64], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x20000010) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f0000000000)={{0x77359400}}) 44.126221ms ago: executing program 2 (id=2241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) 0s ago: executing program 5 (id=2242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): disabled state [ 72.636393][ T1050] bridge_slave_0: left allmulticast mode [ 72.638720][ T1050] bridge_slave_0: left promiscuous mode [ 72.641301][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.891205][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.896016][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.899732][ T1050] bond0 (unregistering): Released all slaves [ 72.955524][ T1050] bond1 (unregistering): (slave bond2): Releasing backup interface [ 72.958858][ T1050] bond2 (unregistering): left promiscuous mode [ 72.963410][ T1050] bond1 (unregistering): Released all slaves [ 73.018091][ T1050] bond2 (unregistering): Released all slaves [ 73.045599][ T6860] hsr_slave_0: entered promiscuous mode [ 73.047829][ T6860] hsr_slave_1: entered promiscuous mode [ 73.049853][ T6860] debugfs: 'hsr0' already exists in 'hsr' [ 73.051979][ T6860] Cannot create hsr debugfs directory [ 73.248526][ T6860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.389714][ T6860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.400687][ T6860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.411975][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.375'. [ 73.423294][ T6860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.478373][ T1050] hsr_slave_0: left promiscuous mode [ 73.480663][ T1050] hsr_slave_1: left promiscuous mode [ 73.484273][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.486537][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.490138][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.492921][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.512627][ T1050] veth1_macvtap: left promiscuous mode [ 73.515202][ T1050] veth0_macvtap: left promiscuous mode [ 73.517555][ T1050] veth1_vlan: left promiscuous mode [ 73.519960][ T1050] veth0_vlan: left promiscuous mode [ 73.564543][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 73.567854][ T6919] netlink: 'syz.1.380': attribute type 30 has an invalid length. [ 73.615656][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 73.618841][ T6921] netlink: 'syz.1.380': attribute type 30 has an invalid length. [ 73.810290][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 73.815639][ T6033] usb 7-1: USB disconnect, device number 2 [ 73.832994][ T6033] usblp1: removed [ 73.860273][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 73.996023][ T6937] netlink: 'syz.2.386': attribute type 21 has an invalid length. [ 73.999118][ T6937] netlink: 176 bytes leftover after parsing attributes in process `syz.2.386'. [ 74.129873][ T6921] Zero length message leads to an empty skb [ 74.166510][ T97] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.170646][ T97] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.180820][ T97] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.189917][ T97] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.201677][ T5945] Bluetooth: hci3: command tx timeout [ 74.268755][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.281686][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.303644][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.306669][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.315968][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.319045][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.426438][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 74.456289][ T6962] netlink: 72 bytes leftover after parsing attributes in process `syz.3.394'. [ 74.596579][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.677543][ T6984] syzkaller1: entered promiscuous mode [ 74.679299][ T6984] syzkaller1: entered allmulticast mode [ 74.840386][ T6860] veth0_vlan: entered promiscuous mode [ 74.849331][ T6860] veth1_vlan: entered promiscuous mode [ 74.880762][ T6860] veth0_macvtap: entered promiscuous mode [ 74.886646][ T6860] veth1_macvtap: entered promiscuous mode [ 74.900012][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.910893][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.926235][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.929821][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.946320][ T7003] netlink: 6 bytes leftover after parsing attributes in process `syz.1.401'. [ 74.958002][ T7003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.973143][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987023][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.079862][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.081688][ T1022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 75.087092][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.104380][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.107201][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.226969][ T7020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.230498][ T7020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.239941][ T7023] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 75.245151][ T7022] IPVS: stopping master sync thread 7023 ... [ 75.248204][ T1022] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 75.251469][ T1022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.255889][ T1022] usb 8-1: Product: syz [ 75.257674][ T1022] usb 8-1: Manufacturer: syz [ 75.259605][ T1022] usb 8-1: SerialNumber: syz [ 75.264514][ T1022] usb 8-1: config 0 descriptor?? [ 75.319522][ T7020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.322918][ T7020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.387769][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 75.387780][ T40] audit: type=1326 audit(1766258757.591:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.393565][ T7020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.398527][ T40] audit: type=1326 audit(1766258757.591:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.402706][ T7020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.409103][ T40] audit: type=1326 audit(1766258757.591:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.421605][ T40] audit: type=1326 audit(1766258757.591:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 75.428678][ T40] audit: type=1326 audit(1766258757.591:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.435799][ T40] audit: type=1326 audit(1766258757.591:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.442518][ T40] audit: type=1326 audit(1766258757.591:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.449389][ T40] audit: type=1326 audit(1766258757.591:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.456094][ T40] audit: type=1326 audit(1766258757.591:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 75.462927][ T40] audit: type=1326 audit(1766258757.591:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 75.475428][ T1022] usb 8-1: USB disconnect, device number 4 [ 75.503017][ T7020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.507254][ T7020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.613416][ T1179] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.616824][ T1179] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.633377][ T1179] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.636815][ T1179] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.661051][ T222] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.666778][ T222] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.670270][ T222] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.673791][ T222] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.966222][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.968545][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.225315][ T7067] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 76.231644][ T7063] syz.2.425 (7063) used greatest stack depth: 20008 bytes left [ 76.284547][ T5945] Bluetooth: hci3: command tx timeout [ 76.986355][ T7114] macvtap1: entered promiscuous mode [ 76.988612][ T7114] macvtap1: entered allmulticast mode [ 76.990520][ T7114] veth1_vlan: entered allmulticast mode [ 77.007745][ T7114] macvtap2: entered promiscuous mode [ 77.009516][ T7114] macvtap2: entered allmulticast mode [ 77.072196][ T7117] team0 (unregistering): Port device team_slave_1 removed [ 77.382604][ T7134] loop5: detected capacity change from 0 to 8431 [ 77.415978][ T5953] Buffer I/O error on dev loop5, logical block 1053, async page read [ 77.425013][ T7134] loop5: detected capacity change from 8431 to 15471 [ 77.444310][ T5953] Buffer I/O error on dev loop5, logical block 1933, async page read [ 77.481905][ T6025] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 77.541616][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 77.643011][ T6025] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 77.647968][ T6025] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 77.653439][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.659103][ T6025] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.662928][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.666383][ T6025] usb 7-1: Product: syz [ 77.668091][ T6025] usb 7-1: Manufacturer: syz [ 77.669966][ T6025] usb 7-1: SerialNumber: syz [ 77.675453][ T6025] usb 7-1: config 0 descriptor?? [ 77.677607][ T7146] veth0: entered promiscuous mode [ 77.684597][ T6025] usb 7-1: selecting invalid altsetting 0 [ 77.685962][ T7143] veth0: left promiscuous mode [ 77.719358][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.724986][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.729577][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 77.734895][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.746105][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.750113][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.761139][ T9] usb 6-1: config 0 descriptor?? [ 77.871397][ T7158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.890781][ T7127] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 77.901216][ T34] usb 7-1: USB disconnect, device number 3 [ 78.177342][ T9] hid_parser_main: 8 callbacks suppressed [ 78.177354][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.183651][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.187222][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.190284][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.194716][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.198005][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.200776][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.204128][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.207136][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.209856][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 78.225413][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.361621][ T5945] Bluetooth: hci3: command tx timeout [ 78.443832][ T6026] usb 6-1: USB disconnect, device number 4 [ 78.702410][ T7185] netfs: Couldn't get user pages (rc=-14) [ 78.829446][ T7193] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.484'. [ 78.885302][ T7199] netlink: 68 bytes leftover after parsing attributes in process `syz.3.486'. [ 79.257576][ T7222] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.497'. [ 79.524222][ T7238] netlink: 6 bytes leftover after parsing attributes in process `syz.3.503'. [ 79.527060][ T7238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.452125][ T5945] Bluetooth: hci3: command tx timeout [ 81.101603][ T6026] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.281552][ T6026] usb 9-1: Using ep0 maxpacket: 8 [ 81.292698][ T6026] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 81.295262][ T6026] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.298251][ T6026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.301160][ T6026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.311526][ T6026] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.315525][ T6026] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.318300][ T6026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.552597][ T6026] usb 9-1: usb_control_msg returned -32 [ 81.561559][ T6026] usbtmc 9-1:16.0: can't read capabilities [ 81.908467][ T7325] usbtmc 9-1:16.0: control status returned 0 [ 82.110717][ T5943] usb 9-1: USB disconnect, device number 2 [ 82.113499][ T7336] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.545'. [ 82.367529][ T7354] loop9: detected capacity change from 0 to 7 [ 82.374016][ T7354] Dev loop9: unable to read RDB block 7 [ 82.376858][ T7354] loop9: unable to read partition table [ 82.379375][ T7354] loop9: partition table beyond EOD, truncated [ 82.382165][ T7354] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.390029][ T7354] Dev loop9: unable to read RDB block 7 [ 82.392451][ T7354] loop9: unable to read partition table [ 82.394319][ T7354] loop9: partition table beyond EOD, truncated [ 82.408657][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 82.489730][ T6128] block nbd64: NBD_DISCONNECT [ 82.610437][ T5953] udevd[5953]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 82.619483][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 82.697912][ T7373] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 82.712818][ T7373] bond1: entered promiscuous mode [ 82.714887][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.742507][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.745762][ T7373] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 82.749992][ T7373] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 82.757500][ T7373] bond1: (slave gre1): making interface the new active one [ 82.760324][ T7373] gre1: entered promiscuous mode [ 82.762914][ T7373] bond1: (slave gre1): Enslaving as an active interface with an up link [ 82.932287][ T5977] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 83.102814][ T5977] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.102831][ T5977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 83.104565][ T5977] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.113672][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.113693][ T5977] usb 9-1: Product: syz [ 83.113705][ T5977] usb 9-1: Manufacturer: syz [ 83.113715][ T5977] usb 9-1: SerialNumber: syz [ 83.124448][ T5977] usb 9-1: config 0 descriptor?? [ 83.128968][ T5977] usb 9-1: selecting invalid altsetting 0 [ 83.341701][ T5977] usb 9-1: USB disconnect, device number 3 [ 83.388001][ T7405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.487542][ T7405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.503724][ T7410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.505906][ T7410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.513609][ T7410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.519063][ T7410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.522743][ T7410] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.527604][ T7410] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.532444][ T7410] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.535953][ T7410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.538088][ T7410] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.543130][ T7410] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.546324][ T7410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.548547][ T7410] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.556518][ T7410] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.565177][ T7405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.636321][ T7405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.657431][ T7425] pim6reg1: entered promiscuous mode [ 83.660160][ T7425] pim6reg1: entered allmulticast mode [ 83.720277][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.730806][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.744303][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.754465][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.874106][ T40] kauditd_printk_skb: 1414 callbacks suppressed [ 83.874117][ T40] audit: type=1326 audit(1766258766.081:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.586" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 83.932706][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 83.938473][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 84.103847][ T7447] batadv_slave_1: entered promiscuous mode [ 84.104311][ T7446] batadv_slave_1: left promiscuous mode [ 84.228490][ T7457] netlink: 'syz.2.597': attribute type 27 has an invalid length. [ 84.286037][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.289465][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.330428][ T5351] udevd[5351]: worker [5953] terminated by signal 33 (Unknown signal 33) [ 84.349171][ T5351] udevd[5351]: worker [5953] failed while handling '/devices/virtual/block/loop4' [ 84.419484][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.429351][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.448714][ T7471] netlink: 63 bytes leftover after parsing attributes in process `syz.4.602'. [ 84.506951][ T7457] bond1: left promiscuous mode [ 84.508775][ T7457] gre1: left promiscuous mode [ 84.525331][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.534083][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.537603][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.540994][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.711770][ T6033] IPVS: starting estimator thread 0... [ 84.788034][ T7495] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.808901][ T7489] IPVS: using max 44 ests per chain, 105600 per kthread [ 85.078074][ T7515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.214028][ T7515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.316012][ T7515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.424624][ T7515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.564079][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573834][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.573885][ T5957] Bluetooth: hci1: command 0x0406 tx timeout [ 85.576186][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.581237][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.583950][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588427][ T73] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600537][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721028][ T7552] netlink: 'syz.4.638': attribute type 27 has an invalid length. [ 85.800531][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.804047][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.972458][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.989800][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.208557][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.213852][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.215956][ T959] cfg80211: failed to load regulatory.db [ 86.219022][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.223997][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.575613][ T7580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.583077][ T7580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.586350][ T7580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.588922][ T7580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.633852][ T7589] netlink: 'syz.1.654': attribute type 27 has an invalid length. [ 86.652955][ T7591] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 86.667844][ T7589] sit0: left promiscuous mode [ 86.699377][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.702465][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.816423][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.835143][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.851680][ T6025] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.979018][ T7589] veth1_vlan: left allmulticast mode [ 86.980931][ T7589] macvtap1: left promiscuous mode [ 86.983249][ T7589] macvtap1: left allmulticast mode [ 86.987463][ T73] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.990299][ T73] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.994896][ T73] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.997967][ T73] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.011457][ T73] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.013452][ T6025] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.014226][ T73] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.016954][ T6025] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.016966][ T6025] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.016989][ T6025] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.022984][ T73] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.033415][ T6025] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.037263][ T73] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.041010][ T6025] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.044506][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.047139][ T6025] usb 7-1: Product: syz [ 87.048393][ T6025] usb 7-1: Manufacturer: syz [ 87.062125][ T6025] cdc_wdm 7-1:1.0: skipping garbage [ 87.063808][ T6025] cdc_wdm 7-1:1.0: skipping garbage [ 87.066783][ T6025] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 87.069158][ T6025] cdc_wdm 7-1:1.0: Unknown control protocol [ 87.305600][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.308766][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.312413][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.315362][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.317635][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.319843][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.323117][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.325873][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.328814][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.331654][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.335178][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.337835][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.341105][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 87.344007][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 87.347768][ T6025] usb 7-1: USB disconnect, device number 4 [ 88.611604][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.611715][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.611760][ T5944] Bluetooth: hci1: command 0x0406 tx timeout [ 88.611778][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.707053][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.996416][ T893] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 89.141583][ T893] usb 9-1: Using ep0 maxpacket: 8 [ 89.144742][ T893] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 89.147526][ T893] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.150806][ T893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.155421][ T893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.159539][ T893] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.165338][ T893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.169024][ T893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.386733][ T893] usb 9-1: usb_control_msg returned -32 [ 89.388859][ T893] usbtmc 9-1:16.0: can't read capabilities [ 89.743491][ T7744] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 89.748819][ T893] usb 9-1: USB disconnect, device number 4 [ 89.887815][ T7757] syzkaller1: entered promiscuous mode [ 89.889588][ T7757] syzkaller1: entered allmulticast mode [ 90.180640][ T7777] syzkaller1: entered allmulticast mode [ 90.212891][ T6033] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.364019][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.367796][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.370879][ T6033] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.375069][ T6033] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.377898][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.382062][ T6033] usb 7-1: config 0 descriptor?? [ 90.681588][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 90.681638][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.691616][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.691634][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.801427][ T6033] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.834476][ T7805] random: crng reseeded on system resumption [ 90.888317][ T7807] Illegal XDP return value 548725223 on prog (id 137) dev syz_tun, expect packet loss! [ 91.167193][ T7819] input: syz0 as /devices/virtual/input/input14 [ 91.331691][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 91.483572][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.488249][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.492129][ T34] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 91.496429][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.501757][ T34] usb 8-1: config 0 descriptor?? [ 91.507785][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 91.511280][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 91.520079][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.525735][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.528693][ T34] usb 8-1: media controller created [ 91.533738][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.545487][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 91.548421][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.556865][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input15 [ 91.568034][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 91.571219][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.714567][ T7815] dvb-usb: bulk message failed: -22 (2/0) [ 91.722408][ T7600] usb 8-1: USB disconnect, device number 5 [ 91.738729][ T7600] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.508729][ T7011] kernel write not supported for file bpf-prog (pid: 7011 comm: kworker/0:5) [ 92.553936][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 92.568256][ T7852] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 92.570875][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 92.586979][ T7851] syzkaller1: entered promiscuous mode [ 92.589293][ T7851] syzkaller1: entered allmulticast mode [ 92.671609][ T7600] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.763807][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 92.773573][ T34] usb 7-1: USB disconnect, device number 5 [ 92.823229][ T7600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.831724][ T7600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.837159][ T7600] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.848675][ T7600] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.855352][ T7600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.863589][ T7600] usb 8-1: config 0 descriptor?? [ 93.292147][ T7600] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.531610][ T7600] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 93.533520][ T34] usb 8-1: USB disconnect, device number 6 [ 93.701623][ T7600] usb 6-1: Using ep0 maxpacket: 8 [ 93.704664][ T7600] usb 6-1: config 0 interface 0 has no altsetting 0 [ 93.706646][ T7600] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.712445][ T7600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.722184][ T7600] usb 6-1: config 0 descriptor?? [ 94.142192][ T7600] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 94.321737][ T7011] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.342832][ T6033] usb 6-1: USB disconnect, device number 5 [ 94.471599][ T6026] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 94.471622][ T7011] usb 8-1: Using ep0 maxpacket: 8 [ 94.477863][ T7011] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.480095][ T7011] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.483017][ T7011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.493689][ T7011] usb 8-1: config 0 descriptor?? [ 94.633666][ T6026] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.637168][ T6026] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.641169][ T6026] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.644738][ T6026] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.648443][ T6026] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.654360][ T6026] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.658052][ T6026] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.661568][ T6026] usb 9-1: Product: syz [ 94.662849][ T6026] usb 9-1: Manufacturer: syz [ 94.666893][ T6026] cdc_wdm 9-1:1.0: skipping garbage [ 94.668605][ T6026] cdc_wdm 9-1:1.0: skipping garbage [ 94.671053][ T6026] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 94.673270][ T6026] cdc_wdm 9-1:1.0: Unknown control protocol [ 94.880032][ T6033] usb 9-1: USB disconnect, device number 5 [ 94.912030][ T7011] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 95.114055][ T6026] usb 8-1: USB disconnect, device number 7 [ 96.383539][ T8022] IPVS: fo: UDP 224.0.0.1:0 - no destination available [ 96.383737][ T7600] IPVS: starting estimator thread 0... [ 96.477563][ T8035] random: crng reseeded on system resumption [ 96.489333][ T8029] IPVS: using max 23 ests per chain, 55200 per kthread [ 96.600559][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 96.634641][ T8051] netlink: 'syz.2.864': attribute type 83 has an invalid length. [ 96.643874][ T8053] syzkaller1: entered promiscuous mode [ 96.645773][ T8053] syzkaller1: entered allmulticast mode [ 96.852647][ T8072] input: syz1 as /devices/virtual/input/input16 [ 96.908463][ T8077] input: syz0 as /devices/virtual/input/input17 [ 97.069332][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 97.083445][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 97.087012][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 97.226792][ T8102] bridge1: entered promiscuous mode [ 97.280933][ T8105] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.892'. [ 97.425877][ T8118] dummy0: entered allmulticast mode [ 97.473454][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.899'. [ 97.478483][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.899'. [ 97.524149][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 97.574495][ T8137] loop6: detected capacity change from 0 to 524287999 [ 97.846565][ T8156] netlink: 'syz.1.914': attribute type 6 has an invalid length. [ 98.027695][ T8176] netlink: 96 bytes leftover after parsing attributes in process `syz.1.924'. [ 99.161641][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 99.171693][ T6033] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 99.322450][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 99.323433][ T6033] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 99.326070][ T34] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 99.328093][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.331382][ T34] usb 7-1: config 0 has no interface number 0 [ 99.336245][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.338371][ T34] usb 7-1: config 0 interface 12 has no altsetting 0 [ 99.342713][ T6033] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.350935][ T6033] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.355066][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.359188][ T34] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 99.360084][ T6033] usb 8-1: config 0 descriptor?? [ 99.364203][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.371546][ T34] usb 7-1: Product: syz [ 99.373222][ T34] usb 7-1: Manufacturer: syz [ 99.375156][ T34] usb 7-1: SerialNumber: syz [ 99.388876][ T34] usb 7-1: config 0 descriptor?? [ 99.393117][ T34] f81534 7-1:0.12: required endpoints missing [ 99.510914][ T8230] random: crng reseeded on system resumption [ 99.604905][ T7011] usb 7-1: USB disconnect, device number 6 [ 99.781428][ T6033] hid_parser_main: 5 callbacks suppressed [ 99.781445][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.787187][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.790398][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.793719][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.796783][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.800011][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.805224][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.808452][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.811777][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.814889][ T6033] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.821990][ T6033] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 100.035891][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 100.039847][ T8247] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 100.049175][ T34] usb 8-1: USB disconnect, device number 8 [ 100.055586][ T222] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.058762][ T222] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.062617][ T222] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.066041][ T222] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.339210][ T40] audit: type=1326 audit(1766258783.538:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 100.348114][ T40] audit: type=1326 audit(1766258783.538:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 100.357422][ T40] audit: type=1326 audit(1766258783.548:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 100.366131][ T40] audit: type=1326 audit(1766258783.548:1445): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 100.373014][ T40] audit: type=1326 audit(1766258783.548:1446): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 100.541280][ T8292] random: crng reseeded on system resumption [ 100.937133][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 100.940109][ T8324] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 100.958217][ T1144] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.963764][ T1144] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.967233][ T1144] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.970688][ T1144] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.480775][ T8345] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1001'. [ 102.121606][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.124221][ T5950] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 102.201607][ T7600] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.353514][ T7600] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.358384][ T7600] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.363386][ T7600] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.367790][ T7600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.374028][ T8390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.379629][ T7600] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.584459][ T6037] usb 6-1: USB disconnect, device number 6 [ 104.042390][ T6033] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 104.202931][ T6033] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.205783][ T6033] usb 7-1: config 0 has no interface number 0 [ 104.207934][ T6033] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.211614][ T6033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 104.215106][ T6033] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.219131][ T6033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 104.222972][ T6033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 104.226759][ T6033] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.231002][ T6033] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.235532][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.239150][ T6033] usb 7-1: config 0 descriptor?? [ 104.241403][ T8456] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.244358][ T8456] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.248302][ T6033] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.371579][ T7011] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.452298][ T6033] usb 7-1: USB disconnect, device number 7 [ 104.456794][ T6033] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 104.729765][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.733380][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.740043][ T7011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 104.744089][ T7011] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 104.747417][ T7011] usb 6-1: can't read configurations, error -71 [ 105.310779][ T8508] input: syz1 as /devices/virtual/input/input19 [ 105.501226][ T40] audit: type=1800 audit(1766258788.698:1447): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1081" name="file0" dev="9p" ino=71827813 res=0 errno=0 [ 105.650922][ T40] audit: type=1326 audit(1766258788.848:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.3.1084" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 105.866011][ T8551] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 105.971813][ T7011] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.131589][ T7011] usb 6-1: Using ep0 maxpacket: 8 [ 106.134552][ T7011] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 106.137202][ T7011] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.140303][ T7011] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.143465][ T7011] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.146649][ T7011] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.150884][ T7011] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.153875][ T7011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.182815][ T8559] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1095'. [ 106.330922][ T8569] loop9: detected capacity change from 0 to 7 [ 106.335538][ T8569] Dev loop9: unable to read RDB block 7 [ 106.337691][ T8569] loop9: AHDI p1 p2 [ 106.339210][ T8569] loop9: partition table partially beyond EOD, truncated [ 106.344089][ T8569] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 107.230292][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.234800][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.237562][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.240548][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.244036][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.408865][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 107.431315][ T222] bridge_slave_1: left allmulticast mode [ 107.433993][ T222] bridge_slave_1: left promiscuous mode [ 107.436486][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.441236][ T222] bridge_slave_0: left allmulticast mode [ 107.444121][ T222] bridge_slave_0: left promiscuous mode [ 107.446531][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.665429][ T222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.670518][ T222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.675018][ T222] bond0 (unregistering): Released all slaves [ 107.739700][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.742946][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.746090][ T8598] bridge_slave_0: entered allmulticast mode [ 107.750183][ T8598] bridge_slave_0: entered promiscuous mode [ 107.755243][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.758377][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.761419][ T8598] bridge_slave_1: entered allmulticast mode [ 107.772079][ T8598] bridge_slave_1: entered promiscuous mode [ 107.797836][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.804674][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.849136][ T8598] team0: Port device team_slave_0 added [ 107.854151][ T8598] team0: Port device team_slave_1 added [ 107.877927][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.880930][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.891792][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.897899][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.900891][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.911984][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.959090][ T8598] hsr_slave_0: entered promiscuous mode [ 107.962636][ T8598] hsr_slave_1: entered promiscuous mode [ 107.965659][ T8598] debugfs: 'hsr0' already exists in 'hsr' [ 107.968071][ T8598] Cannot create hsr debugfs directory [ 108.089601][ T222] hsr_slave_0: left promiscuous mode [ 108.093252][ T222] hsr_slave_1: left promiscuous mode [ 108.095519][ T222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.098498][ T222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.677403][ T6033] usb 6-1: USB disconnect, device number 9 [ 108.732939][ T8598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.737605][ T40] audit: type=1326 audit(1766258791.938:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.1124" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 108.750803][ T8598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.758064][ T8598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.765960][ T8598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.885134][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.900356][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.914390][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.917408][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.933465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.936341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.974921][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.079830][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 109.117347][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.211191][ T8668] syzkaller1: entered promiscuous mode [ 109.213295][ T8668] syzkaller1: entered allmulticast mode [ 109.310226][ T8598] veth0_vlan: entered promiscuous mode [ 109.317967][ T8598] veth1_vlan: entered promiscuous mode [ 109.321638][ T5945] Bluetooth: hci0: command tx timeout [ 109.342297][ T8598] veth0_macvtap: entered promiscuous mode [ 109.346588][ T8598] veth1_macvtap: entered promiscuous mode [ 109.356171][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.367381][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.383447][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.388973][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.394801][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.404826][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.447814][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.451046][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.477715][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.480991][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.633509][ T8682] infiniband syz0: set down [ 109.636896][ T8682] infiniband syz0: added bond_slave_0 [ 109.669442][ T8682] RDS/IB: syz0: added [ 109.672417][ T8682] smc: adding ib device syz0 with port count 1 [ 109.675140][ T8682] smc: ib device syz0 port 1 has no pnetid [ 110.003957][ T8724] tipc: Started in network mode [ 110.005914][ T8724] tipc: Node identity 4, cluster identity 4711 [ 110.007890][ T8724] tipc: Node number set to 4 [ 110.074544][ T8731] random: crng reseeded on system resumption [ 110.082051][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 110.300074][ T8745] Bluetooth: MGMT ver 1.23 [ 110.430072][ T8752] overlayfs: upper fs does not support tmpfile. [ 110.560883][ T8762] syzkaller1: entered promiscuous mode [ 110.564698][ T8762] syzkaller1: entered allmulticast mode [ 111.401854][ T5945] Bluetooth: hci0: command tx timeout [ 111.919280][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.957834][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.991585][ T1022] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 112.143344][ T1022] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 112.146205][ T1022] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.149418][ T1022] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.153464][ T1022] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.156795][ T1022] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.159962][ T1022] usb 7-1: Product: syz [ 112.161780][ T1022] usb 7-1: Manufacturer: syz [ 112.163545][ T1022] usb 7-1: SerialNumber: syz [ 112.166577][ T1022] usb 7-1: config 0 descriptor?? [ 112.169713][ T1022] hub 7-1:0.0: bad descriptor, ignoring hub [ 112.172039][ T1022] hub 7-1:0.0: probe with driver hub failed with error -5 [ 112.175772][ T1022] usb 7-1: selecting invalid altsetting 0 [ 112.426607][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 112.751762][ T34] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 112.783170][ T8826] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 112.903386][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.909659][ T34] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 112.913604][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.916675][ T34] usb 9-1: Product: syz [ 112.918468][ T34] usb 9-1: Manufacturer: syz [ 112.920383][ T34] usb 9-1: SerialNumber: syz [ 112.924823][ T34] usb 9-1: config 0 descriptor?? [ 112.928244][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 112.930516][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 112.935641][ T34] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input20 [ 112.952135][ T8826] usb 7-1: device firmware changed [ 112.955679][ T59] usb 7-1: USB disconnect, device number 8 [ 113.101575][ T59] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 113.282725][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 113.286369][ T59] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 113.289675][ T59] usb 7-1: can't read configurations, error -71 [ 113.303086][ T6025] usb 9-1: USB disconnect, device number 6 [ 113.469650][ T8865] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.481660][ T5945] Bluetooth: hci0: command tx timeout [ 114.503213][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.507401][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.513102][ T8902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.580664][ T8902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.789842][ T8930] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 114.789870][ T8930] syz_tun: entered promiscuous mode [ 114.796965][ T8930] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 115.079111][ T8948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.561784][ T5945] Bluetooth: hci0: command tx timeout [ 115.665574][ T40] audit: type=1326 audit(1766258798.868:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.5.1269" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3579 code=0x0 [ 116.161619][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 116.323870][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 116.327396][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.331632][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.336778][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.340649][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.344240][ T34] usb 7-1: Product: syz [ 116.345969][ T34] usb 7-1: Manufacturer: syz [ 116.347764][ T40] audit: type=1326 audit(1766258799.548:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.348047][ T34] usb 7-1: SerialNumber: syz [ 116.359648][ T34] usb 7-1: config 0 descriptor?? [ 116.360046][ T40] audit: type=1326 audit(1766258799.568:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 116.363693][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 116.370332][ T40] audit: type=1326 audit(1766258799.568:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.372194][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 116.379133][ T40] audit: type=1326 audit(1766258799.568:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.384612][ T34] usb 7-1: selecting invalid altsetting 0 [ 116.388802][ T40] audit: type=1326 audit(1766258799.568:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 116.397885][ T40] audit: type=1326 audit(1766258799.568:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.404988][ T40] audit: type=1326 audit(1766258799.568:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.412096][ T40] audit: type=1326 audit(1766258799.568:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 116.419070][ T40] audit: type=1326 audit(1766258799.568:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5598 code=0x7ffc0000 [ 116.783477][ T9035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.261681][ T8992] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 117.291694][ T59] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 117.391638][ T5943] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.443351][ T59] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 117.446869][ T59] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.450987][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 117.455783][ T59] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.459501][ T59] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.463997][ T59] usb 10-1: Product: syz [ 117.465876][ T59] usb 10-1: Manufacturer: syz [ 117.467886][ T59] usb 10-1: SerialNumber: syz [ 117.472140][ T59] usb 10-1: config 0 descriptor?? [ 117.476131][ T59] hub 10-1:0.0: bad descriptor, ignoring hub [ 117.478685][ T59] hub 10-1:0.0: probe with driver hub failed with error -5 [ 117.484421][ T59] usb 10-1: selecting invalid altsetting 0 [ 117.541580][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 117.545568][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.550125][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.554401][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.559804][ T5943] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 117.563877][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.568544][ T5943] usb 6-1: config 0 descriptor?? [ 117.651589][ T6025] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 117.792009][ T34] usb 10-1: USB disconnect, device number 2 [ 117.821607][ T6025] usb 9-1: Using ep0 maxpacket: 32 [ 117.824304][ T1022] usb 7-1: USB disconnect, device number 11 [ 117.825970][ T6025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.831125][ T6025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.835270][ T6025] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.840553][ T6025] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 117.844663][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.852138][ T6025] usb 9-1: config 0 descriptor?? [ 117.993586][ T5943] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.000C/input/input21 [ 118.054761][ T5943] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.000C/input/input22 [ 118.063888][ T5943] kye 0003:0458:5011.000C: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 118.131811][ T7600] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 118.278593][ T6025] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.000D/input/input23 [ 118.318124][ T7600] usb 10-1: unable to get BOS descriptor or descriptor too short [ 118.322339][ T7600] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 118.325449][ T7600] usb 10-1: can't read configurations, error -71 [ 118.355871][ T6025] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.000D/input/input24 [ 118.366876][ T6025] kye 0003:0458:5011.000D: input,hiddev1,hidraw2: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 118.994587][ T9090] kernel profiling enabled (shift: 5) [ 119.037710][ C3] kye 0003:0458:5011.000C: usb_submit_urb(ctrl) failed: -1 [ 119.094068][ T6025] usb 9-1: USB disconnect, device number 7 [ 119.290747][ T9100] syzkaller1: entered promiscuous mode [ 119.292907][ T9100] syzkaller1: entered allmulticast mode [ 119.856914][ T6084] hid_parser_main: 5 callbacks suppressed [ 119.856932][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x1 [ 119.863192][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.865893][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.868225][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.870695][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.876935][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.879834][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.882725][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.885326][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.887925][ T6084] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.891876][ T6037] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 119.892489][ T6084] hid-generic 0000:0000:0000.000E: hidraw2: HID v8.00 Device [syz0] on syz0 [ 119.898750][ T6037] usb 6-1: device reset changed ep0 maxpacket size! [ 119.908519][ T5943] usb 6-1: USB disconnect, device number 10 [ 119.999699][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 120.002802][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 120.007871][ T9127] ceph: No mds server is up or the cluster is laggy [ 120.013872][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 120.081595][ T5943] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.263724][ T5943] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 120.267260][ T5943] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.271644][ T5943] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.276255][ T5943] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.280148][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.283906][ T5943] usb 6-1: Product: syz [ 120.285773][ T5943] usb 6-1: Manufacturer: syz [ 120.287812][ T5943] usb 6-1: SerialNumber: syz [ 120.292594][ T5943] usb 6-1: config 0 descriptor?? [ 120.296804][ T5943] hub 6-1:0.0: bad descriptor, ignoring hub [ 120.299323][ T5943] hub 6-1:0.0: probe with driver hub failed with error -5 [ 120.306227][ T5943] usb 6-1: selecting invalid altsetting 0 [ 120.431654][ T6025] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 120.581911][ T6025] usb 10-1: Using ep0 maxpacket: 16 [ 120.585835][ T6025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.590326][ T6025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.595875][ T6025] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.601138][ T6025] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 120.605274][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.612981][ T6025] usb 10-1: config 0 descriptor?? [ 120.912140][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.044564][ T6025] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 121.063208][ T6025] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 121.066810][ T6025] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 121.083246][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.087938][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.092516][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.096460][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.101801][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.105551][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.111380][ T24] usb 7-1: config 0 descriptor?? [ 121.202609][ T9106] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 121.240648][ T7598] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 121.242172][ T6037] usb 10-1: USB disconnect, device number 5 [ 121.245930][ T7598] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 121.253425][ T7598] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 121.258011][ T7598] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 121.372250][ T9106] usb 6-1: device firmware changed [ 121.381631][ T5943] usb 6-1: USB disconnect, device number 11 [ 121.528299][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.531631][ T5943] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 121.692715][ T5943] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.696993][ T5943] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 121.700234][ T5943] usb 6-1: can't read configurations, error -71 [ 121.783829][ T6084] usb 7-1: USB disconnect, device number 12 [ 122.239591][ T40] kauditd_printk_skb: 323 callbacks suppressed [ 122.239608][ T40] audit: type=1326 audit(1766258805.438:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 122.258124][ T40] audit: type=1326 audit(1766258805.448:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.267568][ T40] audit: type=1326 audit(1766258805.458:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.276629][ T40] audit: type=1326 audit(1766258805.458:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.286406][ T40] audit: type=1326 audit(1766258805.458:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 122.295888][ T40] audit: type=1326 audit(1766258805.458:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.304974][ T40] audit: type=1326 audit(1766258805.458:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 122.312982][ T40] audit: type=1326 audit(1766258805.458:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.319701][ T40] audit: type=1326 audit(1766258805.458:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 122.326596][ T40] audit: type=1326 audit(1766258805.458:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.1.1358" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 122.362030][ T34] libceph: connect (1)[c::]:6789 error -101 [ 122.364351][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 122.431876][ T9191] ceph: No mds server is up or the cluster is laggy [ 124.051158][ T9250] overlayfs: failed to clone lowerpath [ 124.284397][ T9267] Invalid argument reading file caps for ./file0 [ 125.370729][ T1022] libceph: connect (1)[c::]:6789 error -101 [ 125.374087][ T1022] libceph: mon0 (1)[c::]:6789 connect error [ 125.649079][ T1022] libceph: connect (1)[c::]:6789 error -101 [ 125.654899][ T1022] libceph: mon0 (1)[c::]:6789 connect error [ 125.680495][ T9393] Bluetooth: MGMT ver 1.23 [ 125.753901][ T9399] capability: warning: `syz.4.1435' uses deprecated v2 capabilities in a way that may be insecure [ 125.774997][ T9401] Invalid source name [ 125.776330][ T9401] UBIFS error (pid: 9401): cannot open "./file0", error -22 [ 125.802137][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.911034][ T9414] Bluetooth: hci0: load_link_keys: too big key_count value 9472 [ 126.145967][ T9427] capability: warning: `syz.2.1448' uses 32-bit capabilities (legacy support in use) [ 126.172270][ T1022] libceph: connect (1)[c::]:6789 error -101 [ 126.174238][ T1022] libceph: mon0 (1)[c::]:6789 connect error [ 126.179340][ T9369] ceph: No mds server is up or the cluster is laggy [ 126.801572][ T7598] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 126.952223][ T7598] usb 10-1: Using ep0 maxpacket: 32 [ 126.955626][ T7598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.961865][ T7598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.965230][ T7598] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.969522][ T7598] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 126.981749][ T7598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.985855][ T7598] usb 10-1: config 0 descriptor?? [ 127.072537][ T9455] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.420436][ T7598] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0011/input/input27 [ 127.494450][ T7598] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0011/input/input28 [ 127.520190][ T7598] kye 0003:0458:5011.0011: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 127.969410][ T9481] bond0: entered promiscuous mode [ 127.975089][ T9481] bond_slave_0: entered promiscuous mode [ 127.978649][ T9481] bond_slave_1: entered promiscuous mode [ 127.983628][ T9481] batadv0: entered promiscuous mode [ 127.987895][ T9481] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 127.996166][ T9481] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 128.502747][ C1] kye 0003:0458:5011.0011: usb_submit_urb(ctrl) failed: -1 [ 128.568046][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 128.932770][ T9521] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.143712][ T9536] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1493'. [ 129.296546][ T1022] usb 10-1: USB disconnect, device number 6 [ 129.604249][ T9562] syz_tun: entered allmulticast mode [ 129.625773][ T9562] dvmrp8: entered allmulticast mode [ 129.640803][ T9561] syz_tun: left allmulticast mode [ 130.325262][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.328721][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.666148][ T24] kernel write not supported for file /ppp (pid: 24 comm: kworker/2:0) [ 131.521626][ T1022] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 131.527953][ T9659] ªªªªªª: renamed from wg2 [ 131.671707][ T1022] usb 10-1: Using ep0 maxpacket: 8 [ 131.678232][ T1022] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.685439][ T1022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.689778][ T1022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.696101][ T1022] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.701634][ T1022] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.705620][ T1022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.861650][ T7598] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 131.916061][ T1022] usb 10-1: usb_control_msg returned -32 [ 131.918516][ T1022] usbtmc 10-1:16.0: can't read capabilities [ 132.031719][ T7598] usb 7-1: Using ep0 maxpacket: 8 [ 132.034867][ T7598] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 132.037629][ T7598] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.040766][ T7598] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.044082][ T7598] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.047359][ T7598] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.051769][ T7598] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.054668][ T7598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.262949][ T7598] usb 7-1: usb_control_msg returned -32 [ 132.264757][ T7598] usbtmc 7-1:16.0: can't read capabilities [ 132.710893][ T9678] loop9: detected capacity change from 0 to 7 [ 132.713614][ T9678] Dev loop9: unable to read RDB block 7 [ 132.715412][ T9678] loop9: unable to read partition table [ 132.717243][ T9678] loop9: partition table beyond EOD, truncated [ 132.719220][ T9678] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.141041][ T9700] input: syz1 as /devices/virtual/input/input29 [ 133.632729][ T9727] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1570'. [ 133.651674][ T5950] Bluetooth: hci0: command 0x0401 tx timeout [ 133.652825][ T5945] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 134.049412][ T9749] syzkaller1: entered promiscuous mode [ 134.051795][ T9749] syzkaller1: entered allmulticast mode [ 134.319059][ T7598] usb 10-1: USB disconnect, device number 7 [ 134.656147][ T5943] usb 7-1: USB disconnect, device number 13 [ 134.661933][ T9778] batman_adv: batadv0: Adding interface: dummy0 [ 134.664599][ T9778] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.681446][ T9778] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 134.809755][ T9798] kvm: apic: phys broadcast and lowest prio [ 134.812713][ T9798] kvm: apic: phys broadcast and lowest prio [ 134.999662][ T9809] syzkaller1: entered promiscuous mode [ 135.003313][ T9809] syzkaller1: entered allmulticast mode [ 135.121593][ T5943] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 135.293262][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.298277][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.302164][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 135.304719][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.308641][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.314704][ T5943] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.318436][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.325259][ T5943] usb 7-1: config 0 descriptor?? [ 135.468269][ T9822] tipc: Started in network mode [ 135.471138][ T9822] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.478992][ T9822] tipc: Enabled bearer , priority 10 [ 135.491762][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 135.496786][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.504048][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.513101][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 135.517527][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 135.523558][ T34] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.527296][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.536719][ T34] hub 10-1:1.0: bad descriptor, ignoring hub [ 135.539382][ T34] hub 10-1:1.0: probe with driver hub failed with error -5 [ 135.543943][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 135.545902][ T34] cdc_wdm 10-1:1.0: skipping garbage [ 135.549485][ T34] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 135.553116][ T34] cdc_wdm 10-1:1.0: Unknown control protocol [ 135.554697][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 135.562876][ T9827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.640813][ T34] kernel write not supported for file [eventfd] (pid: 34 comm: kworker/3:0) [ 135.742191][ T5943] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 135.750308][ T5943] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 135.942658][ T24] usb 7-1: USB disconnect, device number 14 [ 136.052415][ T1022] usb 10-1: USB disconnect, device number 8 [ 136.271048][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 136.274167][ T9855] netlink: 'syz.4.1628': attribute type 5 has an invalid length. [ 136.276922][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 136.281942][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 136.284763][ T9855] netlink: 'syz.4.1628': attribute type 5 has an invalid length. [ 136.287201][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 136.473365][ T6037] tipc: Node number set to 2886997162 [ 137.237835][ T9914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1656'. [ 137.404656][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.407272][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.569513][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 137.572666][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 137.674358][ T9946] tap0: tun_chr_ioctl cmd 1074025675 [ 137.676194][ T9946] tap0: persist enabled [ 137.678275][ T9946] tap0: tun_chr_ioctl cmd 1074025675 [ 137.680121][ T9946] tap0: persist disabled [ 137.757086][ T9842] Set syz1 is full, maxelem 65536 reached [ 137.799342][ T9956] lo: Caught tx_queue_len zero misconfig [ 138.031899][ T9974] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1681'. [ 138.147147][ T9984] netlink: 'syz.5.1687': attribute type 7 has an invalid length. [ 138.150565][ T9984] netlink: 'syz.5.1687': attribute type 8 has an invalid length. [ 138.156034][ T9984] netlink: 'syz.5.1687': attribute type 7 has an invalid length. [ 138.181800][ T6037] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 138.342170][ T6037] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 138.348376][ T6037] usb 9-1: can't read configurations, error -71 [ 138.428995][ T73] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.433268][ T73] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.436933][ T73] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.440554][ T73] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.081307][T10026] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 139.432488][T10047] __nla_validate_parse: 3 callbacks suppressed [ 139.432504][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 139.756713][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 139.901726][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 139.901742][ T40] audit: type=1326 audit(1766258823.108:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 139.919340][ T40] audit: type=1326 audit(1766258823.108:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 139.931840][ T6033] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 139.938608][ T40] audit: type=1326 audit(1766258823.108:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 139.949109][ T40] audit: type=1326 audit(1766258823.118:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 139.958601][ T40] audit: type=1326 audit(1766258823.118:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 139.967691][ T40] audit: type=1326 audit(1766258823.118:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 139.977061][ T40] audit: type=1326 audit(1766258823.118:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 139.986383][ T40] audit: type=1326 audit(1766258823.118:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 139.995475][ T40] audit: type=1326 audit(1766258823.118:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 140.005380][ T40] audit: type=1326 audit(1766258823.118:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.1.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6598 code=0x7ffc0000 [ 140.040898][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1734'. [ 140.085137][ T6033] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.090033][ T6033] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.094885][ T6033] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.098946][ T6033] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.104568][ T6033] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.108307][ T6033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.113706][ T6033] usb 10-1: config 0 descriptor?? [ 140.325987][T10107] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 140.527149][ T6033] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 140.536211][ T6033] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 140.801623][ T6033] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 140.951597][ T6033] usb 7-1: Using ep0 maxpacket: 8 [ 140.955333][ T6033] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.959222][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.963201][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.967141][ T6033] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.972308][ T6033] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.975844][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.041798][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 141.189201][ T6033] usb 7-1: GET_CAPABILITIES returned 0 [ 141.191749][ T6033] usbtmc 7-1:16.0: can't read capabilities [ 141.203203][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.206453][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 141.210431][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.213375][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.215987][ T34] usb 9-1: Product: syz [ 141.217374][ T34] usb 9-1: Manufacturer: syz [ 141.218894][ T34] usb 9-1: SerialNumber: syz [ 141.222415][ T34] usb 9-1: config 0 descriptor?? [ 141.228749][ T34] usb 9-1: selecting invalid altsetting 0 [ 141.393207][ T34] usb 7-1: USB disconnect, device number 15 [ 141.431862][ T6037] usb 9-1: USB disconnect, device number 10 [ 141.981268][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 142.183125][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 142.190582][ T61] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 142.194892][ T222] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 142.593307][ T1022] usb 10-1: USB disconnect, device number 9 [ 143.131088][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 143.152446][T10202] bond3: Invalid ad_actor_system MAC address. [ 143.155197][T10202] bond3: option ad_actor_system: invalid value (68719607821) [ 143.162688][T10202] bond3 (unregistering): Released all slaves [ 143.507959][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1796'. [ 143.684581][T10233] trusted_key: syz.1.1800 sent an empty control message without MSG_MORE. [ 143.733027][T10235] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 143.781614][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 143.941774][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 143.945534][ T34] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.949473][ T34] usb 7-1: config 0 has no interface number 0 [ 143.952799][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.957700][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.963411][ T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.968048][ T34] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.973465][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.977222][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.982698][ T34] usb 7-1: config 0 descriptor?? [ 143.988499][ T34] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.196150][ T6037] usb 7-1: USB disconnect, device number 16 [ 144.201598][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.201695][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 144.201913][ T6037] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 144.611611][ T7598] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 144.686534][T10257] loop6: detected capacity change from 0 to 524287999 [ 144.793465][ T7598] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.797532][ T7598] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.803278][ T7598] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.807061][ T7598] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.958524][T10265] syzkaller1: entered promiscuous mode [ 144.960916][T10265] syzkaller1: entered allmulticast mode [ 145.029385][ T7598] usb 9-1: usb_control_msg returned -32 [ 145.032409][ T7598] usbtmc 9-1:16.0: can't read capabilities [ 145.251463][T10276] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1818'. [ 145.811675][ T6037] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 145.868012][T10298] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1828'. [ 145.986052][ T6037] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.991012][ T6037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 145.995831][ T6037] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.000439][ T6037] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.006225][ T6037] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.010198][ T6037] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.015755][ T6037] usb 10-1: config 0 descriptor?? [ 146.018648][T10290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 146.049674][T10306] sock: sock_set_timeout: `syz.2.1832' (pid 10306) tries to set negative timeout [ 146.445234][ T6037] hid_parser_main: 33 callbacks suppressed [ 146.445252][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.450997][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.454454][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.457547][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.460621][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.464445][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.467558][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.470654][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.473844][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.476972][ T6037] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 146.484961][ T6037] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 146.502870][T10316] binder_alloc: binder_alloc_mmap_handler: 10315 80ffd000-80ffe000 already mapped failed -16 [ 146.663499][ T6037] usb 10-1: USB disconnect, device number 10 [ 146.853463][T10330] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 146.856738][T10330] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 146.859909][T10330] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 147.382024][ T7598] usb 9-1: USB disconnect, device number 11 [ 147.401708][ T6037] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 147.653326][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 147.856470][T10388] syzkaller1: entered promiscuous mode [ 147.858822][T10388] syzkaller1: entered allmulticast mode [ 147.864116][T10388] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 147.992376][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 148.141655][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 148.145561][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.150220][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.154652][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.158748][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.165156][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.168921][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.302681][ T6037] usb 7-1: Using ep0 maxpacket: 8 [ 148.306438][ T6037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.310921][ T6037] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.315273][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.324692][ T6037] usb 7-1: config 0 descriptor?? [ 148.380505][ T34] usb 9-1: GET_CAPABILITIES returned 0 [ 148.383280][ T34] usbtmc 9-1:16.0: can't read capabilities [ 148.535193][ T6037] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 148.582712][ T1022] usb 9-1: USB disconnect, device number 12 [ 148.936814][ T6037] usb 7-1: USB disconnect, device number 17 [ 149.122722][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1874'. [ 149.371707][ T1022] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.394415][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 149.394431][ T40] audit: type=1326 audit(1766258832.598:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.421658][ T40] audit: type=1326 audit(1766258832.598:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.430646][ T40] audit: type=1326 audit(1766258832.618:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.439910][ T40] audit: type=1326 audit(1766258832.618:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.449283][ T40] audit: type=1326 audit(1766258832.618:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.458570][ T40] audit: type=1326 audit(1766258832.618:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.467512][ T40] audit: type=1326 audit(1766258832.618:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.477341][ T40] audit: type=1326 audit(1766258832.618:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.486968][ T40] audit: type=1326 audit(1766258832.618:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.496138][ T40] audit: type=1326 audit(1766258832.618:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.5.1885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 149.512589][T10422] kvm: user requested TSC rate below hardware speed [ 149.533279][ T1022] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.537882][ T1022] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.551566][ T1022] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.554541][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.562954][T10398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.572327][ T1022] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.573010][T10430] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1890'. [ 149.575291][T10428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1889'. [ 149.581451][T10430] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1890'. [ 149.785278][ T1022] usb 6-1: USB disconnect, device number 14 [ 149.789610][T10449] loop6: detected capacity change from 0 to 2560 [ 149.792383][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.795902][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.798436][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.800989][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.803886][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.807231][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.810025][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.812884][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.815354][T10449] ldm_validate_partition_table(): Disk read failed. [ 149.817471][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.819920][T10449] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.823878][T10449] Dev loop6: unable to read RDB block 0 [ 149.825715][T10449] loop6: unable to read partition table [ 149.827618][T10449] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 149.988045][T10465] input: syz1 as /devices/virtual/input/input30 [ 150.507279][T10502] syzkaller1: entered promiscuous mode [ 150.509699][T10502] syzkaller1: entered allmulticast mode [ 150.761906][T10510] syzkaller1: entered allmulticast mode [ 151.058508][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 151.061974][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 151.801939][ T1022] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 151.828583][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 151.963445][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.966900][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.970150][ T1022] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.974465][ T1022] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.977331][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.981237][ T1022] usb 6-1: config 0 descriptor?? [ 152.181694][ T7598] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 152.333141][ T7598] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.336581][ T7598] usb 9-1: config 0 has no interface number 0 [ 152.339231][ T7598] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.343943][ T7598] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 152.348379][ T7598] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.352299][ T7598] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.357533][ T7598] usb 9-1: config 0 descriptor?? [ 152.360211][T10563] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.366665][ T7598] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 152.388681][ T1022] hid_parser_main: 5 callbacks suppressed [ 152.388692][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.392979][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.395291][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.397614][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.400046][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.402722][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.405008][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.407231][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.409840][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.412748][ T1022] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 152.417035][ T1022] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.568762][ T6037] usb 9-1: USB disconnect, device number 13 [ 152.588349][ T34] usb 6-1: USB disconnect, device number 15 [ 152.921295][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 153.201702][ T6037] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 153.318813][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1971'. [ 153.353585][ T6037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.358349][ T6037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.363170][ T6037] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.368544][ T6037] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.386333][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.395870][ T6037] usb 7-1: config 0 descriptor?? [ 153.665741][T10631] netlink: 'syz.1.1984': attribute type 34 has an invalid length. [ 153.832993][ T6037] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 155.923655][ T7598] usb 7-1: USB disconnect, device number 18 [ 156.044400][T10667] geneve2: entered promiscuous mode [ 156.343346][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1997'. [ 156.777931][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 156.997992][T10720] geneve2: entered promiscuous mode [ 156.999683][T10720] geneve2: entered allmulticast mode [ 157.133320][T10726] pim6reg: entered allmulticast mode [ 157.142319][T10726] team0: entered allmulticast mode [ 157.144543][T10726] team_slave_0: entered allmulticast mode [ 157.147018][T10726] team_slave_1: entered allmulticast mode [ 157.150188][T10726] team0: left allmulticast mode [ 157.152503][T10726] team_slave_0: left allmulticast mode [ 157.154925][T10726] team_slave_1: left allmulticast mode [ 157.158078][T10726] pim6reg: left allmulticast mode [ 157.948383][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 158.001138][T10756] input: syz1 as /devices/virtual/input/input31 [ 158.004123][T10756] input: failed to attach handler leds to device input31, error: -6 [ 158.203817][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2035'. [ 158.359571][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 158.359587][ T40] audit: type=1326 audit(1766258841.558:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 158.371394][T10783] erspan0: entered promiscuous mode [ 158.371459][ T40] audit: type=1326 audit(1766258841.568:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 158.378976][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 158.383108][ T40] audit: type=1326 audit(1766258841.588:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.397494][ T40] audit: type=1326 audit(1766258841.608:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 158.418540][ T40] audit: type=1326 audit(1766258841.608:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 158.432145][ T40] audit: type=1326 audit(1766258841.608:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.451635][ T40] audit: type=1326 audit(1766258841.608:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.460747][ T40] audit: type=1326 audit(1766258841.608:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.470083][ T40] audit: type=1326 audit(1766258841.608:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.479132][ T40] audit: type=1326 audit(1766258841.608:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 158.818570][T10804] vlan2: entered allmulticast mode [ 158.820787][T10804] macvtap0: entered allmulticast mode [ 158.871793][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 159.041620][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 159.053181][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.057335][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.060978][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 159.065845][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 159.070361][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 159.074242][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.083440][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 159.085930][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 159.089217][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 159.091395][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 159.095641][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 159.098194][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 159.603016][ T24] usb 7-1: USB disconnect, device number 19 [ 160.151656][ T7601] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 160.306080][ T7601] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.310861][ T7601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.315717][ T7601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.319676][ T7601] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.325111][ T7601] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.328717][ T7601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.334440][ T7601] usb 6-1: config 0 descriptor?? [ 160.749045][ T7601] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 160.757805][ T7601] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 161.500687][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.503588][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.507908][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.513954][T10879] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.525482][T10879] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 161.552521][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.556849][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.560717][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.564818][T10879] syzkaller0 speed is unknown, defaulting to 1000 [ 161.838283][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 161.995214][T10899] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2096'. [ 162.139818][T10831] Set syz1 is full, maxelem 65536 reached [ 162.861776][ T7600] usb 6-1: USB disconnect, device number 16 [ 163.514918][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 163.564291][T10971] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 163.567585][T10971] netlink: 'syz.4.2127': attribute type 6 has an invalid length. [ 163.570831][T10971] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2127'. [ 163.747266][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 163.751838][T10985] netlink: 'syz.2.2133': attribute type 1 has an invalid length. [ 163.755110][T10985] netlink: 'syz.2.2133': attribute type 2 has an invalid length. [ 163.961460][T11005] loop6: detected capacity change from 0 to 524287999 [ 164.032310][ T7600] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 164.104660][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 164.221892][ T7600] usb 10-1: Using ep0 maxpacket: 8 [ 164.225704][ T7600] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.229159][ T7600] usb 10-1: config 0 has no interface number 0 [ 164.232048][ T7600] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.236911][ T7600] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.241990][ T7600] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.246507][ T7600] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.252036][ T7600] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.256006][ T7600] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.272200][ T7600] usb 10-1: config 0 descriptor?? [ 164.278953][ T7600] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.331955][T11035] dvmrp8: left allmulticast mode [ 164.447423][T11043] sock: sock_set_timeout: `syz.1.2158' (pid 11043) tries to set negative timeout [ 164.503289][ T34] usb 10-1: USB disconnect, device number 11 [ 164.508165][ T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 164.581564][T11052] loop6: detected capacity change from 0 to 524287999 [ 165.083375][T11061] syzkaller0 speed is unknown, defaulting to 1000 [ 165.490508][T11090] autofs: Invalid uid '0x00000000ffffffff' [ 165.629260][T11107] netlink: 'syz.5.2184': attribute type 2 has an invalid length. [ 165.632678][T11107] netlink: 'syz.5.2184': attribute type 2 has an invalid length. [ 165.635536][T11107] netlink: 'syz.5.2184': attribute type 2 has an invalid length. [ 165.883209][T11134] netlink: 'syz.4.2196': attribute type 2 has an invalid length. [ 165.886290][T11134] netlink: 'syz.4.2196': attribute type 2 has an invalid length. [ 165.888889][T11134] netlink: 'syz.4.2196': attribute type 2 has an invalid length. [ 166.252386][ T1022] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 166.416889][ T1022] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.431627][ T1022] usb 10-1: config 0 interface 0 has no altsetting 0 [ 166.438543][ T1022] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.442820][ T1022] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.450975][ T1022] usb 10-1: Product: syz [ 166.453024][ T1022] usb 10-1: Manufacturer: syz [ 166.455440][ T1022] usb 10-1: SerialNumber: syz [ 166.464269][ T1022] usb 10-1: config 0 descriptor?? [ 166.473528][ T1022] usb 10-1: selecting invalid altsetting 0 [ 166.544795][T11162] syzkaller0 speed is unknown, defaulting to 1000 [ 166.673699][ T1022] usb 10-1: USB disconnect, device number 12 [ 167.127316][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 167.127333][ T40] audit: type=1326 audit(1766259106.327:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 167.139074][ T40] audit: type=1326 audit(1766259106.327:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.148691][ T40] audit: type=1326 audit(1766259106.327:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.157657][ T40] audit: type=1326 audit(1766259106.327:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.166444][ T40] audit: type=1326 audit(1766259106.327:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.175258][ T40] audit: type=1326 audit(1766259106.327:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.184224][ T40] audit: type=1326 audit(1766259106.327:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.193165][ T40] audit: type=1326 audit(1766259106.327:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.208017][ T40] audit: type=1326 audit(1766259106.327:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.217088][ T40] audit: type=1326 audit(1766259106.327:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.2225" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71598 code=0x7ffc0000 [ 167.261668][ T1022] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 167.282138][T11201] Invalid ELF header magic: != ELF [ 167.334820][ T24] hid_parser_main: 5 callbacks suppressed [ 167.334838][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.339905][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.343001][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.345200][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.347326][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.349470][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.351925][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.354141][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.356246][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.358362][ T24] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 167.361263][ T24] hid-generic 00A0:0006:0003.0018: hidraw1: HID v0.05 Device [syz1] on syz0 [ 167.433322][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.437854][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.443772][ T1022] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.449035][ T1022] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.453179][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.458438][ T1022] usb 6-1: config 0 descriptor?? [ 167.591624][ T34] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 167.742876][ T34] usb 7-1: config 0 has an invalid interface number: 212 but max is 0 [ 167.745513][ T34] usb 7-1: config 0 has no interface number 0 [ 167.747504][ T34] usb 7-1: config 0 interface 212 has no altsetting 0 [ 167.751227][ T34] usb 7-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 167.754304][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.756910][ T34] usb 7-1: Product: syz [ 167.758277][ T34] usb 7-1: Manufacturer: syz [ 167.759876][ T34] usb 7-1: SerialNumber: syz [ 167.762762][ T34] usb 7-1: config 0 descriptor?? [ 167.766000][ T34] HFC-S_USB 7-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 167.886850][ T1022] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 167.967641][ T7600] usb 7-1: USB disconnect, device number 20 [ 167.976337][T11215] 9pnet: p9_errstr2errno: server reported unknown error [ 168.132238][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 168.281569][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 168.285193][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.288665][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.292928][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 168.297311][ T24] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 168.300120][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.304764][ T24] usb 9-1: config 0 descriptor?? [ 168.718229][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 168.728942][ T24] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 168.732135][ T24] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 168.871640][ T7601] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 168.914719][T11213] random: crng reseeded on system resumption [ 168.924202][ T34] usb 9-1: USB disconnect, device number 14 [ 168.924281][ T6026] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 168.932297][ T6026] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 168.935791][ T6026] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 168.939203][ T6026] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 168.943112][ T34] ------------[ cut here ]------------ [ 168.945304][ T34] workqueue: work disable count underflowed [ 168.947762][ T34] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#3: kworker/3:0/34 [ 168.951720][ T34] Modules linked in: [ 168.953659][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.958007][ T34] Tainted: [L]=SOFTLOCKUP [ 168.959786][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.964166][ T34] Workqueue: usb_hub_wq hub_event [ 168.966293][ T34] RIP: 0010:enable_work+0x2ca/0x310 [ 168.968438][ T34] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 f6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 6d 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 f4 cf a2 00 e9 f7 fd ff [ 168.976277][ T34] RSP: 0018:ffffc900005cf348 EFLAGS: 00010093 [ 168.978780][ T34] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933 SYZFAIL: failed to recv rpc [ 168.981970][ T34] RDX: ffff88801c37c980 RSI: ffffffff81846b03 RDI: ffffffff908bd8e0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.985378][ T34] RBP: ffff88804b21c738 R08: 0000000000000005 R09: 0000000000000000 [ 168.988708][ T34] R10: 0000000000000000 R11: ffff88801c37d4b0 R12: 1ffff920000b9e6a [ 168.991948][ T34] R13: ffffffff8fc51c3f R14: ffff88804b21c698 R15: ffff88804b21c730 [ 168.995181][ T34] FS: 0000000000000000(0000) GS:ffff8880979fc000(0000) knlGS:0000000000000000 [ 168.998823][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.001813][ T34] CR2: 00000000f747a068 CR3: 00000000499e2000 CR4: 0000000000352ef0 [ 169.005043][ T34] DR0: 0000000000000007 DR1: 00000000000001ff DR2: 0000000000000002 [ 169.008269][ T34] DR3: 000000000000006a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 169.011516][ T34] Call Trace: [ 169.012894][ T34] [ 169.014136][ T34] ? __pfx_enable_work+0x10/0x10 [ 169.016181][ T34] cancel_delayed_work_sync+0x96/0xf0 [ 169.018380][ T34] thermal_zone_device_unregister+0x28e/0x4d0 [ 169.020905][ T34] ? __pfx_shield_remove+0x10/0x10 [ 169.023041][ T34] power_supply_unregister+0x10a/0x150 [ 169.025256][ T34] shield_remove+0x75/0x130 [ 169.027156][ T34] ? __pfx_shield_remove+0x10/0x10 [ 169.029248][ T34] hid_device_remove+0xd1/0x260 [ 169.031303][ T34] ? __pfx_hid_device_remove+0x10/0x10 [ 169.033569][ T34] device_remove+0xcb/0x170 [ 169.034594][ T7601] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.035512][ T34] device_release_driver_internal+0x44b/0x620 [ 169.035553][ T34] bus_remove_device+0x22f/0x450 [ 169.041559][ T7601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 169.042641][ T34] device_del+0x396/0x9f0 [ 169.044743][ T7601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.049232][ T34] ? __pfx_device_del+0x10/0x10 [ 169.050656][ T7601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.055113][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 169.055151][ T34] hid_destroy_device+0x19c/0x240 [ 169.055180][ T34] usbhid_disconnect+0xa0/0xe0 [ 169.061747][ T7601] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.061798][ T34] usb_unbind_interface+0x1dd/0x9e0 [ 169.063956][ T7601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.065997][ T34] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 169.066026][ T34] ? __pfx_usb_unbind_interface+0x10/0x10 [ 169.081482][ T34] device_remove+0x125/0x170 [ 169.083418][ T34] device_release_driver_internal+0x44b/0x620 [ 169.085921][ T34] bus_remove_device+0x22f/0x450 [ 169.087951][ T34] device_del+0x396/0x9f0 [ 169.089778][ T34] ? __pfx_device_del+0x10/0x10 [ 169.091826][ T34] ? kobject_put+0x218/0x6f0 [ 169.093734][ T34] usb_disable_device+0x355/0x820 [ 169.095847][ T34] usb_disconnect+0x2e1/0x9e0 [ 169.097752][ T34] hub_event+0x1d84/0x52f0 [ 169.099626][ T34] ? __lock_acquire+0x436/0x2890 [ 169.101673][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 169.103860][ T34] ? __pfx_hub_event+0x10/0x10 [ 169.105825][ T34] ? interval_tree_iter_first+0x1c0/0x250 [ 169.108152][ T34] ? finish_task_switch.isra.0+0x202/0xbd0 [ 169.110644][ T34] ? rcu_is_watching+0x12/0xc0 [ 169.112641][ T34] process_one_work+0x9ba/0x1b20 [ 169.114713][ T34] ? __pfx_process_one_work+0x10/0x10 [ 169.116942][ T34] ? assign_work+0x1a0/0x250 [ 169.118867][ T34] worker_thread+0x6c8/0xf10 [ 169.120707][ T34] ? __pfx_worker_thread+0x10/0x10 [ 169.122417][ T7601] usb 7-1: config 0 descriptor?? [ 169.122838][ T34] kthread+0x3c5/0x780 [ 169.125701][T11234] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.126587][ T34] ? __pfx_kthread+0x10/0x10 [ 169.131321][ T34] ? rcu_is_watching+0x12/0xc0 [ 169.133275][ T34] ? __pfx_kthread+0x10/0x10 [ 169.135256][ T34] ret_from_fork+0x983/0xb10 [ 169.137238][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 169.139300][ T34] ? __switch_to+0x7af/0x10d0 [ 169.141253][ T34] ? __pfx_kthread+0x10/0x10 [ 169.143156][ T34] ret_from_fork_asm+0x1a/0x30 [ 169.145166][ T34] [ 169.146473][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.149435][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.153773][ T34] Tainted: [L]=SOFTLOCKUP [ 169.155575][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.159905][ T34] Workqueue: usb_hub_wq hub_event [ 169.162014][ T34] Call Trace: [ 169.163404][ T34] [ 169.164689][ T34] dump_stack_lvl+0x3d/0x1f0 [ 169.166557][ T34] vpanic+0x640/0x6f0 [ 169.168243][ T34] ? enable_work+0x2ca/0x310 [ 169.170193][ T34] panic+0xca/0xd0 [ 169.171771][ T34] ? __pfx_panic+0x10/0x10 [ 169.173652][ T34] ? check_panic_on_warn+0x1f/0xb0 [ 169.175799][ T34] check_panic_on_warn+0xab/0xb0 [ 169.177834][ T34] __warn+0x108/0x3c0 [ 169.179466][ T34] __report_bug+0x2a0/0x520 [ 169.181337][ T34] ? enable_work+0x2ca/0x310 [ 169.183286][ T34] ? __pfx___report_bug+0x10/0x10 [ 169.185362][ T34] ? __wait_for_common+0x1e0/0x4e0 [ 169.187496][ T34] ? enable_work+0x2c3/0x310 [ 169.189412][ T34] ? enable_work+0xf3/0x310 [ 169.191334][ T34] ? find_held_lock+0x2b/0x80 [ 169.193302][ T34] report_bug_entry+0xe1/0x290 [ 169.195337][ T34] ? enable_work+0x2ca/0x310 [ 169.197297][ T34] handle_bug+0x18a/0x260 [ 169.199058][ T34] exc_invalid_op+0x17/0x50 [ 169.200937][ T34] asm_exc_invalid_op+0x1a/0x20 [ 169.202987][ T34] RIP: 0010:enable_work+0x2ca/0x310 [ 169.205165][ T34] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 f6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 6d 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 f4 cf a2 00 e9 f7 fd ff [ 169.212866][ T34] RSP: 0018:ffffc900005cf348 EFLAGS: 00010093 [ 169.215375][ T34] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933 [ 169.218611][ T34] RDX: ffff88801c37c980 RSI: ffffffff81846b03 RDI: ffffffff908bd8e0 [ 169.221793][ T34] RBP: ffff88804b21c738 R08: 0000000000000005 R09: 0000000000000000 [ 169.224993][ T34] R10: 0000000000000000 R11: ffff88801c37d4b0 R12: 1ffff920000b9e6a [ 169.228204][ T34] R13: ffffffff8fc51c3f R14: ffff88804b21c698 R15: ffff88804b21c730 [ 169.231424][ T34] ? enable_work+0xf3/0x310 [ 169.233313][ T34] ? enable_work+0x2c3/0x310 [ 169.235221][ T34] ? enable_work+0x2c3/0x310 [ 169.237132][ T34] ? __pfx_enable_work+0x10/0x10 [ 169.239171][ T34] cancel_delayed_work_sync+0x96/0xf0 [ 169.241389][ T34] thermal_zone_device_unregister+0x28e/0x4d0 [ 169.243858][ T34] ? __pfx_shield_remove+0x10/0x10 [ 169.246021][ T34] power_supply_unregister+0x10a/0x150 [ 169.248253][ T34] shield_remove+0x75/0x130 [ 169.250165][ T34] ? __pfx_shield_remove+0x10/0x10 [ 169.252232][ T34] hid_device_remove+0xd1/0x260 [ 169.254278][ T34] ? __pfx_hid_device_remove+0x10/0x10 [ 169.256550][ T34] device_remove+0xcb/0x170 [ 169.258453][ T34] device_release_driver_internal+0x44b/0x620 [ 169.260936][ T34] bus_remove_device+0x22f/0x450 [ 169.263010][ T34] device_del+0x396/0x9f0 [ 169.264791][ T34] ? __pfx_device_del+0x10/0x10 [ 169.266795][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 169.268880][ T34] hid_destroy_device+0x19c/0x240 [ 169.270988][ T34] usbhid_disconnect+0xa0/0xe0 [ 169.272937][ T34] usb_unbind_interface+0x1dd/0x9e0 [ 169.275091][ T34] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 169.277424][ T34] ? __pfx_usb_unbind_interface+0x10/0x10 [ 169.279782][ T34] device_remove+0x125/0x170 [ 169.281684][ T34] device_release_driver_internal+0x44b/0x620 [ 169.284149][ T34] bus_remove_device+0x22f/0x450 [ 169.286172][ T34] device_del+0x396/0x9f0 [ 169.287955][ T34] ? __pfx_device_del+0x10/0x10 [ 169.290012][ T34] ? kobject_put+0x218/0x6f0 [ 169.291934][ T34] usb_disable_device+0x355/0x820 [ 169.294024][ T34] usb_disconnect+0x2e1/0x9e0 [ 169.295964][ T34] hub_event+0x1d84/0x52f0 [ 169.297794][ T34] ? __lock_acquire+0x436/0x2890 [ 169.299819][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 169.301978][ T34] ? __pfx_hub_event+0x10/0x10 [ 169.303903][ T34] ? interval_tree_iter_first+0x1c0/0x250 [ 169.306222][ T34] ? finish_task_switch.isra.0+0x202/0xbd0 [ 169.308611][ T34] ? rcu_is_watching+0x12/0xc0 [ 169.310589][ T34] process_one_work+0x9ba/0x1b20 [ 169.312617][ T34] ? __pfx_process_one_work+0x10/0x10 [ 169.314817][ T34] ? assign_work+0x1a0/0x250 [ 169.316701][ T34] worker_thread+0x6c8/0xf10 [ 169.318625][ T34] ? __pfx_worker_thread+0x10/0x10 [ 169.320673][ T34] kthread+0x3c5/0x780 [ 169.322377][ T34] ? __pfx_kthread+0x10/0x10 [ 169.324267][ T34] ? rcu_is_watching+0x12/0xc0 [ 169.326276][ T34] ? __pfx_kthread+0x10/0x10 [ 169.328173][ T34] ret_from_fork+0x983/0xb10 [ 169.330098][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 169.332221][ T34] ? __switch_to+0x7af/0x10d0 [ 169.334179][ T34] ? __pfx_kthread+0x10/0x10 [ 169.336093][ T34] ret_from_fork_asm+0x1a/0x30 [ 169.338088][ T34] [ 169.340099][ T34] Kernel Offset: disabled [ 169.341915][ T34] Rebooting in 86400 seconds..